Question 1

Your team has recently deployed an NGINX-based application into Google Kubernetes Engine (GKE) and has exposed it to the public via an HTTP Google Cloud Load Balancer (GCLB) ingress. You want to scale the deployment of the application's frontend using an appropriate Service Level Indicator (SLI). What should you do?
A) Configure the horizontal pod autoscaler to use the average response time from the Liveness and Readiness probes.
B) Configure the vertical pod autoscaler in GKE and enable the cluster autoscaler to scale the cluster as pods expand.
C) Install the Stackdriver custom metrics adapter and configure a horizontal pod autoscaler to use the number of requests provided by the GCLB.
D) Expose the NGINX stats endpoint and configure the horizontal pod autoscaler to use the request metrics exposed by the NGINX deployment.

Accepted Answer

The answer of Your team has recently deployed an NGINX-based...

Question 2

You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?
A) Use the n1-highcpu-96 machine type in the configuration of the MIG.
B) Monitor results of Stackdriver Trace to determine the required amount of resources.
C) Validate that the resource requirements are within the available quota limits of each region.
D) Deploy the service in one region and use a global load balancer to route traffic to this region.

Accepted Answer

The answer of You need to deploy a new service...

Question 3

You need to reduce the cost of virtual machines (VM) for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?
A) A scalable in-memory caching system.
B) The organization's public-facing website.
C) A distributed, eventually consistent NoSQL database cluster with sufficient quorum.
D) A GPU-accelerated video rendering platform that retrieves and stores videos in a storage bucket.

Accepted Answer

The answer of You need to reduce the cost of...

Question 4

You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?
A) Download and configure a third-party integration between Stackdriver Monitoring and an SMS gateway. Ensure that your team members add their SMS/phone numbers to the external tool.
B) Select the Webhook notifications option for each alerting policy, and configure it to use a third-party integration tool. Ensure that your team members add their SMS/phone numbers to the external tool.
C) Ensure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list.
D) Configure a Slack notification for each alerting policy. Set up a Slack-to-SMS integration to send SMS messages when Slack messages are received. Ensure that your team members add their SMS/phone numbers to the external integration.

Accepted Answer

The answer of You support an application running on GCP...

Question 5

You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time. What should you do?
A) Link Stackdriver Logging as a source in Google Data Studio. Filter the logs on the cache misses.
B) Configure Stackdriver Profiler to identify and visualize when the cache misses occur based on the logs.
C) Create a logs-based metric in Stackdriver Logging and a dashboard for that metric in Stackdriver Monitoring.
D) Configure BigQuery as a sink for Stackdriver Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table.

Accepted Answer

Creating a logs-based metric in Stackdriver Logging allows you to directly visualize and monitor cache miss events over time using Stackdriver Monitoring.

Question 6

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
A) Configure the build system with protected branches that require pull request approval.
B) Use an Admission Controller to verify that incoming requests originate from approved sources.
C) Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
D) Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.

Accepted Answer

The answer of Your organization recently adopted a container-based workflow...

Question 7

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
A) Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
B) Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.
C) Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
D) Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.

Accepted Answer

The answer of Your application services run in Google Kubernetes...

Question 8

Your team uses Cloud Build for all CI/CD pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
A) Assign the Container Developer role to the Cloud Build service account.
B) Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
C) Create a new service account with the Container Developer role and use it to run Cloud Build.
D) Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.

Accepted Answer

The answer of Your team uses Cloud Build for all...

Exam 14: Professional Cloud DevOps Engineer

You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?

You need to reduce the cost of virtual machines (VM) for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?

You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?

You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time. What should you do?

Your application services run in Google Kubernetes Engine (GKE) . You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

Your team uses Cloud Build for all CI/CD pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE) . You need to authenticate to GKE while minimizing development effort. What should you do?