Question 1

As a Social impact investment platform company, you are deploying an application that requires access to sensitive information. What measures should you take to ensure that this information is encrypted and the chances of exposure are minimal in case of a breach? Additionally, which Google Cloud Services can be leveraged to achieve this goal?

Options :

A : Incorporate a Single sign-on (SSO) system to the application and ensure that no secrets are revealed to the application.

B : Frequently rotate encryption keys and keep them stored in Cloud Key Management Service (KMS).

C : During the creation of the instance, use an encrypted configuration management system to insert the secret.

D : Create a continuous build pipeline that generates various versions of the secret for every application instance.

Answer: B

Question 2

Your company processes IOT data at scale by using Pub/Sub, App Engine standard environment, and an application written in GO. You noticed that the performance inconsistently degrades at peak load. You could not reproduce this issue on your workstation. You need to continuously monitor the application in production to identify slow paths in the code. You want to minimize performance impact and management overhead. What should you do?

Install a continuous profiling tool into Compute Engine. Configure the application to send profiling data to the tool.

Options :

A :

Periodically run the go tool pprof command against the application instance. Analyze the results by using flame graphs.

B : Configure Cloud Profiler, and initialize the [email protected]/go/profiler library in the application.

C : Use Cloud Monitoring to assess the App Engine CPU utilization metric.

Answer: C

Question 3

How can normal or regular users be created in Kubernetes?

Options :

A : Through Kubernetes service accounts

B : By manually entering usernames and passwords

C : By an admin distributing private keys, with a file that contains a list of usernames and their associated passwords, or through external identity service providers

D : Through an API call

Answer: C

Question 4

Some of your production services are running in Google Kubernetes Engine (GKE) in the eu-west-1 region. Your build system runs in the us-west-1 region. You want to push the container images from your build system to a scalable registry to maximize the bandwidth for transferring the images to the cluster. What should you do?

Options :

A : Push the images to Google Container Registry (GCR) using the gcr.io hostname.

B : Push the images to Google Container Registry (GCR) using the us.gcr.io hostname.

C : Push the images to Google Container Registry (GCR) using the eu.gcr.io hostname.

D :

Push the images to a private image registry running on a Compute Engine instance in the eu-west-1 region.

Answer: C

Question 5

As an Language translation app company, you have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. What steps should you take to resolve the issue in line with Site Reliability Engineering practices?

Options :

A : The suggested solution would be to transfer the configuration YAML file to Cloud Storage and then utilize Error Reporting to detect and resolve the problem.

B : Modify the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.

C : Switch to manual artifact building and pushing by disabling the CI pipeline.

D : To identify and resolve the issue, perform a Git comparison of the past and present Cloud Build Configuration files.

Answer: D

Higher Test Marks with Free Online Professional-Cloud-DevOps-Engineer Exam Practice

Buying Options: