最新的Cloud DevOps Engineer認證 Professional-Cloud-DevOps-Engineer考試題庫

問題1

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach.
What should you do?

A. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.

B. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.

C. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it

D. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.

正確答案: B

問題2

Your company runs services by using Google Kubernetes Engine (GKE). The GKE clusters in the development environment run applications with verbose logging enabled. Developers view logs by using the kubect1 logs command and do not use Cloud Logging. Applications do not have a uniform logging structure defined. You need to minimize the costs associated with application logging while still collecting GKE operational logs.
What should you do?

A. Run the gcloud logging sinks update _Defau1t --disabled command in the project associated with the development environment.

B. Add the severity >= DEBUG resource. type "k83 container" exclusion filter to the Default logging sink in the project associated with the development environment.

C. Run the gcloud container clusters update --logging-SYSTEM command for the development cluster.

D. Run the gcloud container clusters update logging=WORKLOAD command for the development cluster.

正確答案: C

問題3

Some of your production services are running in Google Kubernetes Engine (GKE) in the eu-west-1 region.
Your build system runs in the us-west-1 region. You want to push the container images from your build system to a scalable registry to maximize the bandwidth for transferring the images to the cluster. What should you do?

A. Push the images to Google Container Registry (GCR) using the us.gcr.io hostname.

B. Push the images to Google Container Registry (GCR) using the eu.gcr.io hostname.

C. Push the images to Google Container Registry (GCR) using the gcr.io hostname.

D. Push the images to a private image registry running on a Compute Engine instance in the eu-west-1 region.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

You support a service with a well-defined Service Level Objective (SLO). Over the previous 6 months, your service has consistently met its SLO and customer satisfaction has been consistently high. Most of your service's operations tasks are automated and few repetitive tasks occur frequently. You want to optimize the balance between reliability and deployment velocity while following site reliability engineering best practices.
What should you do? (Choose two.)

A. Change the implementation of your Service Level Indicators (SLIs) to increase coverage.

B. Increase the service's deployment velocity and/or risk.

C. Shift engineering time to other services that need more reliability.

D. Make the service's SLO more strict.

E. Get the product team to prioritize reliability work over new features.

正確答案: B,C

說明：（僅 VCESoft 成員可見）

問題5

You are designing a new Google Cloud organization for a client. Your client is concerned with the risks associated with long-lived credentials created in Google Cloud. You need to design a solution to completely eliminate the risks associated with the use of JSON service account keys while minimizing operational overhead. What should you do?

A. Apply the constraints/iam. disableServiceAccountKeyUp10ad constraint to the organization.

B. Apply the constraints/iam.disableserviceAccountKeycreation constraint to the organization.

C. Use custom versions of predefined roles to exclude all iam.serviceAccountKeys. * service account role permissions.

D. Grant the roles/ iam.serviceAccountKeyAdmin IAM role to organization administrators only.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題6

Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?

A. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.

B. Create one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.

C. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.

D. Create one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題7

You are building and deploying a microservice on Cloud Run for your organization Your service is used by many applications internally You are deploying a new release, and you need to test the new version extensively in the staging and production environments You must minimize user and developer impact. What should you do?

A. Deploy a new environment with the green tag to use as the staging environment Deploy the new version of the service to the green environment and test the new version If the tests pass, send all traffic to the green environment and delete the existing staging environment Repeat for the production environment

B. Deploy the new version of the service to the staging environment Split the traffic, and allow 50% of traffic through to the latest version Test the latest version If the test passes, send all traffic to the latest version Repeat for the production environment

C. Deploy the new version of the service to the staging environment Split the traffic, and allow 1 % of traffic through to the latest version Test the latest version If the test passes gradually roll out the latest version to the staging and production environments

D. Deploy the new version of the service to the staging environment with a new-release tag without serving traffic Test the new-release version If the test passes; gradually roll out this tagged version Repeat for the production environment

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

You support a large service with a well-defined Service Level Objective (SLO). The development team deploys new releases of the service multiple times a week. If a major incident causes the service to miss its SLO, you want the development team to shift its focus from working on features to improving service reliability. What should you do before a major incident occurs?

A. Negotiate with the product team to always prioritize service reliability over releasing new features.

B. Develop an appropriate error budget policy in cooperation with all service stakeholders.

C. Negotiate with the development team to reduce the release frequency to no more than once a week.

D. Add a plugin to your Jenkins pipeline that prevents new releases whenever your service is out of SLO.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題9

You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?

A. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.

B. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.

C. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.

D. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題10

You are responsible for creating and modifying the Terraform templates that define your Infrastructure.
Because two new engineers will also be working on the same code, you need to define a process and adopt a tool that will prevent you from overwriting each other's code. You also want to ensure that you capture all updates in the latest version. What should you do?

A. * Store your code in a Git-based version control system.* Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code.* Establish a process where the fully integrated code in the repository becomes the latest master version.

B. * Store your code in a Git-based version control system.* Establish a process that allows developers to merge their own changes at the end of each day.* Package and upload code lo a versioned Cloud Storage bucket as the latest master version.

C. * Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day, confirm that all changes have been captured in the files within the folder structure and create a new .zip archive with a predefined naming convention.* Upload the .zip archive to a versioned Cloud Storage bucket and accept it as the latest version.

D. * Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day. confirm that all changes have been captured in the files within the folder structure.* Rename the folder structure with a predefined naming convention that increments the version.

正確答案: A

問題11

You are configuring the frontend tier of an application deployed in Google Cloud The frontend tier is hosted in ngmx and deployed using a managed instance group with an Envoy-based external HTTP(S) load balancer in front The application is deployed entirely within the europe-west2 region: and only serves users based in the United Kingdom. You need to choose the most cost-effective network tier and load balancing configuration What should you use?

A. Premium Tier with a global load balancer

B. Standard Tier with a regional load balancer

C. Standard Tier with a global load balancer

D. Premium Tier with a regional load balancer

正確答案: D

說明：（僅 VCESoft 成員可見）

問題12

Your company runs applications in Google Kubernetes Engine (GKE). Several applications rely on ephemeral volumes. You noticed some applications were unstable due to the DiskPressure node condition on the worker nodes. You need to identify which Pods are causing the issue, but you do not have execute access to workloads and nodes.
What should you do?

A. Locate all the Pods with emptyDir volumes. use the df-h command to measure volume disk usage.

B. Check the metric by using Metrics Explorer.

C. Check the node/ephemeral_storage/used_bytes metric by using Metrics Explorer.

D. Locate all the Pods with emptyDir volumes. Use the du -sh * command to measure volume disk usage.

正確答案: C

說明：（僅 VCESoft 成員可見）

最新的Google Cloud Certified - Professional Cloud DevOps Engineer - Professional-Cloud-DevOps-Engineer免費考試真題

最新更新

站內鏈接

聯系我們