최신 Professional-Cloud-DevOps-Engineer 무료덤프 - Google Cloud Certified

문제1

You built a serverless application by using Cloud Run and deployed the application to your production environment You want to identify the resource utilization of the application for cost optimization What should you do?

A. Use Cloud Profiler with Ops Agent to monitor the CPU and memory utilization of the application

B. Use Cloud Ops to create logs-based metrics to monitor the resource utilization of the application

C. Use Cloud Trace with distributed tracing to monitor the resource utilization of the application

D. Use Cloud Monitoring to monitor the container CPU and memory utilization of the application

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Your company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project might accidentally delete the project, so a lien has been placed on the project. You need to design a solution to restrict Shared VPC project deletion to those with the resourcemanager.projects.updateLiens permission at the organization level. What should you do?

A. Instruct teams to only perform IAM permission management as code with Terraform.

B. Enable the compute.restrictXpnProjectLienRemoval organization policy constraint.

C. Enable VPC Service Controls for the container.googleapis.com API service.

D. Revoke the resourcemanager.projects.updateLiens permission from all users associated with the project.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You need to enforce several constraint templates across your Google Kubernetes Engine (GKE) clusters. The constraints include policy parameters, such as restricting the Kubernetes API. You must ensure that the policy parameters are stored in a GitHub repository and automatically applied when changes occur. What should you do?

A. When there is a change in GitHub, use a web hook to send a request to Anthos Service Mesh, and apply the change.

B. Configure Anthos Config Management with the GitHub repository. When there is a change in the repository, use Anthos Config Management to apply the change.

C. Set up a GitHub action to trigger Cloud Build when there is a parameter change. In Cloud Build, run a gcloud CLI command to apply the change.

D. Configure Config Connector with the GitHub repository. When there is a change in the repository, use Config Connector to apply the change.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Your company runs applications in Google Kubernetes Engine (GKE) that are deployed following a GitOps methodology.
Application developers frequently create cloud resources to support their applications. You want to give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices. You need to ensure that infrastructure as code reconciles periodically to avoid configuration drift.
What should you do?

A. Install and configure Config Connector in Google Kubernetes Engine (GKE).

B. Configure Cloud Build with a Terraform builder to execute plan and apply commands.

C. Create a Job resource with a Terraform docker image to execute terraforrm plan and terraform apply commands.

D. Create a Pod resource with a Terraform docker image to execute terraform plan and terraform apply commands.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

A. A synthetic client that periodically sends simulated user requests

B. GKE health checks for your application servers

C. Metrics exported from the application servers

D. Your application servers' logs

E. Instrumentation coded directly in the client

정답: A,E

문제6

You are running a web application deployed to a Compute Engine managed instance group Ops Agent is installed on all instances You recently noticed suspicious activity from a specific IP address You need to configure Cloud Monitoring to view the number of requests from that specific IP address with minimal operational overhead. What should you do?

A. Create a script to scrape the web server log Export the IP address request metrics to the Cloud Monitoring API

B. Update the application to export the IP address request metrics to the Cloud Monitoring API

C. Configure the Ops Agent with a logging receiver Create a logs-based metric

D. Configure the Ops Agent with a metrics receiver

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You support a service that recently had an outage. The outage was caused by a new release that exhausted the service memory resources. You rolled back the release successfully to mitigate the impact on users. You are now in charge of the post-mortem for the outage. You want to follow Site Reliability Engineering practices when developing the post-mortem. What should you do?

A. Focus on developing new features rather than avoiding the outages from recurring.

B. Use the Git history to find the related code commit. Prevent the engineer who made that commit from working on production services.

C. Plan individual meetings with all the engineers involved. Determine who approved and pushed the new release to production.

D. Focus on identifying the contributing causes of the incident rather than the individual responsible for the cause.

정답: D

문제8

You are building an application that runs on Cloud Run The application needs to access a third-party API by using an API key You need to determine a secure way to store and use the API key in your application by following Google-recommended practices What should you do?

A. Save the API key in Secret Manager as a secret Reference the secret as an environment variable in the Cloud Run application

B. Save the API key in Cloud Key Management Service (Cloud KMS) as a key Reference the key as an environment variable in the Cloud Run application

C. Save the API key in Secret Manager as a secret key Mount the secret key under the /sys/api_key directory and decrypt the key in the Cloud Run application

D. Encrypt the API key by using Cloud Key Management Service (Cloud KMS) and pass the key to Cloud Run as an environment variable Decrypt and use the key in Cloud Run

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Your team is building a service that performs compute-heavy processing on batches of data The data is processed faster based on the speed and number of CPUs on the machine These batches of data vary in size and may arrive at any time from multiple third-party sources You need to ensure that third partiesare able to upload their data securely. You want to minimize costs while ensuring that the data is processed as quickly as possible What should you do?

A. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provideappropriate Identity and Access Management (1AM) access to the bucket* Use Cloud Monitoring to detect new batches of data in the bucket and trigger a Cloud Function that processes the data* Set a Cloud Function to use the largest CPU possible to minimize the runtime of the processing

B. * Provide a secure file transfer protocol (SFTP) server on a Compute Engine instance so that thirdparties can upload batches of data and provide appropriate credentials to the server* Create a Cloud Function with a google.storage, object, finalize Cloud Storage trigger Write code so that the function can scale up a Compute Engine autoscaling managed instance group* Use an image pre-loaded with the data processing software that terminates the instances when processing completes

C. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provideappropriate Identity and Access Management (1AM) access to the bucket* Use a standard Google Kubernetes Engine (GKE) cluster and maintain two services one that processes the batches of data and one that monitors Cloud Storage for new batches of data* Stop the processing service when there are no batches of data to process

D. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provide appropriate identity and Access Management (1AM) access to the bucket* Create a Cloud Function with a google, storage, object .finalise Cloud Storage trigger Write code so that the function can scale up a Compute Engine autoscaling managed instance group* Use an image pre-loaded with the data processing software that terminates the instances when processing completes

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

Your uses Jenkins running on Google Cloud VM instances for CI/CD. You need to extend the functionality to use infrastructure as code automation by using Terraform. You must ensure that the Terraform Jenkins instance is authorized to create Google Cloud resources. You want to follow Google-recommended practices- What should you do?

A. Confirm that the Jenkins VM instance has an attached service account with the appropriate Identity and Access Management (IAM) permissions.

B. use the Terraform module so that Secret Manager can retrieve credentials.

C. Add the auth application-default command as a step in Jenkins before running the Terraform commands.

D. Create a dedicated service account for the Terraform instance. Download and copy the secret key value to the GOOGLE environment variable on the Jenkins server.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 Professional-Cloud-DevOps-Engineer 무료덤프 - Google Cloud Certified - Professional Cloud DevOps Engineer

우리와 연락하기

유용한 링크

최신 업데이트