ExamMini
πŸ”

PCDOE β€” all questions

210 practice questions with answers and explanations.

Topic 1 Β· Question 1

You support a Node.js application running on Google Kubernetes Engine (GKE) in production. The application makes several HTTP requests to dependent applications. You want to anticipate which dependent applications might cause performance issues. What should you do?

  • AInstrument all applications with Stackdriver Profiler.
  • BInstrument all applications with Stackdriver Trace and review inter-service HTTP requests. (correct answer)
  • CUse Stackdriver Debugger to review the execution of logic within each application to instrument all applications.
  • DModify the Node.js application to log HTTP request and response times to dependent applications. Use Stackdriver Logging to find dependent applications that are performing poorly.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Instrument all applications with Stackdriver Trace and review inter-service HTTP requests.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

Topic 1 Β· Question 2

You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project. You want to share the chart with your Site Reliability Engineering (SRE) team only. You want to ensure you follow the principle of least privilege. What should you do?

  • AShare the workspace Project ID with the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
  • BShare the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
  • CClick "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project. (correct answer)
  • DClick "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Topic 1 Β· Question 3

Your organization wants to implement Site Reliability Engineering (SRE) culture and principles. Recently, a service that you support had a limited outage. A manager on another team asks you to provide a formal explanation of what happened so they can action remediations. What should you do?

  • ADevelop a postmortem that includes the root causes, resolution, lessons learned, and a prioritized list of action items. Share it with the manager only.
  • BDevelop a postmortem that includes the root causes, resolution, lessons learned, and a prioritized list of action items. Share it on the engineering organization's document portal. (correct answer)
  • CDevelop a postmortem that includes the root causes, resolution, lessons learned, the list of people responsible, and a list of action items for each person. Share it with the manager only.
  • DDevelop a postmortem that includes the root causes, resolution, lessons learned, the list of people responsible, and a list of action items for each person. Share it on the engineering organization's document portal.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Develop a postmortem that includes the root causes, resolution, lessons learned, and a prioritized list of action items. Share it on the engineering organization's document portal.

Topic 1 Β· Question 4

You have a set of applications running on a Google Kubernetes Engine (GKE) cluster, and you are using Stackdriver Kubernetes Engine Monitoring. You are bringing a new containerized application required by your company into production. This application is written by a third party and cannot be modified or reconfigured. The application writes its log information to /var/log/app_messages.log, and you want to send these log entries to Stackdriver Logging. What should you do?

  • AUse the default Stackdriver Kubernetes Engine Monitoring agent configuration.
  • BDeploy a Fluentd daemonset to GKE. Then create a customized input and output configuration to tail the log file in the application's pods and write to Stackdriver Logging.
  • CInstall Kubernetes on Google Compute Engine (GCE) and redeploy your applications. Then customize the built-in Stackdriver Logging configuration to tail the log file in the application's pods and write to Stackdriver Logging.
  • DWrite a script to tail the log file within the pod and write entries to standard output. Run the script as a sidecar container with the application's pod. Configure a shared volume between the containers to allow the script to have read access to /var/log in the application container. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Write a script to tail the log file within the pod and write entries to standard output. Run the script as a sidecar container with the application's pod. Configure a shared volume between the containers to allow the...

Topic 1 Β· Question 5

You are running an application in a virtual machine (VM) using a custom Debian image. The image has the Stackdriver Logging agent installed. The VM has the cloud-platform scope. The application is logging information via syslog. You want to use Stackdriver Logging in the Google Cloud Platform Console to visualize the logs. You notice that syslog is not showing up in the "All logs" dropdown list of the Logs Viewer. What is the first thing you should do?

  • ALook for the agent's test log entry in the Logs Viewer.
  • BInstall the most recent version of the Stackdriver agent.
  • CVerify the VM service account access scope includes the monitoring.write scope.
  • DSSH to the VM and execute the following commands on your VM: ps ax | grep fluentd. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: SSH to the VM and execute the following commands on your VM: ps ax | grep fluentd.

Topic 1 Β· Question 6

You use a multiple step Cloud Build pipeline to build and deploy your application to Google Kubernetes Engine (GKE). You want to integrate with a third-party monitoring platform by performing a HTTP POST of the build information to a webhook. You want to minimize the development effort. What should you do?

  • AAdd logic to each Cloud Build step to HTTP POST the build information to a webhook.
  • BAdd a new step at the end of the pipeline in Cloud Build to HTTP POST the build information to a webhook.
  • CUse Stackdriver Logging to create a logs-based metric from the Cloud Build logs. Create an Alert with a Webhook notification type.
  • DCreate a Cloud Pub/Sub push subscription to the Cloud Build cloud-builds PubSub topic to HTTP POST the build information to a webhook. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a Cloud Pub/Sub push subscription to the Cloud Build cloud-builds PubSub topic to HTTP POST the build information to a webhook.

Explanation

Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams. Cloud Build runs managed CI pipelines to build, test, and package code.

Topic 1 Β· Question 7

You use Spinnaker to deploy your application and have created a canary deployment stage in the pipeline. Your application has an in-memory cache that loads objects at start time. You want to automate the comparison of the canary version against the production version. How should you configure the canary analysis?

  • ACompare the canary with a new deployment of the current production version. (correct answer)
  • BCompare the canary with a new deployment of the previous production version.
  • CCompare the canary with the existing deployment of the current production version.
  • DCompare the canary with the average performance of a sliding window of previous production versions.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Compare the canary with a new deployment of the current production version.

Topic 1 Β· Question 8

You support a high-traffic web application and want to ensure that the home page loads in a timely manner. As a first step, you decide to implement a Service Level Indicator (SLI) to represent home page request latency with an acceptable page load time set to 100 ms. What is the Google-recommended way of calculating this SLI?

  • ABucketize the request latencies into ranges, and then compute the percentile at 100 ms.
  • BBucketize the request latencies into ranges, and then compute the median and 90th percentiles.
  • CCount the number of home page requests that load in under 100 ms, and then divide by the total number of home page requests. (correct answer)
  • DCount the number of home page request that load in under 100 ms, and then divide by the total number of all web application requests.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Count the number of home page requests that load in under 100 ms, and then divide by the total number of home page requests.

Topic 1 Β· Question 9 Β· Select all that apply

You deploy a new release of an internal application during a weekend maintenance window when there is minimal user tragic. After the window ends, you learn that one of the new features isn't working as expected in the production environment. After an extended outage, you roll back the new release and deploy a fix. You want to modify your release process to reduce the mean time to recovery so you can avoid extended outages in the future. What should you do? (Choose two.)

  • ABefore merging new code, require 2 different peers to review the code changes.
  • BAdopt the blue/green deployment strategy when releasing new code via a CD server. (correct answer)
  • CIntegrate a code linting tool to validate coding standards before any code is accepted into the repository.
  • DRequire developers to run automated integration tests on their local development environments before release.
  • EConfigure a CI server. Add a suite of unit tests to your code and have your CI server run them on commit and verify any changes. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Adopt the blue/green deployment strategy when releasing new code via a CD server. Option E: Configure a CI server. Add a suite of unit tests to your code and have your CI server run them on commit and verify any changes.

Topic 1 Β· Question 10

You have a pool of application servers running on Compute Engine. You need to provide a secure solution that requires the least amount of configuration and allows developers to easily access application logs for troubleshooting. How would you implement the solution on GCP?

  • Aβ€’ Deploy the Stackdriver logging agent to the application servers. β€’ Give the developers the IAM Logs Viewer role to access Stackdriver and view logs. (correct answer)
  • Bβ€’ Deploy the Stackdriver logging agent to the application servers. β€’ Give the developers the IAM Logs Private Logs Viewer role to access Stackdriver and view logs.
  • Cβ€’ Deploy the Stackdriver monitoring agent to the application servers. β€’ Give the developers the IAM Monitoring Viewer role to access Stackdriver and view metrics.
  • Dβ€’ Install the gsutil command line tool on your application servers. β€’ Write a script using gsutil to upload your application log to a Cloud Storage bucket, and then schedule it to run via cron every 5 minutes. β€’ Give the developers the IAM Object Viewer access to view the logs in the specified bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: β€’ Deploy the Stackdriver logging agent to the application servers. β€’ Give the developers the IAM Logs Viewer role to access Stackdriver and view logs.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

Topic 1 Β· Question 11

You support the backend of a mobile phone game that runs on a Google Kubernetes Engine (GKE) cluster. The application is serving HTTP requests from users. You need to implement a solution that will reduce the network cost. What should you do?

  • AConfigure the VPC as a Shared VPC Host project.
  • BConfigure your network services on the Standard Tier. (correct answer)
  • CConfigure your Kubernetes cluster as a Private Cluster.
  • DConfigure a Google Cloud HTTP Load Balancer as Ingress.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure your network services on the Standard Tier.

Topic 1 Β· Question 12

You encountered a major service outage that affected all users of the service for multiple hours. After several hours of incident management, the service returned to normal, and user access was restored. You need to provide an incident summary to relevant stakeholders following the Site Reliability Engineering recommended practices. What should you do first?

  • ACall individual stakeholders to explain what happened.
  • BDevelop a post-mortem to be distributed to stakeholders. (correct answer)
  • CSend the Incident State Document to all the stakeholders.
  • DRequire the engineer responsible to write an apology email to all stakeholders.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Develop a post-mortem to be distributed to stakeholders.

Topic 1 Β· Question 13

You are performing a semi-annual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP), using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?

  • AVerify the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verify your expected resource needs. (correct answer)
  • BBecause you are deployed on GKE and are using a cluster autoscaler, your GKE cluster will scale automatically, regardless of growth rate.
  • CBecause you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
  • DProactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Verify the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verify your expected resource needs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 Β· Question 14

Your application images are built and pushed to Google Container Registry (GCR). You want to build an automated pipeline that deploys the application when the image is updated while minimizing the development effort. What should you do?

  • AUse Cloud Build to trigger a Spinnaker pipeline.
  • BUse Cloud Pub/Sub to trigger a Spinnaker pipeline. (correct answer)
  • CUse a custom builder in Cloud Build to trigger Jenkins pipeline.
  • DUse Cloud Pub/Sub to trigger a custom deployment service running in Google Kubernetes Engine (GKE).
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Cloud Pub/Sub to trigger a Spinnaker pipeline.

Explanation

Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams.

Topic 1 Β· Question 15

Your product is currently deployed in three Google Cloud Platform (GCP) zones with your users divided between the zones. You can fail over from one zone to another, but it causes a 10-minute service disruption for the affected users. You typically experience a database failure once per quarter and can detect it within five minutes. You are cataloging the reliability risks of a new real-time chat feature for your product. You catalog the following information for each risk: * Mean Time to Detect (MTTD) in minutes * Mean Time to Repair (MTTR) in minutes * Mean Time Between Failure (MTBF) in days * User Impact Percentage The chat feature requires a new database system that takes twice as long to successfully fail over between zones. You want to account for the risk of the new database failing in one zone. What would be the values for the risk of database failover with the new system?

  • AMTTD: 5 MTTR: 10 MTBF: 90 Impact: 33%
  • BMTTD: 5 MTTR: 20 MTBF: 90 Impact: 33% (correct answer)
  • CMTTD: 5 MTTR: 10 MTBF: 90 Impact: 50%
  • DMTTD: 5 MTTR: 20 MTBF: 90 Impact: 50%
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: MTTD: 5 MTTR: 20 MTBF: 90 Impact: 33% This option meets the real-time / low-latency performance requirement.

Topic 1 Β· Question 16

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

  • AEnable Cloud Security Scanner on the clusters.
  • BEnable Vulnerability Analysis on the Container Registry.
  • CSet up the Kubernetes Engine clusters as private clusters.
  • DSet up the Kubernetes Engine clusters with Binary Authorization. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Set up the Kubernetes Engine clusters with Binary Authorization.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized workloads.

Topic 1 Β· Question 17

You support an e-commerce application that runs on a large Google Kubernetes Engine (GKE) cluster deployed on-premises and on Google Cloud Platform. The application consists of microservices that run in containers. You want to identify containers that are using the most CPU and memory. What should you do?

  • AUse Stackdriver Kubernetes Engine Monitoring. (correct answer)
  • BUse Prometheus to collect and aggregate logs per container, and then analyze the results in Grafana.
  • CUse the Stackdriver Monitoring API to create custom metrics, and then organize your containers using groups.
  • DUse Stackdriver Logging to export application logs to BigQuery, aggregate logs per container, and then analyze CPU and memory consumption.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Stackdriver Kubernetes Engine Monitoring.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized workloads. Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

Topic 1 Β· Question 18

Your company experiences bugs, outages, and slowness in its production systems. Developers use the production environment for new feature development and bug fixes. Configuration and experiments are done in the production environment, causing outages for users. Testers use the production environment for load testing, which often slows the production systems. You need to redesign the environment to reduce the number of bugs and outages in production and to enable testers to toad test new features. What should you do?

  • ACreate an automated testing script in production to detect failures as soon as they occur.
  • BCreate a development environment with smaller server capacity and give access only to developers and testers.
  • CSecure the production environment to ensure that developers can't change it and set up one controlled update per year.
  • DCreate a development environment for writing code and a test environment for configurations, experiments, and load testing. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a development environment for writing code and a test environment for configurations, experiments, and load testing.

Topic 1 Β· Question 19

You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?

  • Aflex/connections/current (correct answer)
  • Btcp_ssl_proxy/new_connections
  • Ctcp_ssl_proxy/open_connections
  • Dflex/instance/connections/current
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: flex/connections/current.

Topic 1 Β· Question 20

You support an application deployed on Compute Engine. The application connects to a Cloud SQL instance to store and retrieve data. After an update to the application, users report errors showing database timeout messages. The number of concurrent active users remained stable. You need to find the most probable cause of the database timeout. What should you do?

  • ACheck the serial port logs of the Compute Engine instance.
  • BUse Stackdriver Profiler to visualize the resources utilization throughout the application. (correct answer)
  • CDetermine whether there is an increased number of connections to the Cloud SQL instance.
  • DUse Cloud Security Scanner to see whether your Cloud SQL is under a Distributed Denial of Service (DDoS) attack.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Stackdriver Profiler to visualize the resources utilization throughout the application.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

Showing questions 1–20 of 210 Β· Page 1 of 11