PCDOE — questions

Your company is creating a new cloud-native Google Cloud organization. You expect this Google Cloud organization to first be used by a small number of departments and then expand to be used by a large number of departments. Each department has a large number of applications that range in size. You need to design the VPC network architecture. Your solution must minimize the amount of management required, while remaining flexible enough for development teams to quickly adapt to their evolving needs. What should you do?

You use Google Cloud Managed Service for Prometheus with managed collection to gather metrics from your service running on Google Kubernetes Engine (GKE). After deploying the service, there is no metric data appearing in Cloud Monitoring and you have not encountered any error messages. You need to troubleshoot this issue. What should you do?

You are building an ecommerce web application that will be deployed to Google Cloud. You need to periodically test the checkout process in production to ensure its functionality and confirm that you are receiving automated notifications for failures. You also want to minimize administrative effort and follow Google-recommended practices. What should you do?

You are deploying a containerized application to Cloud Run. The application needs a password to connect to the database to fetch data. The password must be rotated each week to meet your company’s security requirements. You need to implement an easy- to-manage password rotation policy. What should you do?

You have an application deployed to Cloud Run. A new version of the application has recently been deployed using the canary deployment strategy. Your Site Reliability Engineering (SRE) teammate informs you that an SLO has been exceeded for this application. You need to make the application healthy as quickly as possible. What should you do first?

Your company is trying to centralize all monitoring and alerting capabilities. Your VPC network has an internally exposed webhook you can call to trigger alerts. You need to integrate your Google Cloud alerts to call this webhook. You want to minimize costs while following Google-recommended practices. What should you do?

You are establishing a centralized platform to monitor your applications. Your applications are currently running on Kubernetes clusters on-premises and in the cloud across multiple Google Cloud projects. You want to enable developers to monitor both infrastructure and application metrics using OpenTelemetry across on-premises and Google Cloud environments. At the same time, you want to keep the operation easy to support and integrate all metrics into a single place. What should you do?

You are configuring a Cloud Deploy pipeline to deploy an application to Google Kubernetes Engine (GKE). The application is deployed as a Deployment. You need to configure the Deployment so that there are two replicas in the development environment and five replicas in the production environment. You must ensure that all other configuration parameters are consistent between environments. You also need to minimize developmental overhead when updating the manifests in the future. How should you configure the skaffold.yaml file?

You have a CI/CD pipeline set up in Cloud Build that builds container images. These containers are stored in Artifact Registry. You need to ensure that only images built by the Cloud Build pipeline in your production project are deployed to your Google Kubernetes Engine (GKE) cluster. You want to minimize the amount of manual effort required for implementation and maintenance. What should you do?

You are designing a containerized CI pipeline to minimize reliance on public upstream container registries and improve build reproducibility and security. You need to design a pipeline to cache all containerized dependencies while minimizing the required amount of manual effort and maintenance. What should you do?