🔍

PCDOE — questions

Page 3 of 11 · 210 total questions.

PCDOE Question 41

Single page →
Topic 1 · Question 41 · Select all that apply

You support a high-traffic web application that runs on Google Cloud Platform (GCP). You need to measure application reliability from a user perspective without making any engineering changes to it. What should you do? (Choose two.)

  • AReview current application metrics and add new ones as needed.
  • BModify the code to capture additional information for user interaction.
  • CAnalyze the web proxy logs only and capture response time of each request.
  • DCreate new synthetic clients to simulate a user journey using the application. (correct answer)
  • EUse current and historic Request Logs to trace customer interaction with the application. (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Create new synthetic clients to simulate a user journey using the application. Option E: Use current and historic Request Logs to trace customer interaction with the application.

PCDOE Question 42

Single page →
Topic 1 · Question 42

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?

  • AGrant the team members the IAM role of logging.configWriter on Cloud IAM. (correct answer)
  • BConfigure Access Context Manager to allow only these members to export logs.
  • CCreate and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
  • DCreate an Organizational Policy in Cloud IAM to allow only these members to create log exports.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Grant the team members the IAM role of logging.configWriter on Cloud IAM.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

PCDOE Question 43

Single page →
Topic 1 · Question 43

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

  • ACreate a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
  • BUse a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/. (correct answer)
  • CAdd logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
  • DAdd a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.

PCDOE Question 44

Single page →
Topic 1 · Question 44

Your team has recently deployed an NGINX-based application into Google Kubernetes Engine (GKE) and has exposed it to the public via an HTTP Google Cloud Load Balancer (GCLB) ingress. You want to scale the deployment of the application's frontend using an appropriate Service Level Indicator (SLI). What should you do?

  • AConfigure the horizontal pod autoscaler to use the average response time from the Liveness and Readiness probes.
  • BConfigure the vertical pod autoscaler in GKE and enable the cluster autoscaler to scale the cluster as pods expand.
  • CInstall the Stackdriver custom metrics adapter and configure a horizontal pod autoscaler to use the number of requests provided by the GCLB. (correct answer)
  • DExpose the NGINX stats endpoint and configure the horizontal pod autoscaler to use the request metrics exposed by the NGINX deployment.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Install the Stackdriver custom metrics adapter and configure a horizontal pod autoscaler to use the number of requests provided by the GCLB.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

PCDOE Question 45

Single page →
Topic 1 · Question 45 · Select all that apply

Your company follows Site Reliability Engineering practices. You are the Incident Commander for a new, customer-impacting incident. You need to immediately assign two incident management roles to assist you in an effective incident response. What roles should you assign? (Choose two.)

  • AOperations Lead (correct answer)
  • BEngineering Lead
  • CCommunications Lead (correct answer)
  • DCustomer Impact Assessor
  • EExternal Customer Communications Lead
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Operations Lead Option C: Communications Lead.

PCDOE Question 46

Single page →
Topic 1 · Question 46

You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?

  • ADownload and configure a third-party integration between Stackdriver Monitoring and an SMS gateway. Ensure that your team members add their SMS/phone numbers to the external tool.
  • BSelect the Webhook notifications option for each alerting policy, and configure it to use a third-party integration tool. Ensure that your team members add their SMS/phone numbers to the external tool.
  • CEnsure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list. (correct answer)
  • DConfigure a Slack notification for each alerting policy. Set up a Slack-to-SMS integration to send SMS messages when Slack messages are received. Ensure that your team members add their SMS/phone numbers to the external integration.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Ensure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

PCDOE Question 47

Single page →
Topic 1 · Question 47

You are managing an application that exposes an HTTP endpoint without using a load balancer. The latency of the HTTP responses is important for the user experience. You want to understand what HTTP latencies all of your users are experiencing. You use Stackdriver Monitoring. What should you do?

  • A• In your application, create a metric with a metricKind set to DELTA and a valueType set to DOUBLE. • In Stackdriver's Metrics Explorer, use a Stacked Bar graph to visualize the metric.
  • B• In your application, create a metric with a metricKind set to CUMULATIVE and a valueType set to DOUBLE. • In Stackdriver's Metrics Explorer, use a Line graph to visualize the metric.
  • C• In your application, create a metric with a metricKind set to GAUGE and a valueType set to DISTRIBUTION. • In Stackdriver's Metrics Explorer, use a Heatmap graph to visualize the metric. (correct answer)
  • D• In your application, create a metric with a metricKind set to METRIC_KIND_UNSPECIFIED and a valueType set to INT64. • In Stackdriver's Metrics Explorer, use a Stacked Area graph to visualize the metric.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: • In your application, create a metric with a metricKind set to GAUGE and a valueType set to DISTRIBUTION. • In Stackdriver's Metrics Explorer, use a Heatmap graph to visualize the metric.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

PCDOE Question 48

Single page →
Topic 1 · Question 48

Your team is designing a new application for deployment both inside and outside Google Cloud Platform (GCP). You need to collect detailed metrics such as system resource utilization. You want to use centralized GCP services while minimizing the amount of work required to set up this collection system. What should you do?

  • AImport the Stackdriver Profiler package, and configure it to relay function timing data to Stackdriver for further analysis. (correct answer)
  • BImport the Stackdriver Debugger package, and configure the application to emit debug messages with timing information.
  • CInstrument the code using a timing library, and publish the metrics via a health check endpoint that is scraped by Stackdriver.
  • DInstall an Application Performance Monitoring (APM) tool in both locations, and configure an export to a central data storage location for analysis.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Import the Stackdriver Profiler package, and configure it to relay function timing data to Stackdriver for further analysis.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

PCDOE Question 49

Single page →
Topic 1 · Question 49

You need to reduce the cost of virtual machines (VM) for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?

  • AA scalable in-memory caching system. (correct answer)
  • BThe organization's public-facing website.
  • CA distributed, eventually consistent NoSQL database cluster with sufficient quorum.
  • DA GPU-accelerated video rendering platform that retrieves and stores videos in a storage bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: A scalable in-memory caching system.

PCDOE Question 50

Single page →
Topic 1 · Question 50

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?

  • AConfigure the build system with protected branches that require pull request approval.
  • BUse an Admission Controller to verify that incoming requests originate from approved sources.
  • CLeverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
  • DEnable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.

PCDOE Question 51

Single page →
Topic 1 · Question 51

You support a stateless web-based API that is deployed on a single Compute Engine instance in the europe-west2-a zone. The Service Level Indicator (SLI) for service availability is below the specified Service Level Objective (SLO). A postmortem has revealed that requests to the API regularly time out. The time outs are due to the API having a high number of requests and running out memory. You want to improve service availability. What should you do?

  • AChange the specified SLO to match the measured SLI
  • BMove the service to higher-specification compute instances with more memory
  • CSet up additional service instances in other zones and load balance the traffic between all instances (correct answer)
  • DSet up additional service instances in other zones and use them as a failover in case the primary instance is unavailable
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Set up additional service instances in other zones and load balance the traffic between all instances

Explanation

A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

PCDOE Question 52

Single page →
Topic 1 · Question 52

You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?

  • AEnable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.
  • BEnable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0. (correct answer)
  • CEnable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.
  • DEnable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources. This option meets the real-time / low-latency performance requirement.

PCDOE Question 53

Single page →
Topic 1 · Question 53

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members. What should you do?

  • AStore the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master. (correct answer)
  • BStore the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
  • CStore the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
  • DStore the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.

Explanation

Terraform provisions Google Cloud infrastructure as code repeatably.

PCDOE Question 54

Single page →
Topic 1 · Question 54

You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard. You need to troubleshoot the issue. What should you do?

  • AConfirm that the Stackdriver agent has been installed in the hosting virtual machine. (correct answer)
  • BConfirm that your account has the proper permissions to use the Stackdriver dashboard.
  • CConfirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
  • DConfirm that the application is using the required client library and the service account key has proper permissions.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Confirm that the Stackdriver agent has been installed in the hosting virtual machine.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

PCDOE Question 55

Single page →
Topic 1 · Question 55

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline. What should you do?

  • ASet up Container Analysis to scan and report Common Vulnerabilities and Exposures. (correct answer)
  • BConfigure the containers in the build pipeline to always update themselves before release.
  • CReconfigure the existing operating system vulnerability software to exist inside the container.
  • DImplement static code analysis tooling against the Docker files used to create the containers.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.

PCDOE Question 56

Single page →
Topic 1 · Question 56

You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort. What should you do?

  • AUse Cloud Storage to cache intermediate artifacts. (correct answer)
  • BRun multiple Jenkins agents to parallelize the build.
  • CUse multiple smaller build steps to minimize execution time.
  • DUse larger Cloud Build virtual machines (VMs) by using the machine-type option.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Cloud Storage to cache intermediate artifacts.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed.

PCDOE Question 57

Single page →
Topic 1 · Question 57

You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service. What should you do first?

  • ARoll back the recent release. (correct answer)
  • BReview the Stackdriver monitoring.
  • CUpsize the virtual machines running the login services.
  • DDeploy a new release to see whether it fixes the problem.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Roll back the recent release.

PCDOE Question 58

Single page →
Topic 1 · Question 58

You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

  • AStore the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently (correct answer)
  • BInject the secret at the time of instance creation via an encrypted configuration management system.
  • CIntegrate the application with a Single sign-on (SSO) system and do not expose secrets to the application.
  • DLeverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently.

PCDOE Question 59

Single page →
Topic 1 · Question 59

You have migrated an e-commerce application to Google Cloud Platform (GCP). You want to prepare the application for the upcoming busy season. What should you do first to prepare for the busy season?

  • ALoad teat the application to profile its performance for scaling. (correct answer)
  • BEnable AutoScaling on the production clusters, in case there is growth.
  • CPre-provision double the compute power used last season, expecting growth.
  • DCreate a runbook on inflating the disaster recovery (DR) environment if there is growth.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Load teat the application to profile its performance for scaling.

PCDOE Question 60

Single page →
Topic 1 · Question 60

You support a web application that runs on App Engine and uses CloudSQL and Cloud Storage for data storage. After a short spike in website traffic, you notice a big increase in latency for all user requests, increase in CPU use, and the number of processes running the application. Initial troubleshooting reveals: • After the initial spike in traffic, load levels returned to normal but users still experience high latency. • Requests for content from the CloudSQL database and images from Cloud Storage show the same high latency. • No changes were made to the website around the time the latency increased. • There is no increase in the number of errors to the users. You expect another spike in website traffic in the coming days and want to make sure users don't experience latency. What should you do?

  • AUpgrade the GCS buckets to Multi-Regional.
  • BEnable high availability on the CloudSQL instances.
  • CMove the application from App Engine to Compute Engine.
  • DModify the App Engine configuration to have additional idle instances. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Modify the App Engine configuration to have additional idle instances.

Explanation

App Engine is a fully managed platform that runs and autoscales web apps with little operational effort. This option decouples the components so they scale independently and absorb load spikes.

Showing questions 41–60 of 210 · Page 3 of 11