Free Professional Cloud DevOps Engineer Exam Professional-Cloud-DevOps-Engineer Exam Practice Test

You need to define Service Level Objectives (SLOs) for a high-traffic multi-region web application. Customers expect the application to always be available and have fast response times. Customers are currently happy with the application performance and availability. Based on current measurement, you observe that the 90th percentile of latency is 120ms and the 95th percentile of latency is 275ms over a 28-day window. What latency SLO would you recommend to the team to publish?

• 90th percentile – 100ms 95th percentile – 250ms
• 90th percentile – 120ms 95th percentile – 275ms
• 90th percentile – 150ms 95th percentile – 300ms
• 90th percentile – 250ms
• 95th percentile – 400ms

Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, andkeep user data secure. What should you do?

• Implement Jenkins on local workstations.
• Implement Jenkins on Kubernetes on-premises
• Implement Jenkins on Google Cloud Functions.
• Implement Jenkins on Compute Engine virtual machines.

You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

• Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
• Inject the secret at the time of instance creation via an encrypted configuration management system.
• Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
• Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.

You are managing an application that runs in Compute Engine The application uses a custom HTTP server to expose an API that is accessed by other applications through an internal TCP/UDP load balancer A firewall rule allows access to the API port from 0.0.0-0/0. You need to configure Cloud Logging to log each IP address that accesses the API by using the fewest number of steps What should you do Bret?

• Enable Packet Mirroring on the VPC
• Install the Ops Agent on the Compute Engine instances.
• Enable logging on the firewall rule
• Enable VPC Flow Logs on the subnet

You have an application that runs on Cloud Run. You want to use live production traffic to test a new version of the application while you let the quality assurance team perform manual testing. You want to limit the potential impact of any issues while testing the new version, and you must be able to rollback to a previous version of the application if needed. How should you deploy the new version? Choose 2 answers

• Deploy the application as a new Cloud Run service.
• Deploy a new Cloud Run revision with a tag and use the —no-traffic option.
• Deploy a new Cloud Run revision without a tag and use the —no-traffic option.
• Deploy the new application version and use the —no-traffic option Route production traffic to the revision's URL.
• Deploy the new application version and split traffic to the new version.

Your team is running microservices in Google Kubernetes Engine (GKE) You want to detect consumption of an error budget to protect customers and define release policies What should you do?

• Create SLIs from metrics Enable Alert Policies if the services do not pass
• Use the metrics from Anthos Service Mesh to measure the health of the microservices
• Create a SLO Create an Alert Policy on select_slo_bum_rate
• Create a SLO and configure uptime checks for your services Enable Alert Policies if the services do not pass

Your company operates in a highly regulated domain. Your security team requires that only trusted container images can be deployed to Google Kubernetes Engine (GKE). You need to implement a solution that meets the requirements of the security team, while minimizing management overhead. What should you do?

• Grant the roles/artifactregistry. writer role to the Cloud Build service account. Confirm that no employee has Artifact Registry write permission.
• Use Cloud Run to write and deploy a custom validator Enable an Eventarc trigger to perform validations when new images are uploaded.
• Configure Kritis to run in your GKE clusters to enforce deploy-time security policies.
• Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies

You need to reduce the cost of virtual machines (VM| for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?

• A scalable in-memory caching system
• The organization's public-facing website
• A distributed, eventually consistent NoSQL database cluster with sufficient quorum
• A GPU-accelerated video rendering platform that retrieves and stores videos in a storage bucket

You are performing a semi-annual capacity planning exercise for your flagship service You expect a service user growth rate of 10% month-over-month for the next six months Your service is fully containerized and runs on a Google Kubemetes Engine (GKE) standard cluster across three zones with cluster autoscaling enabled You currently consume about 30% of your total deployed CPU capacity and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth o' as a result of zone failure while you avoid unnecessary costs How should you prepare to handle the predicted growth?

• Verify the maximum node pool size enable a Horizontal Pod Autoscaler and then perform a load lest to verify your expected resource needs
• Because you deployed the service on GKE and are using a cluster autoscaler your GKE cluster will scale automatically regardless of growth rate
• Because you are only using 30% of deployed CPU capacity there is significant headroom and you do not need to add any additional capacity for this rate of growth
• Proactively add 80% more node capacity to account for six months of 10% growth rate and then perform a load test to ensure that you have enough capacity

Your organization has a containerized web application that runs on-premises As part of the migration plan to Google Cloud you need to select a deployment strategy and platform that meets the following acceptance criteria

• The platform must be able to direct traffic from Android devices to an Android-specific microservice
• The platform must allow for arbitrary percentage-based traffic splitting
• The deployment strategy must allow for continuous testing of multiple versions of any microservice What should you do?
• Deploy the canary release of the application to Cloud Run Use traffic splitting to direct 10% of user traffic to the canary release based on the revision tag
• Deploy the canary release of the application to App Engine Use traffic splitting to direct a subset of user traffic to the new version based on the IP address
• Deploy the canary release of the application to Compute Engine Use Anthos Service Mesh with Compute Engine to direct 10% of user traffic to the canary release by configuring the virtual service.
• Deploy the canary release to Google Kubernetes Engine with Anthos Sen/ice Mesh Use traffic splitting to direct 10% of user traffic to the new version based on the user-agent header configured in the virtual service