PCDOE — questions

Page 10 of 11 · 210 total questions.

PCDOE Question 182

Topic 1 · Question 182

You use Artifact Registry to store container images built with Cloud Build. You need to ensure that all existing and new images are continuously scanned for vulnerabilities. You also want to track who pushed each image to the registry. What should you do?

AConfigure Artifact Registry to automatically scan new images and periodically re-scan all images. Use Cloud Audit Logs to track image uploads and identify the user who pushed each image. (correct answer)
BConfigure Artifact Registry to send vulnerability scan results to a Cloud Storage bucket. Use a separate script to parse results and notify a security team.
CConfigure Artifact Registry to automatically re-scan images daily. Enable Cloud Audit Logs to track these scans, and use Logs Explorer to identify vulnerabilities.
DConfigure Artifact Registry to automatically trigger vulnerability scans for new image tags, and view scan results. Use Cloud Audit Logs to track image tag creation events.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Configure Artifact Registry to automatically scan new images and periodically re-scan all images. Use Cloud Audit Logs to track image uploads and identify the user who pushed each image.

Explanation

Cloud Audit Logs record administrative and data-access activity for auditing and governance. Artifact Registry stores and manages container images and language packages.

PCDOE Question 183

Single page →

Topic 1 · Question 183

You manage a retail website for your company. The website consists of several microservices running in a GKE Standard node pool with node autoscaling enabled. Each microservice has resource limits and a Horizontal Pod Autoscaler configured. During a busy period, you receive alerts for one of the microservices. When you check the Pods, half of them have the status OOMKilled, and the number of Pods is at the minimum autoscaling limit. You need to resolve the issue. What should you do?

AUpdate the node pool to use a machine type with more memory.
BIncrease the maximum number of nodes in the node pool.
CIncrease the maximum replica limit of the Horizontal Pod Autoscaler.
DIncrease the memory resource limit of the microservice. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Increase the memory resource limit of the microservice.

PCDOE Question 184

Single page →

Topic 1 · Question 184

You are configuring a Cl pipeline. The build step for your Cl pipeline integration testing requires access to APIs inside your private VPC network. Your security team requires that you do not expose API traffic publicly. You need to implement a solution that minimizes management overhead. What should you do?

AUse Cloud Build private pools to connect to the private VPC. (correct answer)
BUse Cloud Build to create a Compute Engine instance in the private VPC. Run the integration tests on the VM by using a startup script.
CUse Cloud Build as a pipeline runner. Configure a cross-region internal Application Load Balancer for API access.
DUse Cloud Build as a pipeline runner. Configure a global external Application Load Balancer with a Google Cloud Armor policy for API access.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use Cloud Build private pools to connect to the private VPC.

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources. Cloud Build runs managed CI pipelines to build, test, and package code.

PCDOE Question 185

Single page →

Topic 1 · Question 185

You are deploying a new version of your application to a multi-zone Google Kubernetes Engine (GKE) cluster. The deployment is progressing smoothly, but you notice that some Pods in a specific zone are experiencing higher error rates. You need to selectively roll back the update for the Pods experiencing errors with minimal impact to users. What should you do?

AScale down the Pods in the affected zone. Redeploy the new version of the application.
BDrain the affected nodes. Redeploy the new version of the application to the remaining nodes.
CModify the Deployment to use the Pod template from the previous version of your application. Perform a rolling update to replace the Pods in the affected zone. (correct answer)
DUse the kubectl rollout undo command to roll back the entire deployment. Redeploy the new version of the application, excluding the affected zone.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Modify the Deployment to use the Pod template from the previous version of your application. Perform a rolling update to replace the Pods in the affected zone.

PCDOE Question 186

Single page →

Topic 1 · Question 186

You work for a healthcare company and regulations require you to create all resources in a United States-based region. You attempted to create a secret in Secret Manager but received the following error message: Constraint constraints/gcp.resourceLocations violated for [orgpolicy:projects/000000] attempting to create a secret in [global] You need to resolve the error while remaining compliant with regulations. What should you do?

ARemove the organization policy referenced in the error message.
BCreate the secret with an automatic replication policy.
CCreate the secret with a user-managed replication policy. (correct answer)
DAdd the global region to the organization policy referenced in the error message.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create the secret with a user-managed replication policy.

PCDOE Question 187

Single page →

Topic 1 · Question 187

You are responsible for creating development environments for your company's development team. You want to create environments with identical IDEs for all developers while ensuring that these environments are not exposed to public networks. You need to choose the most cost-effective solution without impacting developer productivity. What should you do?

ACreate multiple Compute Engine VM instances with a public IP address and use a Public NAT gateway. Configure an instance schedule to shut down the VMs.
BCreate multiple Compute Engine VM instances without a public IP address. Configure an instance schedule to shut down the VMs.
CCreate a Cloud Workstations private cluster. Create a workstation configuration with an idieTimeour parameter. (correct answer)
DCreate a Cloud Workstations private cluster. Create a workstation configuration with a runningTimeout parameter.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create a Cloud Workstations private cluster. Create a workstation configuration with an idieTimeour parameter.

Explanation

Cloud Workstations provide managed, secure, fully configured development environments. This option delivers the requirement at the lowest cost.

PCDOE Question 188

Single page →

Topic 1 · Question 188

Your company uses Cloud Deploy with multiple delivery pipelines for deploying applications to different environments. Your development team currently lacks access to any of these pipelines. You need to grant the team access to only the development delivery pipeline, while following Google-recommended practices. What should you do?

AIn the Google Cloud console, grant the development team the roles/clouddeploy.operator role. Add deny conditions to all pipelines other than the development delivery pipeline.
BIn the Google Cloud console, create a custom IAM role with all clouddeploy.automations.* permissions and an allow policy for only the development delivery pipeline. Grant this IAM role to the development team.
CGrant the development team the roles/clouddeploy.operator role in a policy file. Apply the policy file to the development target.
DGrant the development team the roles/clouddeploy.developer role in a policy file. Apply this policy file to the development delivery pipeline. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Grant the development team the roles/clouddeploy.developer role in a policy file. Apply this policy file to the development delivery pipeline.

PCDOE Question 189

Single page →

Topic 1 · Question 189

Your company has recently experienced several production service issues. You need to create a Cloud Monitoring dashboard to troubleshoot the issues, and you want to use the dashboard to distinguish between failures in your own service and those caused by a Google Cloud service that you use. What should you do?

ACreate a log-based metric to track cloud service errors, and display the metric on the dashboard.
BCreate a logs widget to display system errors from Cloud Logging on the dashboard.
CCreate an alerting policy for the system error metrics.
DEnable Personalized Service Health annotations on the dashboard. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Enable Personalized Service Health annotations on the dashboard.

PCDOE Question 190

Single page →

Topic 1 · Question 190

Your company wants to implement a CD pipeline in Cloud Deploy for a web service deployed to GKE. The web service currently does not have any automated testing. The Quality Assurance team must manually verify any new releases of the web service before any production traffic is processed. You need to design the CD pipeline. What should you do?

ACreate a single pipeline stage, and use a standard deployment strategy.
BCreate a single pipeline stage, and use a canary deployment strategy.
CCreate two pipeline stages, and use a canary deployment strategy.
DCreate two pipeline stages, and use a standard deployment strategy. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Create two pipeline stages, and use a standard deployment strategy.

PCDOE Question 191

Single page →

Topic 1 · Question 191

You manage your company’s primary revenue-generating application. You have an error budget policy in place that freezes production deployments when the application is close to breaching its SLO. A number of issues have recently occurred, and the application has exhausted its error budget. You need to deploy a new release to the application that includes a feature urgently required by your largest customer. You have been told that the release has passed all unit tests. What should you do?

ADelay the deployment of the feature until the error budget is replenished.
BRe-run the unit tests, and start the deployment of the feature if the tests pass.
CStart the deployment of the feature immediately.
DDeploy the feature to a subset of users, and gradually roll out to all users if there are no errors reported. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Deploy the feature to a subset of users, and gradually roll out to all users if there are no errors reported.

PCDOE Question 192

Single page →

Topic 1 · Question 192

You work for a company that manages highly sensitive user data. You are designing the Google Kubernetes Engine (GKE) infrastructure for your company, including several applications that will be deployed in development and production environments. Your design must protect data from unauthorized access from other applications, while minimizing the amount of management overhead required. What should you do?

ACreate one cluster for the organization with separate namespaces for each application and environment combination.
BCreate one cluster for each application with separate namespaces for production and development environments.
CCreate one cluster for each environment (development and production) with each application in its own namespace within each cluster. (correct answer)
DCreate one cluster for the organization with separate namespaces for each application.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create one cluster for each environment (development and production) with each application in its own namespace within each cluster.

PCDOE Question 193

Single page →

Topic 1 · Question 193

You are developing a Node.js utility on a workstation in Cloud Workstations by using Code OSS. The utility is a simple web page, and you have already confirmed that all necessary firewall rules are in place. You tested the application by starting it on port 3000 on your workstation in Cloud Workstations, but you need to be able to access the web page from your local machine. You need to follow Google-recommended security practices. What should you do?

AUse a browser running on a bastion host VM.
BRun the gcloud compute start-iap-tunnel command to the Cloud Workstations VM.
CAllow public IP addresses in the Cloud Workstations configuration.
DClick the preview link in the Code OSS panel. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Click the preview link in the Code OSS panel.

PCDOE Question 194

Single page →

Topic 1 · Question 194

Your team is preparing to launch a new API in Cloud Run. The API uses an OpenTelemetry agent to send distributed tracing data to Cloud Trace to monitor the time each request takes. The team has noticed inconsistent trace collection. You need to resolve the issue. What should you do?

AUse an HTTP health check.
BConfigure CPU to be always-allocated. (correct answer)
CIncrease the CPU limit in Cloud Run from 2 to 4.
DConfigure CPU to be allocated only during request processing.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Configure CPU to be always-allocated.

PCDOE Question 195

Single page →

Topic 1 · Question 195

You are deploying a new application on Google Kubernetes Engine (GKE) that processes personally identifiable information (PII). You need to configure Cloud Logging to collect logs from your application while ensuring that sensitive user information is not exposed. What should you do?

AImplement log sampling to reduce the volume of logs collected.
BConfigure Cloud Data Loss Prevention to scan logs in real-time and redact PII before it's stored in Cloud Logging. (correct answer)
CDisable Cloud Logging for the application to prevent sensitive data from being logged.
DStore all logs in an encrypted Cloud Storage bucket with restricted access.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Configure Cloud Data Loss Prevention to scan logs in real-time and redact PII before it's stored in Cloud Logging.

Explanation

Cloud Logging centralizes, stores, and analyzes logs across services.

PCDOE Question 196

Single page →

Topic 1 · Question 196

You recently created a Cloud Build pipeline for deploying Terraform code stored in a GitHub repository. You make Terraform code changes in short-lived branches and sometimes use tags during development. You tag releases with a semantic version when they are ready for deployment. You require your pipeline to apply the Terraform code whenever there is a new release, and you need to minimize operational overhead. What should you do?

ACreate a build trigger with the \d+\.\d+\.\d+ tag pattern. (correct answer)
BCreate a build trigger with the \d+\.\d+\.\d+ branch pattern.
CCreate a build trigger with the .* tag pattern.
DCreate a build trigger with the .* branch pattern.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create a build trigger with the \d+\.\d+\.\d+ tag pattern.

PCDOE Question 197

Single page →

Topic 1 · Question 197

You manage a microservice that provides a public-facing API (Service A). Service A is time-critical and has a response SLO of 500 ms. Service A makes synchronous calls to internal API (Service B) that is known to become unreliable under heavy load, resulting in connection timeout errors or 500 errors. Service B is used to collect request information for the transactions processed by Service A. You need to mitigate the impact of Service B issues on your Service A users. What should you do?

AIncrease the size of the queue in front of the thread pool used by Service A instances.
BImplement retry logic with exponential back-offs when calling Service B.
CImplement a circuit breaker to store the request data in a database. (correct answer)
DImplement rate limiting in Service A to limit the number of requests to Service B.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Implement a circuit breaker to store the request data in a database.

PCDOE Question 198

Single page →

Topic 1 · Question 198 · Select all that apply

Your company is migrating its production systems to Google Cloud. You need to implement site reliability engineering (SRE) practices during the migration to minimize customer impact from potential future incidents. Which two SRE practices should you implement? (Choose two.)

ACreate up-to-date playbooks with instructions for debugging and mitigating issues. (correct answer)
BEnsure that all teams can modify the production environment to resolve issues.
CCreate an alerting mechanism for your SRE team based on your system's internal behavior.
DAutomate common tasks to analyze key impact information and intelligently suggest mitigating actions for the on-call team. (correct answer)
EEnsure that full autonomy and permissions are only granted to the on-call team.

Reveal answer & explanation

Correct answer: A, D

The correct answer is A, D. Option A: Create up-to-date playbooks with instructions for debugging and mitigating issues. Option D: Automate common tasks to analyze key impact information and intelligently suggest mitigating actions for the on-call team.

PCDOE Question 199

Single page →

Topic 1 · Question 199

You are deploying a new web application on Cloud Run in your Google Cloud project. You expect traffic to range from 10 requests per second during off-peak hours to 1000 requests per second during peak hours. You want to use autoscaling to efficiently handle the changes in traffic while ensuring that the autoscaler does not exceed your project's resource quotas. What should you do?

AManually adjust the number of instances based on observed traffic patterns throughout the day.
BDefine appropriate resource limits for the Cloud Run service, and ensure your project has sufficient resource quotas to accommodate the desired scaling range. (correct answer)
CConfigure the autoscaler to scale based on CPU utilization with a target of 80%.
DConfigure the autoscaler to scale based on request count, with a target of 500 requests per instance.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Define appropriate resource limits for the Cloud Run service, and ensure your project has sufficient resource quotas to accommodate the desired scaling range.

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead.

PCDOE Question 200

Single page →

Topic 1 · Question 200 · Select all that apply

Your company is actively developing a new web service following site reliability engineering (SRE) practices. You are leading the company's SRE team and preparing the service for production. You must ensure that the team follows Google-recommended SRE practices during this productionalization process. Which two actions should you take next? (Choose two.)

AEstablish monitoring and alerting systems. (correct answer)
BStart to document infrastructure system guidelines.
CCollaborate with the product team to design the service.
DImplement redundancy measures.
EProvide early engagement consulting to discuss architecture and design choices in detail. (correct answer)

Reveal answer & explanation

Correct answer: A, E

The correct answer is A, E. Option A: Establish monitoring and alerting systems. Option E: Provide early engagement consulting to discuss architecture and design choices in detail.

PCDOE Question 201

Single page →

Topic 1 · Question 201

Your company uses a CI/CD pipeline with Cloud Build and Artifact Registry to deploy container images to Google Kubernetes Engine (GKE). Images are tagged with the latest commit hash and promoted to production after successful testing in the development and pre-production environments. A recent production deployment caused the application to fail due to untested integration functionality, requiring a disruptive manual rollback. During the rollback, you noticed many old and unused container images accumulating in Artifact Registry. You need to improve rollout and rollback management and clean up the old container images. What should you do?

ASet up a rollback pipeline in Cloud Build, and implement an Artifact Registry cleanup policy.
BAdopt Cloud Deploy for managing deployments, and implement an Artifact Registry cleanup policy. (correct answer)
CDeploy Cloud Service Mesh across the GKE clusters, and manually clean up Artifact Registry images.
DAdopt Cloud Deploy for managing deployments, and schedule a Cloud Build job for container image cleanup.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Adopt Cloud Deploy for managing deployments, and implement an Artifact Registry cleanup policy.

Explanation

Cloud Deploy manages continuous delivery to GKE and other runtimes with promotion and rollback. Artifact Registry stores and manages container images and language packages.

Showing questions 181–200 of 210 · Page 10 of 11