🔍

PCDOE — questions

Page 8 of 11 · 210 total questions.

PCDOE Question 141

Single page →
Topic 1 · Question 141

You are investigating issues in your production application that runs on Google Kubernetes Engine (GKE). You determined that the source of the issue is a recently updated container image, although the exact change in code was not identified. The deployment is currently pointing to the latest tag. You need to update your cluster to run a version of the container that functions as intended. What should you do?

  • ACreate a new tag called stable that points to the previously working container, and change the deployment to point to the new tag.
  • BAlter the deployment to point to the sha256 digest of the previously working container. (correct answer)
  • CBuild a new container from a previous Git tag, and do a rolling update on the deployment to the new container.
  • DApply the latest tag to the previous container image, and do a rolling update on the deployment.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Alter the deployment to point to the sha256 digest of the previously working container.

PCDOE Question 142

Single page →
Topic 1 · Question 142

You need to create a Cloud Monitoring SLO for a service that will be published soon. You want to verify that requests to the service will be addressed in fewer than 300 ms at least 90% of the time per calendar month. You need to identify the metric and evaluation method to use. What should you do?

  • ASelect a latency metric for a request-based method of evaluation. (correct answer)
  • BSelect a latency metric for a window-based method of evaluation.
  • CSelect an availability metric for a request-based method of evaluation.
  • DSelect an availability metric for a window-based method of evaluation.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Select a latency metric for a request-based method of evaluation.

PCDOE Question 143

Single page →
Topic 1 · Question 143 · Select all that apply

You have an application that runs on Cloud Run. You want to use live production traffic to test a new version of the application, while you let the quality assurance team perform manual testing. You want to limit the potential impact of any issues while testing the new version, and you must be able to roll back to a previous version of the application if needed. How should you deploy the new version? (Choose two.)

  • ADeploy the application as a new Cloud Run service.
  • BDeploy a new Cloud Run revision with a tag and use the --no-traffic option. (correct answer)
  • CDeploy a new Cloud Run revision without a tag and use the --no-traffic option.
  • DDeploy the new application version and use the --no-traffic option. Route production traffic to the revision’s URL. (correct answer)
  • EDeploy the new application version, and split traffic to the new version.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Deploy a new Cloud Run revision with a tag and use the --no-traffic option. Option D: Deploy the new application version and use the --no-traffic option. Route production traffic to the revision’s URL.

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead.

PCDOE Question 144

Single page →
Topic 1 · Question 144

You recently noticed that one of your services has exceeded the error budget for the current rolling window period. Your company's product team is about to launch a new feature. You want to follow Site Reliability Engineering (SRE) practices. What should you do?

  • ANotify the team about the lack of error budget and ensure that all their tests are successful so the launch will not further risk the error budget
  • BNotify the team that their error budget is used up. Negotiate with the team for a launch freeze or tolerate a slightly worse user experience. (correct answer)
  • CEscalate the situation and request additional error budget.
  • DLook through other metrics related to the product and find SLOs with remaining error budget. Reallocate the error budgets and allow the feature launch.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Notify the team that their error budget is used up. Negotiate with the team for a launch freeze or tolerate a slightly worse user experience.

PCDOE Question 145

Single page →
Topic 1 · Question 145 · Select all that apply

You need to introduce postmortems into your organization. You want to ensure that the postmortem process is well received. What should you do? (Choose two.)

  • AEncourage new employees to conduct postmortems to team through practice.
  • BCreate a designated team that is responsible for conducting all postmortems.
  • CEncourage your senior leadership to acknowledge and participate in postmortems. (correct answer)
  • DEnsure that writing effective postmortems is a rewarded and celebrated practice. (correct answer)
  • EProvide your organization with a forum to critique previous postmortems.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Encourage your senior leadership to acknowledge and participate in postmortems. Option D: Ensure that writing effective postmortems is a rewarded and celebrated practice.

PCDOE Question 146

Single page →
Topic 1 · Question 146

You need to enforce several constraint templates across your Google Kubernetes Engine (GKE) clusters. The constraints include policy parameters, such as restricting the Kubernetes API. You must ensure that the policy parameters are stored in a GitHub repository and automatically applied when changes occur. What should you do?

  • ASet up a GitHub action to trigger Cloud Build when there is a parameter change. In Cloud Build, run a gcloud CLI command to apply the change.
  • BWhen there is a change in GitHub. use a web hook to send a request to Anthos Service Mesh, and apply the change.
  • CConfigure Anthos Config Management with the GitHub repository. When there is a change in the repository, use Anthos Config Management to apply the change. (correct answer)
  • DConfigure Config Connector with the GitHub repository. When there is a change in the repository, use Config Connector to apply the change.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure Anthos Config Management with the GitHub repository. When there is a change in the repository, use Anthos Config Management to apply the change.

Explanation

Anthos runs and manages Kubernetes workloads consistently across on-premises and clouds.

PCDOE Question 147

Single page →
Topic 1 · Question 147

You are the Operations Lead for an ongoing incident with one of your services. The service usually runs at around 70% capacity. You notice that one node is returning 5xx errors for all requests. There has also been a noticeable increase in support cases from customers. You need to remove the offending node from the load balancer pool so that you can isolate and investigate the node. You want to follow Google-recommended practices to manage the incident and reduce the impact on users. What should you do?

  • A1. Communicate your intent to the incident team.2. Perform a load analysis to determine if the remaining nodes can handle the increase in traffic offloaded from the removed node, and scale appropriately.3. When any new nodes report healthy, drain traffic from the unhealthy node, and remove the unhealthy node from service. (correct answer)
  • B1. Communicate your intent to the incident team.2. Add a new node to the pool, and wait for the new node to report as healthy.3. When traffic is being served on the new node, drain traffic from the unhealthy node, and remove the old node from service.
  • C1. Drain traffic from the unhealthy node and remove the node from service.2. Monitor traffic to ensure that the error is resolved and that the other nodes in the pool are handling the traffic appropriately.3. Scale the pool as necessary to handle the new load.4. Communicate your actions to the incident team.
  • D1. Drain traffic from the unhealthy node and remove the old node from service.2. Add a new node to the pool, wait for the new node to report as healthy, and then serve traffic to the new node.3. Monitor traffic to ensure that the pool is healthy and is handling traffic appropriately.4. Communicate your actions to the incident team.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: 1. Communicate your intent to the incident team.2. Perform a load analysis to determine if the remaining nodes can handle the increase in traffic offloaded from the removed node, and scale appropriately.3. When any ne...

PCDOE Question 148

Single page →
Topic 1 · Question 148

You are configuring your CI/CD pipeline natively on Google Cloud. You want builds in a pre-production Google Kubernetes Engine (GKE) environment to be automatically load-tested before being promoted to the production GKE environment. You need to ensure that only builds that have passed this test are deployed to production. You want to follow Google-recommended practices. How should you configure this pipeline with Binary Authorization?

  • ACreate an attestation for the builds that pass the load test by requiring the lead quality assurance engineer to sign the attestation by using their personal private key.
  • BCreate an attestation for the builds that pass the load test by using a private key stored in Cloud Key Management Service (Cloud KMS) with a service account JSON key stored as a Kubernetes Secret.
  • CCreate an attestation for the builds that pass the load test by using a private key stored in Cloud Key Management Service (Cloud KMS) authenticated through Workload Identity. (correct answer)
  • DCreate an attestation for the builds that pass the load test by requiring the lead quality assurance engineer to sign the attestation by using a key stored in Cloud Key Management Service (Cloud KMS).
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an attestation for the builds that pass the load test by using a private key stored in Cloud Key Management Service (Cloud KMS) authenticated through Workload Identity.

Explanation

Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. Cloud KMS manages encryption keys and integrates with Google Cloud services for encryption.

PCDOE Question 149

Single page →
Topic 1 · Question 149

You are deploying an application to Cloud Run. The application requires a password to start. Your organization requires that all passwords are rotated every 24 hours, and your application must have the latest password. You need to deploy the application with no downtime. What should you do?

  • AStore the password in Secret Manager and send the secret to the application by using environment variables.
  • BStore the password in Secret Manager and mount the secret as a volume within the application. (correct answer)
  • CUse Cloud Build to add your password into the application container at build time. Ensure that Artifact Registry is secured from public access.
  • DStore the password directly in the code. Use Cloud Build to rebuild and deploy the application each time the password changes.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Store the password in Secret Manager and mount the secret as a volume within the application.

Explanation

Secret Manager stores and controls access to secrets such as API keys and credentials.

PCDOE Question 150

Single page →
Topic 1 · Question 150

Your company runs applications in Google Kubernetes Engine (GKE) that are deployed following a GitOps methodology. Application developers frequently create cloud resources to support their applications. You want to give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices. You need to ensure that infrastructure as code reconciles periodically to avoid configuration drift. What should you do?

  • AInstall and configure Config Connector in Google Kubernetes Engine (GKE). (correct answer)
  • BConfigure Cloud Build with a Terraform builder to execute terraform plan and terraform apply commands.
  • CCreate a Pod resource with a Terraform docker image to execute terraform plan and terraform apply commands.
  • DCreate a Job resource with a Terraform docker image to execute terraform plan and terraform apply commands.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Install and configure Config Connector in Google Kubernetes Engine (GKE).

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Google Kubernetes Engine runs managed Kubernetes for containerized workloads.

PCDOE Question 151

Single page →
Topic 1 · Question 151

You are designing a system with three different environments: development, quality assurance (QA), and production. Each environment will be deployed with Terraform and has a Google Kubernetes Engine (GKE) cluster created so that application teams can deploy their applications. Anthos Config Management will be used and templated to deploy infrastructure level resources in each GKE cluster. All users (for example, infrastructure operators and application owners) will use GitOps. How should you structure your source control repositories for both Infrastructure as Code (IaC) and application code?

  • A• Cloud Infrastructure (Terraform) repository is shared: different directories are different environments• GKE Infrastructure (Anthos Config Management Kustomize manifests) repository is shared: different overlay directories are different environments• Application (app source code) repositories are separated: different branches are different features (correct answer)
  • B• Cloud Infrastructure (Terraform) repository is shared: different directories are different environments• GKE Infrastructure (Anthos Config Management Kustomize manifests) repositories are separated: different branches are different environments• Application (app source code) repositories are separated: different branches are different features
  • C• Cloud Infrastructure (Terraform) repository is shared: different branches are different environments• GKE Infrastructure (Anthos Config Management Kustomize manifests) repository is shared: different overlay directories are different environments• Application (app source code) repository is shared: different directories are different features
  • D• Cloud Infrastructure (Terraform) repositories are separated: different branches are different environments• GKE Infrastructure (Anthos Config Management Kustomize manifests) repositories are separated: different overlay directories are different environments• Application (app source code) repositories are separated: different branches are different
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: • Cloud Infrastructure (Terraform) repository is shared: different directories are different environments• GKE Infrastructure (Anthos Config Management Kustomize manifests) repository is shared: different overlay dire...

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Terraform provisions Google Cloud infrastructure as code repeatably. Anthos runs and manages Kubernetes workloads consistently across on-premises and clouds.

PCDOE Question 152

Single page →
Topic 1 · Question 152

You are configuring Cloud Logging for a new application that runs on a Compute Engine instance with a public IP address. A user-managed service account is attached to the instance. You confirmed that the necessary agents are running on the instance but you cannot see any log entries from the instance in Cloud Logging. You want to resolve the issue by following Google-recommended practices. What should you do?

  • AExport the service account key and configure the agents to use the key.
  • BUpdate the instance to use the default Compute Engine service account.
  • CAdd the Logs Writer role to the service account. (correct answer)
  • DEnable Private Google Access on the subnet that the instance is in.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add the Logs Writer role to the service account.

Explanation

A service account provides an identity for workloads to access Google Cloud APIs securely.

PCDOE Question 153

Single page →
Topic 1 · Question 153

As a Site Reliability Engineer, you support an application written in Go that runs on Google Kubernetes Engine (GKE) in production. After releasing a new version of the application, you notice the application runs for about 15 minutes and then restarts. You decide to add Cloud Profiler to your application and now notice that the heap usage grows constantly until the application restarts. What should you do?

  • AIncrease the CPU limit in the application deployment.
  • BAdd high memory compute nodes to the cluster.
  • CIncrease the memory limit in the application deployment. (correct answer)
  • DAdd Cloud Trace to the application, and redeploy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Increase the memory limit in the application deployment.

PCDOE Question 154

Single page →
Topic 1 · Question 154

You are deploying a Cloud Build job that deploys Terraform code when a Git branch is updated. While testing, you noticed that the job fails. You see the following error in the build logs: Initializing the backend... Error: Failed to get existing workspaces: querying Cloud Storage failed: googleapi: Error 403 You need to resolve the issue by following Google-recommended practices. What should you do?

  • AChange the Terraform code to use local state.
  • BCreate a storage bucket with the name specified in the Terraform configuration.
  • CGrant the roles/owner Identity and Access Management (IAM) role to the Cloud Build service account on the project.
  • DGrant the roles/storage.objectAdmin Identity and Access Management (1AM) role to the Cloud Build service account on the state file bucket. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Grant the roles/storage.objectAdmin Identity and Access Management (1AM) role to the Cloud Build service account on the state file bucket.

Explanation

A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud Build runs managed CI pipelines to build, test, and package code.

PCDOE Question 155

Single page →
Topic 1 · Question 155

Your company runs applications in Google Kubernetes Engine (GKE). Several applications rely on ephemeral volumes. You noticed some applications were unstable due to the DiskPressure node condition on the worker nodes. You need to identify which Pods are causing the issue, but you do not have execute access to workloads and nodes. What should you do?

  • ACheck the node/ephemeral_storage/used_bytes metric by using Metrics Explorer.
  • BCheck the container/ephemeral_storage/used_bytes metric by using Metrics Explorer. (correct answer)
  • CLocate all the Pods with emptyDir volumes. Use the df -h command to measure volume disk usage.
  • DLocate all the Pods with emptyDir volumes. Use the df -sh * command to measure volume disk usage.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Check the container/ephemeral_storage/used_bytes metric by using Metrics Explorer.

PCDOE Question 156

Single page →
Topic 1 · Question 156

You are designing a new Google Cloud organization for a client. Your client is concerned with the risks associated with long-lived credentials created in Google Cloud. You need to design a solution to completely eliminate the risks associated with the use of JSON service account keys while minimizing operational overhead. What should you do?

  • AApply the constraints/iam.disableServiceAccountKevCreation constraint to the organization. (correct answer)
  • BUse custom versions of predefined roles to exclude all iam.serviceAccountKeys.* service account role permissions.
  • CApply the constraints/iam.disableServiceAccountKeyUpload constraint to the organization.
  • DGrant the roles/iam.serviceAccountKeyAdmin IAM role to organization administrators only.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Apply the constraints/iam.disableServiceAccountKevCreation constraint to the organization.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

PCDOE Question 157

Single page →
Topic 1 · Question 157

You are designing a deployment technique for your applications on Google Cloud. As part of your deployment planning, you want to use live traffic to gather performance metrics for new versions of your applications. You need to test against the full production load before your applications are launched. What should you do?

  • AUse A/B testing with blue/green deployment.
  • BUse canary testing with continuous deployment.
  • CUse canary testing with rolling updates deployment.
  • DUse shadow testing with continuous deployment. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use shadow testing with continuous deployment.

PCDOE Question 158

Single page →
Topic 1 · Question 158

Your Cloud Run application writes unstructured logs as text strings to Cloud Logging. You want to convert the unstructured logs to JSON-based structured logs. What should you do?

  • AModify the application to use Cloud Logging software development kit (SDK), and send log entries with a jsonPayload field. (correct answer)
  • BInstall a Fluent Bit sidecar container, and use a JSON parser.
  • CInstall the log agent in the Cloud Run container image, and use the log agent to forward logs to Cloud Logging.
  • DConfigure the log agent to convert log text payload to JSON payload.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Modify the application to use Cloud Logging software development kit (SDK), and send log entries with a jsonPayload field.

Explanation

Cloud Logging centralizes, stores, and analyzes logs across services.

PCDOE Question 159

Single page →
Topic 1 · Question 159 · Select all that apply

Your company is planning a large marketing event for an online retailer during the holiday shopping season. You are expecting your web application to receive a large volume of traffic in a short period. You need to prepare your application for potential failures during the event. What should you do? (Choose two.)

  • AConfigure Anthos Service Mesh on the application to identify issues on the topology map.
  • BEnsure that relevant system metrics are being captured with Cloud Monitoring, and create alerts at levels of interest. (correct answer)
  • CReview your increased capacity requirements and plan for the required quota management. (correct answer)
  • DMonitor latency of your services for average percentile latency.
  • ECreate alerts in Cloud Monitoring for all common failures that your application experiences.
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Ensure that relevant system metrics are being captured with Cloud Monitoring, and create alerts at levels of interest. Option C: Review your increased capacity requirements and plan for the required quota management.

Explanation

Cloud Monitoring collects metrics, dashboards, and alerts to observe system health.

PCDOE Question 160

Single page →
Topic 1 · Question 160

Your company recently migrated to Google Cloud. You need to design a fast, reliable, and repeatable solution for your company to provision new projects and basic resources in Google Cloud. What should you do?

  • AUse the Google Cloud console to create projects.
  • BWrite a script by using the gcloud CLI that passes the appropriate parameters from the request. Save the script in a Git repository.
  • CWrite a Terraform module and save it in your source control repository. Copy and run the terraform apply command to create the new project.
  • DUse the Terraform repositories from the Cloud Foundation Toolkit. Apply the code with appropriate parameters to create the Google Cloud project and related resources. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use the Terraform repositories from the Cloud Foundation Toolkit. Apply the code with appropriate parameters to create the Google Cloud project and related resources.

Explanation

Terraform provisions Google Cloud infrastructure as code repeatably.

Showing questions 141–160 of 210 · Page 8 of 11