[2023年04月最新リリース]Professional-Cloud-DevOps-Engineer試験問題はあなたをパスさせる
Google Professional-Cloud-DevOps-Engineer試験基本問題とアンサー
Google Professional-Cloud-DevOps-Engineerの試験は、インフラストラクチャの展開、自動化、モニタリング、最適化など、クラウドベースのDevOpsエンジニアリングのさまざまな側面に焦点を当てています。試験は、クラウドコンピューティングの概念、コンテナ化、継続的インテグレーションとデプロイメント、セキュリティ原則など、さまざまなトピックをカバーしています。試験は、最良のプラクティスや業界標準を使用してクラウドベースのソリューションを設計、開発、管理する能力を測定することを目的としています。
質問 # 32
You have a pool of application servers running on Compute Engine. You need to provide a secure solution that requires the least amount of configuration and allows developers to easily access application logs for troubleshooting. How would you implement the solution on GCP?
- A. Install the gsutil command line tool on your application servers.
* Write a script using gsutil to upload your application log to a Cloud Storage bucket, and then schedule it to run via cron every 5 minutes.
* Give the developers IAM Object Viewer access to view the logs in the specified bucket. - B. Deploy the Stackdriver monitoring agent to the application servers.
* Give the developers the IAM Monitoring Viewer role to access Stackdriver and view metrics. - C. Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Viewer role to access Stackdriver and view logs. - D. Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Private Logs Viewer role to access Stackdriver and view logs.
正解：A
質問 # 33
Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
- A. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.
- B. Create a new service account with the Container Developer role and use it to run Cloud Build.
- C. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
- D. Assign the Container Developer role to the Cloud Build service account.
正解：D
解説：
https://cloud.google.com/build/docs/deploying-builds/deploy-gke
https://cloud.google.com/build/docs/securing-builds/configure-user-specified-service-accounts
質問 # 34
You need to run a business-critical workload on a fixed set of Compute Engine instances for several months.
The workload is stable with the exact amount of resources allocated to it. You want to lower the costs for this workload without any performance implications. What should you do?
- A. Convert the instances to preemptible virtual machines.
- B. Migrate the instances to a Managed Instance Group.
- C. Create an Unmanaged Instance Group for the instances used to run the workload.
- D. Purchase Committed Use Discounts.
正解：A
解説：
Explanation/Reference: https://cloud.google.com/compute/docs/faq
質問 # 35
You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
- A. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.
- B. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.
- C. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
- D. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
正解：A
質問 # 36
You support a service that recently had an outage. The outage was caused by a new release that exhausted the service memory resources. You rolled back the release successfully to mitigate the impact on users. You are now in charge of the post-mortem for the outage. You want to follow Site Reliability Engineering practices when developing the post-mortem. What should you do?
- A. Focus on developing new features rather than avoiding the outages from recurring.
- B. Use the Git history to find the related code commit. Prevent the engineer who made that commit from working on production services.
- C. Focus on identifying the contributing causes of the incident rather than the individual responsible for the cause.
- D. Plan individual meetings with all the engineers involved. Determine who approved and pushed the new release to production.
正解：C
質問 # 37
You support the backend of a mobile phone game that runs on a Google Kubernetes Engine (GKE) cluster. The application is serving HTTP requests from users. You need to implement a solution that will reduce the network cost. What should you do?
- A. Configure a Google Cloud HTTP Load Balancer as Ingress.
- B. Configure your Kubernetes cluster as a Private Cluster.
- C. Configure your network services on the Standard Tier.
- D. Configure the VPC as a Shared VPC Host project.
正解：D
質問 # 38
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
- A. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
- B. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
- C. Use an Admission Controller to verify that incoming requests originate from approved sources.
- D. Configure the build system with protected branches that require pull request approval.
正解：D
質問 # 39
You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?
- A. Inject the secret at the time of instance creation via an encrypted configuration management system.
- B. Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
- C. Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
- D. Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
正解：B
質問 # 40
You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time. What should you do?
- A. Configure Stackdriver Profiler to identify and visualize when the cache misses occur based on the logs.
- B. Create a logs-based metric in Stackdriver Logging and a dashboard for that metric in Stackdriver Monitoring.
- C. Configure BigOuery as a sink for Stackdriver Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table
- D. Link Stackdriver Logging as a source in Google Data Studio. Filler (he logs on the cache misses.
正解：B
質問 # 41
Your team is designing a new application for deployment into Google Kubernetes Engine (GKE). You need to set up monitoring to collect and aggregate various application-level metrics in a centralized location. You want to use Google Cloud Platform services while minimizing the amount of work required to set up monitoring. What should you do?
- A. Emit all metrics in the form of application-specific log messages, pass these messages from the containers to the Stackdriver logging collector, and then observe metrics in Stackdriver.
- B. Install the OpenTelemetry client libraries in the application, configure Stackdriver as the export destination for the metrics, and then observe the application's metrics in Stackdriver.
- C. Publish various metrics from the application directly to the Slackdriver Monitoring API, and then observe these custom metrics in Stackdriver.
- D. Install the Cloud Pub/Sub client libraries, push various metrics from the application to various topics, and then observe the aggregated metrics in Stackdriver.
正解：C
解説：
https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics#custom_metrics
https://github.com/GoogleCloudPlatform/k8s-stackdriver/blob/master/custom-metrics-stackdriver-adapter/README.md Your application can report a custom metric to Cloud Monitoring. You can configure Kubernetes to respond to these metrics and scale your workload automatically. For example, you can scale your application based on metrics such as queries per second, writes per second, network performance, latency when communicating with a different application, or other metrics that make sense for your workload. https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics
質問 # 42
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Disable the CI pipeline and revert to manually building and pushing the artifacts.
- B. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- C. Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
- D. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
正解：A
質問 # 43
You are writing a postmortem for an incident that severely affected users. You want to prevent similar incidents in the future. Which two of the following sections should you include in the postmortem? (Choose two.)
- A. A list of employees responsible for causing the incident
- B. An explanation of the root cause of the incident
- C. Copies of the design documents for all the services impacted by the incident
- D. A list of action items to prevent a recurrence of the incident
- E. Your opinion of the incident's severity compared to past incidents
正解：A、B
質問 # 44
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline. What should you do?
- A. Configure the containers in the build pipeline to always update themselves before release.
- B. Implement static code analysis tooling against the Docker files used to create the containers.
- C. Reconfigure the existing operating system vulnerability software to exist inside the container.
- D. Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.
正解：D
質問 # 45
Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?
- A. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.
- B. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.
- C. Create one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.
- D. Create one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.
正解：B
質問 # 46
You are running an experiment to see whether your users like a new feature of a web application. Shortly after deploying the feature as a canary release, you receive a spike in the number of 500 errors sent to users, and your monitoring reports show increased latency. You want to quickly minimize the negative impact on users. What should you do first?
- A. Record data for the postmortem document of the incident.
- B. Trace the origin of 500 errors and the root cause of increased latency.
- C. Start monitoring latency, traffic, errors, and saturation.
- D. Roll back the experimental canary release.
正解：C
質問 # 47
Your team has recently deployed an NGINX-based application into Google Kubernetes Engine (GKE) and has exposed it to the public via an HTTP Google Cloud Load Balancer (GCLB) ingress. You want to scale the deployment of the application's frontend using an appropriate Service Level Indicator (SLI). What should you do?
- A. Configure the horizontal pod autoscaler to use the average response time from the Liveness and Readiness probes.
- B. Install the Stackdriver custom metrics adapter and configure a horizontal pod autoscaler to use the number of requests provided by the GCLB.
- C. Expose the NGINX stats endpoint and configure the horizontal pod autoscaler to use the request metrics exposed by the NGINX deployment.
- D. Configure the vertical pod autoscaler in GKE and enable the cluster autoscaler to scale the cluster as pods expand.
正解：C
質問 # 48
You support a high-traffic web application and want to ensure that the home page loads in a timely manner. As a first step, you decide to implement a Service Level Indicator (SLI) to represent home page request latency with an acceptable page load time set to 100 ms. What is the Google-recommended way of calculating this SLI?
- A. Count the number of home page requests that load in under 100 ms, and then divide by the total number of home page requests.
- B. Bucketize the request latencies into ranges, and then compute the median and 90th percentiles.
- C. Count the number of home page requests that load in under 100 ms. and then divide by the total number of all web application requests.
- D. Buckelize Ihe request latencies into ranges, and then compute the percentile at 100 ms.
正解：A
解説：
https://sre.google/workbook/implementing-slos/
In the SRE principles book, it's recommended treating the SLI as the ratio of two numbers: the number of good events divided by the total number of events. For example: Number of successful HTTP requests / total HTTP requests (success rate)
質問 # 49
Your product is currently deployed in three Google Cloud Platform (GCP) zones with your users divided between the zones. You can fail over from one zone to another, but it causes a 10-minute service disruption for the affected users. You typically experience a database failure once per quarter and can detect it within five minutes. You are cataloging the reliability risks of a new real-time chat feature for your product. You catalog the following information for each risk:
* Mean Time to Detect (MUD} in minutes
* Mean Time to Repair (MTTR) in minutes
* Mean Time Between Failure (MTBF) in days
* User Impact Percentage
The chat feature requires a new database system that takes twice as long to successfully fail over between zones. You want to account for the risk of the new database failing in one zone. What would be the values for the risk of database failover with the new system?
- A. MTTD: 5
MTTR: 10
MTBF: 90
Impact: 33% - B. MTTD:5
MTTR: 20
MTBF: 90
Impact: 50% - C. MTTD:5
MTTR: 10
MTBF: 90
Impact 50% - D. MTTD:5
MTTR: 20
MTBF: 90
Impact: 33%
正解：A
質問 # 50
You support an application deployed on Compute Engine. The application connects to a Cloud SQL instance to store and retrieve dat a. After an update to the application, users report errors showing database timeout messages. The number of concurrent active users remained stable. You need to find the most probable cause of the database timeout. What should you do?
- A. Use Stackdriver Profiler to visualize the resources utilization throughout the application.
- B. Determine whether there is an increased number of connections to the Cloud SQL instance.
- C. Check the serial port logs of the Compute Engine instance.
- D. Use Cloud Security Scanner to see whether your Cloud SQL is under a Distributed Denial of Service (DDoS) attack.
正解：A
質問 # 51
You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?
- A. Set up the Kubernetes Engine clusters with Binary Authorization.
- B. Set up the Kubernetes Engine clusters as private clusters.
- C. Enable Cloud Security Scanner on the clusters.
- D. Enable Vulnerability Analysis on the Container Registry.
正解：D
質問 # 52
Your company follows Site Reliability Engineering practices. You are the person in charge of Communications for a large, ongoing incident affecting your customer-facing applications. There is still no estimated time for a resolution of the outage. You are receiving emails from internal stakeholders who want updates on the outage, as well as emails from customers who want to know what is happening. You want to efficiently provide updates to everyone affected by the outage. What should you do?
- A. Focus on responding to internal stakeholders at least every 30 minutes. Commit to "next update" times.
- B. Delegate the responding to internal stakeholder emails to another member of the Incident Response Team. Focus on providing responses directly to customers.
- C. Provide periodic updates to all stakeholders in a timely manner. Commit to a "next update" time in all communications.
- D. Provide all internal stakeholder emails to the Incident Commander, and allow them to manage internal communications. Focus on providing responses directly to customers.
正解：C
解説：
When disaster strikes, the person who declares the incident typically steps into the IC role and directs the high-level state of the incident. The IC concentrates on the 3Cs and does the following: Commands and coordinates the incident response, delegating roles as needed. By default, the IC assumes all roles that have not been delegated yet. Communicates effectively. Stays in control of the incident response. Works with other responders to resolve the incident. https://sre.google/workbook/incident-response/
質問 # 53
You need to reduce the cost of virtual machines (VM| for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?
- A. A distributed, eventually consistent NoSQL database cluster with sufficient quorum
- B. A scalable in-memory caching system
- C. The organization's public-facing website
- D. A GPU-accelerated video rendering platform that retrieves and stores videos in a storage bucket
正解：D
質問 # 54
You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?
- A. Ensure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list.
- B. Download and configure a third-party integration between Stackdriver Monitoring and an SMS gateway. Ensure that your team members add their SMS/phone numbers to the external tool.
- C. Select the Webhook notifications option for each alerting policy, and configure it to use a third-party integration tool. Ensure that your team members add their SMS/phone numbers to the external tool.
- D. Configure a Slack notification for each alerting policy. Set up a Slack-to-SMS integration to send SMS messages when Slack messages are received. Ensure that your team members add their SMS/phone numbers to the external integration.
正解：A
解説：
https://cloud.google.com/monitoring/support/notification-options#creating_channels To configure SMS notifications, do the following:
In the SMS section, click Add new and follow the instructions. Click Save. When you set up your alerting policy, select the SMS notification type and choose a verified phone number from the list.
質問 # 55
......
2023年最新のリアルな無料Google Professional-Cloud-DevOps-Engineer試験問題集問題と解答：https://www.passtest.jp/Google/Professional-Cloud-DevOps-Engineer-shiken.html
Professional-Cloud-DevOps-Engineer練習テストエンジン購入前に試そう82試験問題：https://drive.google.com/open?id=1cEZNDJHJmDwvHEiXeSr_o9P_SUr6m9BR