Professional-Cloud-DevOps-Engineer無料問題集「Google Cloud Certified

質問 1

You are currently planning how to display Cloud Monitoring metrics for your organization's Google Cloud projects. Your organization has three folders and six projects:

You want to configure Cloud Monitoring dashboards lo only display metrics from the projects within one folder You need to ensure that the dashboards do not display metrics from projects in the other folders You want to follow Google-recommended practices What should you do?

（A）Use the current app-one-prod project as the scoping project

（B）Create new scoping projects for each folder

（C）Create a single new scoping project

（D）Use the current app-one-dev, app-one-staging and app-one-prod projects as the scoping project for each folder

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?

（A）Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.

（B）Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.

（C）Grant the team members the IAM role of logging.configWriter on Cloud IAM.

（D）Configure Access Context Manager to allow only these members to export logs.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You are reviewing your deployment pipeline in Google Cloud Deploy You must reduce toil in the pipeline and you want to minimize the amount of time it takes to complete an end-to-end deployment What should you do?
Choose 2 answers

（A）Use a script to automate the creation of the deployment pipeline in Google Cloud Deploy

（B）Create a trigger to notify the required team to complete the next step when manual intervention is required

（C）Divide the automation steps into smaller tasks

（D）Add more engineers to finish the manual steps.

（E）Automate promotion approvals from the development environment to the test environment

正解：B、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?

（A）Use the n2-highcpu-96 machine type in the configuration of the MIG.

（B）Validate that the resource requirements are within the available quota limits of each region.

（C）Monitor results of Stackdriver Trace to determine the required amount of resources.

（D）Deploy the service in one region and use a global load balancer to route traffic to this region.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

You are developing reusable infrastructure as code modules. Each module contains integration tests that launch the module in a test project. You are using GitHub for source control. You need to Continuously test your feature branch and ensure that all code is tested before changes are accepted. You need to implement a solution to automate the integration tests. What should you do?

（A）Use Cloud Build to run tests in a specific folder. Trigger Cloud Build for every GitHub pull request.

（B）Use a Jenkins server for Cl/CD pipelines. Periodically run all tests in the feature branch.

（C）Ask the pull request reviewers to run the integration tests before approving the code.

（D）Use Cloud Build to run the tests. Trigger all tests to run after a pull request is merged.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Your company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project might accidentally delete the project, so a lien has been placed on the project. You need to design a solution to restrict Shared VPC project deletion to those with the resourcemanager.projects.updateLiens permission at the organization level. What should you do?

（A）Revoke the resourcemanager.projects.updateLiens permission from all users associated with the project.

（B）Instruct teams to only perform IAM permission management as code with Terraform.

（C）Enable VPC Service Controls for the container.googleapis.com API service.

（D）Enable the compute.restrictXpnProjectLienRemoval organization policy constraint.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Your team has an application built by using a Dockerfile. The build is executed from Cloud Build, and the resulting artifacts are stored in Artifact Registry. Your team is reporting that builds are slow. You need to increase build speed, while following Google-recommended practices. What should you do?

（A）Use the --cache-from parameter, and point to Artifact Registry. Add the most frequently modified files to the later stages of the build process.

（B）Use the --cache-from parameter, and point to Artifact Registry. Add the most frequently modified files to the earlier stages of the build process.

（C）Cache the container layers of the build process to Cloud Storage. Add the most frequently modified files to the later stages of the build process.

（D）Cache the container layers of the build process to Cloud Storage. Add the most frequently modified files to the earlier stages of the build process.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Your organization is using Helm to package containerized applications Your applications reference both public and private charts Your security team flagged that using a public Helm repository as a dependency is a risk You want to manage all charts uniformly, with native access control and VPC Service Controls What should you do?

（A）Store public and private charts by using Git repository Configure Cloud Build to synchronize contents of the repository into a Cloud Storage bucket Connect Helm to the bucket by using https: // [bucket] .
srorage.googleapis.com/ [holnchart] as the Helm repository

（B）Configure a Helm chart repository server to run in Google Kubernetes Engine (GKE) with Cloud Storage bucket as the storage backend

（C）Store public and private charts by using GitHub Enterprise with Google Workspace as the identity provider

（D）Store public and private charts in OCI format by using Artifact Registry

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Your company experiences bugs, outages, and slowness in its production systems. Developers use the production environment for new feature development and bug fixes. Configuration and experiments are done in the production environment, causing outages for users. Testers use the production environmentfor load testing, which often slows the production systems. You need to redesign the environment to reduce the number of bugs and outages in production and to enable testers to load test new features. What should you do?

（A）Create a development environment for writing code and a test environment for configurations, experiments, and load testing.

（B）Create a development environment with smaller server capacity and give access only to developers and testers.

（C）Create an automated testing script in production to detect failures as soon as they occur.

（D）Secure the production environment to ensure that developers can't change it and set up one controlled update per year.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Your product is currently deployed in three Google Cloud Platform (GCP) zones with your users divided between the zones. You can fail over from one zone to another, but it causes a 10-minute service disruption for the affected users. You typically experience a database failure once per quarter and can detect it within five minutes. You are cataloging the reliability risks of a new real-time chat feature for your product. You catalog the following information for each risk:
* Mean Time to Detect (MUD} in minutes
* Mean Time to Repair (MTTR) in minutes
* Mean Time Between Failure (MTBF) in days
* User Impact Percentage
The chat feature requires a new database system that takes twice as long to successfully fail over between zones. You want to account for the risk of the new database failing in one zone. What would be the values for the risk of database failover with the new system?

（A）MTTD:5MTTR: 20MTBF: 90Impact: 50%

（B）MTTD:5MTTR: 10MTBF: 90Impact 50%

（C）MTTD:5MTTR: 20MTBF: 90Impact: 33%

（D）MTTD: 5MTTR: 10MTBF: 90Impact: 33%

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

You are responsible for creating development environments for your company's development team. You want to create environments with identical IDEs for all developers while ensuring that these environments are not exposed to public networks. You need to choose the most cost-effective solution without impacting developer productivity. What should you do?

（A）Create a Cloud Workstations private cluster. Create a workstation configuration with an idleTimeout parameter.

（B）Create a Cloud Workstations private cluster. Create a workstation configuration with a runningTimeout parameter.

（C）Create multiple Compute Engine VM instances with an external IP address and use a Public NAT gateway. Configure an instance schedule to shut down the VMs.

（D）Create multiple Compute Engine VM instances without an external IP address. Configure an instance schedule to shut down the VMs.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

（A）Set up the Kubernetes Engine clusters as private clusters.

（B）Enable Vulnerability Analysis on the Container Registry.

（C）Set up the Kubernetes Engine clusters with Binary Authorization.

（D）Enable Cloud Security Scanner on the clusters.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

You are designing a deployment technique for your applications on Google Cloud. As part Of your deployment planning, you want to use live traffic to gather performance metrics for new versions Ofyour applications. You need to test against the full production load before your applications are launched. What should you do?

（A）Use canary testing with continuous deployment.

（B）Use canary testing with rolling updates deployment,

（C）Use shadow testing with continuous deployment.

（D）Use A/B testing with blue/green deployment.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (Pll) is leaking into certain log entry fields. All Pll entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging. What should you do?

（A）Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.

（B）Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a tog exclusion with userinfo as a filter.

（C）Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.

（D）Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 15

You are performing a semi-annual capacity planning exercise for your flagship service You expect a service user growth rate of 10% month-over-month for the next six months Your service is fully containerized and runs on a Google Kubemetes Engine (GKE) standard cluster across three zones with cluster autoscaling enabled You currently consume about 30% of your total deployed CPU capacity and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth o' as a result of zone failure while you avoid unnecessary costs How should you prepare to handle the predicted growth?

（A）Verify the maximum node pool size enable a Horizontal Pod Autoscaler and then perform a load lest to verify your expected resource needs

（B）Proactively add 80% more node capacity to account for six months of 10% growth rate and then perform a load test to ensure that you have enough capacity

（C）Because you are only using 30% of deployed CPU capacity there is significant headroom and you do not need to add any additional capacity for this rate of growth

（D）Because you deployed the service on GKE and are using a cluster autoscaler your GKE cluster will scale automatically regardless of growth rate

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Professional-Cloud-DevOps-Engineer 無料問題集「Google Cloud Certified - Professional Cloud DevOps Engineer」

弊社を連絡する

関連リンク

トップ試験