Professional-Cloud-DevOps-Engineer無料問題集「Google Cloud Certified

質問 1

You are deploying a Cloud Build job that deploys Terraform code when a Git branch is updated. While testing, you noticed that the job fails. You see the following error in the build logs:
Initializing the backend. ..
Error: Failed to get existing workspaces : querying Cloud Storage failed: googleapi : Error
403
You need to resolve the issue by following Google-recommended practices. What should you do?

（A）Create a storage bucket with the name specified in the Terraform configuration.

（B）Grant the roles/ storage. objectAdmin Identity and Access Management (IAM) role to the Cloud Build service account on the state file bucket.

（C）Change the Terraform code to use local state.

（D）Grant the roles/ owner Identity and Access Management (IAM) role to the Cloud Build service account on the project.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Your company runs applications in Google Kubernetes Engine (GKE) that are deployed following a GitOps methodology.
Application developers frequently create cloud resources to support their applications. You want to give developers the ability to manage infrastructure as code, while ensuring that you follow Google-recommended practices. You need to ensure that infrastructure as code reconciles periodically to avoid configuration drift.
What should you do?

（A）Configure Cloud Build with a Terraform builder to execute plan and apply commands.

（B）Create a Job resource with a Terraform docker image to execute terraforrm plan and terraform apply commands.

（C）Install and configure Config Connector in Google Kubernetes Engine (GKE).

（D）Create a Pod resource with a Terraform docker image to execute terraform plan and terraform apply commands.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Your company is creating a new cloud-native Google Cloud organization. You expect this Google Cloud organization to first be used by a small number of departments and then expand to be used by a large number of departments. Each department has a large number of applications varying in size. You need to design the VPC network architecture. Your solution must minimize the amount of management required while remaining flexible enough for development teams to quickly adapt to their evolving needs. What should you do?

（A）Create a separate VPC for each department and connect the VPCs with VPC Network Peering.

（B）Create a separate VPC for each department and connect the VPCs with Cloud VPN.

（C）Create a separate VPC for each application and use Private Service Connect to connect the VPCs.

（D）Create a separate VPC for each department and use Private Service Connect to connect the VPCs.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?

（A）Create a Managed Instance Group with a single instance and use health checks to determine the system status.

（B）Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.

（C）File a bug with the development team so they can find the root cause of the crashing instance.

（D）Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.

正解：A 解答を投票する

質問 5

You need to introduce postmortems into your organization during the holiday shopping season. You are expecting your web application to receive a large volume of traffic in a short period. You need to prepare your application for potential failures during the event What should you do?
Choose 2 answers

（A）Configure Anthos Service Mesh on the application to identify issues on the topology map.

（B）Create alerts in Cloud Monitoring for all common failures that your application experiences.

（C）Ensure that relevant system metrics are being captured with Cloud Monitoring and create alerts at levels of interest.

（D）Monitor latency of your services for average percentile latency.

（E）Review your increased capacity requirements and plan for the required quota management.

正解：C、E 解答を投票する

質問 6

You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage. What should you do?

（A）Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.

（B）Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs, and then select the bucket as the log export destination.

（C）Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage for seven years.

（D）Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You have a set of applications running on a Google Kubernetes Engine (GKE) cluster, and you are using Stackdriver Kubernetes Engine Monitoring. You are bringing a new containerized application required by your company into production. This application is written by a third party and cannot be modified or reconfigured. The application writes its log information to /var/log/app_messages.log, and you want to send these log entries to Stackdriver Logging. What should you do?

（A）Install Kubernetes on Google Compute Engine (GCE> and redeploy your applications. Then customize the built-in Stackdriver Logging configuration to tail the log file in the application's pods and write to Stackdriver Logging.

（B）Deploy a Fluentd daemonset to GKE. Then create a customized input and output configuration to tail the log file in the application's pods and write to Slackdriver Logging.

（C）Use the default Stackdriver Kubernetes Engine Monitoring agent configuration.

（D）Write a script to tail the log file within the pod and write entries to standard output. Run the script as a sidecar container with the application's pod. Configure a shared volume between the containers to allow the script to have read access to /var/log in the application container.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?

（A）Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.

（B）Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.

（C）Create one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.

（D）Create one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

You work for a global organization and run a service with an availability target of 99% with limited engineering resources. For the current calendar month you noticed that the service has 99 5% availability.
You must ensure that your service meets the defined availability goals and can react to business changes including the upcoming launch of new features You also need to reduce technical debt while minimizing operational costs You want to follow Google-recommended practices What should you do?

（A）Allocate available engineers to the feature backlog while you ensure that the sen/ice remains within the availability target

（B）Add N+1 redundancy to your service by adding additional compute resources to the service

（C）Define an error budget for your service level availability and minimize the remaining error budget

（D）Identify, measure and eliminate toil by automating repetitive tasks

正解：D 解答を投票する

質問 10

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members.
What should you do?

（A）Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.

（B）Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.

（C）Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.

（D）Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Professional-Cloud-DevOps-Engineer 無料問題集「Google Cloud Certified - Professional Cloud DevOps Engineer」

弊社を連絡する

関連リンク

トップ試験