Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
You need to define Service Level Objectives (SLOs) for a high-traffic multi-region web application.
Customers expect the application to always be available and have fast response times. Customers are currently happy with the application performance and availability. Based on current measurement, you observe that the
90th percentile of latency is 120ms and the 95th percentile of latency is 275ms over a 28-day window. What latency SLO would you recommend to the team to publish?
A. 90th percentile - 250ms95th percentile - 400ms
B. 90th percentile - 120ms95th percentile - 275ms
C. 90th percentile - 150ms95th percentile - 300ms
D. 90th percentile - 100ms95th percentile - 250ms
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your company operates in a highly regulated domain. Your security team requires that only trusted container images can be deployed to Google Kubernetes Engine (GKE). You need to implement a solution that meets the requirements of the security team, while minimizing management overhead. What should you do?
A. Use Cloud Run to write and deploy a custom validator Enable an Eventarc trigger to perform validations when new images are uploaded.
B. Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies
C. Configure Kritis to run in your GKE clusters to enforce deploy-time security policies.
D. Grant the roles/artifactregistry. writer role to the Cloud Build service account. Confirm that no employee has Artifact Registry write permission.
正解：B

質問 3：
You need to introduce postmortems into your organization during the holiday shopping season. You are expecting your web application to receive a large volume of traffic in a short period. You need to prepare your application for potential failures during the event What should you do?
Choose 2 answers
A. Ensure that relevant system metrics are being captured with Cloud Monitoring and create alerts at levels of interest.
B. Create alerts in Cloud Monitoring for all common failures that your application experiences.
C. Review your increased capacity requirements and plan for the required quota management.
D. Configure Anthos Service Mesh on the application to identify issues on the topology map.
E. Monitor latency of your services for average percentile latency.
正解：A,C

質問 4：
You are managing an application that runs in Compute Engine The application uses a custom HTTP server to expose an API that is accessed by other applications through an internal TCP/UDP load balancer A firewall rule allows access to the API port from 0.0.0-0/0. You need to configure Cloud Logging to log each IP address that accesses the API by using the fewest number of steps What should you do Bret?
A. Enable Packet Mirroring on the VPC
B. Enable logging on the firewall rule
C. Enable VPC Flow Logs on the subnet
D. Install the Ops Agent on the Compute Engine instances.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your company is using HTTPS requests to trigger a public Cloud Run-hosted service accessible at the
https://booking-engine-abcdef .a.run.app URL You need to give developers the ability to test the latest revisions of the service before the service is exposed to customers What should you do?
A. Runthegcioud run services update-traffic booking-engine -to-revisions LATEST*! command Use the ht tps: //booking-engine-abcdef. a. run. ape URL for testing
B. Runthegcioud run deploy booking-engine -no-traffic --ag dev command Use the https://dev---- booking-engine-abcdef. a. run. app URL for testing
C. Pass the curl -K "Authorization: Hearer S(gclcud auth print-identity-token)" auth token Use the https: /
/booking-engine-abcdef. a. run. app URL to test privately
D. Grant the roles/run. invoker role to the developers testing the booking-engine service Use the https:
//booking-engine-abcdef. private. run. app URL for testing
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?
A. Use the n2-highcpu-96 machine type in the configuration of the MIG.
B. Validate that the resource requirements are within the available quota limits of each region.
C. Monitor results of Stackdriver Trace to determine the required amount of resources.
D. Deploy the service in one region and use a global load balancer to route traffic to this region.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You support a large service with a well-defined Service Level Objective (SLO). The development team deploys new releases of the service multiple times a week. If a major incident causes the service to miss its SLO, you want the development team to shift its focus from working on features to improving service reliability. What should you do before a major incident occurs?
A. Develop an appropriate error budget policy in cooperation with all service stakeholders.
B. Negotiate with the product team to always prioritize service reliability over releasing new features.
C. Add a plugin to your Jenkins pipeline that prevents new releases whenever your service is out of SLO.
D. Negotiate with the development team to reduce the release frequency to no more than once a week.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?
A. Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
B. Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
C. Inject the secret at the time of instance creation via an encrypted configuration management system.
D. Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are monitoring a service that uses n2-standard-2 Compute Engine instances that serve large files. Users have reported that downloads are slow. Your Cloud Monitoring dashboard shows that your VMS are running at peak network throughput. You want to improve the network throughput performance. What should you do?
A. Change the machine type for your VMS to n2-standard-8.
B. Deploy a Cloud NAT gateway and attach the gateway to the subnet of the VMS.
C. Add additional network interface controllers (NICs) to your VMS.
D. Deploy the Ops Agent to export additional monitoring metrics.
正解：A
解説: (Topexam メンバーにのみ表示されます)