Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
A. Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
B. Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
C. Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io
/altostrat-images.
D. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.
正解：D

質問 2：
You support a popular mobile game application deployed on Google Kubernetes Engine (GKE) across several Google Cloud regions. Each region has multiple Kubernetes clusters. You receive a report that none of the users in a specific region can connect to the application. You want to resolve the incident while following Site Reliability Engineering practices. What should you do first?
A. Use Stackdriver Monitoring to check for a spike in CPU or memory usage for the affected region.
B. Reroute the user traffic from the affected region to other regions that don't report issues.
C. Add an extra node pool that consists of high memory and high CPU machine type instances to the cluster.
D. Use Stackdriver Logging to filter on the clusters in the affected region, and inspect error messages in the logs.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You want to share a Cloud Monitoring custom dashboard with a partner team What should you do?
A. Copy the Monitoring Query Language (MQL) query from the dashboard; and send the MQL query to the partner team
B. Export the metrics to BigQuery Use Looker Studio to create a dashboard, and share the dashboard with the partner team
C. Download the JSON definition of the dashboard, and send the JSON file to the partner team
D. Provide the partner team with the dashboard URL to enable the partner team to create a copy of the dashboard
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are leading a DevOps project for your organization. The DevOps team is responsible for managing the service infrastructure and being on-call for incidents. The Software Development team is responsible for writing, submitting, and reviewing code. Neither team has any published SLOs. You want to design a new joint-ownership model for a service between the DevOps team and the Software Development team. Which responsibilities should be assigned to each team in the new joint-ownership model?
A. DevOps team responsibilitiesManage the service infrastructureBe on-call for incidentsSoftware Development team responsibilitiesAdopt and publish SLOs for the serviceSubmit code to be reviewedShared responsibilities for code reviews
B. DevOps team responsibilitiesManage the service infrastructureBe on-call for incidentsPerform code reviewsSoftware Development team responsibilitiesSubmit code to be reviewed by the DevOps teamPublish the SLOs that the DevOps team must meet
C. DevOps team responsibilitiesShared responsibilities for code reviewsSoftware Development team responsibilitiesManage the service infrastructureBe on-call for incidents on a rotation basisAdopt and publish SLOs for the serviceSubmit code to be reviewed
D. DevOps team responsibilitiesManage the service infrastructurePerform code reviewsSoftware Development team responsibilitiesSubmit code to be reviewed by the DevOps teamBe on-call for incidentsPublish the SLOs that the DevOps team must meet
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your uses Jenkins running on Google Cloud VM instances for CI/CD. You need to extend the functionality to use infrastructure as code automation by using Terraform. You must ensure that the Terraform Jenkins instance is authorized to create Google Cloud resources. You want to follow Google-recommended practices- What should you do?
A. Add the auth application-default command as a step in Jenkins before running the Terraform commands.
B. use the Terraform module so that Secret Manager can retrieve credentials.
C. Confirm that the Jenkins VM instance has an attached service account with the appropriate Identity and Access Management (IAM) permissions.
D. Create a dedicated service account for the Terraform instance. Download and copy the secret key value to the GOOGLE environment variable on the Jenkins server.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are the Operations Lead for an ongoing incident with one of your services. The service usually runs at around 70% capacity. You notice that one node is returning 5xx errors for all requests. There has also been a noticeable increase in support cases from customers. You need to remove the offending node from the load balancer pool so that you can isolate and investigate the node. You want to follow Google-recommended practices to manage the incident and reduce the impact on users. What should you do?
A. 1. Communicate your intent to the incident team.2. Perform a load analysis to determine if the remaining nodes can handle the increase in traffic offloaded from the removed node, and scale appropriately.3. When any new nodes report healthy, drain traffic from the unhealthy node, and remove the unhealthy node from service.
B. 1 . Drain traffic from the unhealthy node and remove the node from service.2. Monitor traffic to ensure that the error is resolved and that the other nodes in the pool are handling the traffic appropriately.3.
Scale the pool as necessary to handle the new load.4. Communicate your actions to the incident team.
C. 1. Communicate your intent to the incident team.2. Add a new node to the pool, and wait for the new node to report as healthy.3. When traffic is being served on the new node, drain traffic from the unhealthy node, and remove the old node from service.
D. 1 . Drain traffic from the unhealthy node and remove the old node from service.2. Add a new node to the pool, wait for the new node to report as healthy, and then serve traffic to the new node.3. Monitor traffic to ensure that the pool is healthy and is handling traffic appropriately.4. Communicate your actions to the incident team.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your company recently migrated to Google Cloud. You need to design a fast, reliable, and repeatable solution for your company to provision new projects and basic resources in Google Cloud. What should you do?
A. Use the Terraform repositories from the Cloud Foundation Toolkit. Apply the code with appropriate parameters to create the Google Cloud project and related resources.
B. Use the Google Cloud console to create projects.
C. Write a script by using the gcloud CLI that passes the appropriate parameters from the request. Save the script in a Git repository.
D. Write a Terraform module and save it in your source control repository. Copy and run the apply command to create the new project.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are responsible for creating and modifying the Terraform templates that define your Infrastructure.
Because two new engineers will also be working on the same code, you need to define a process and adopt a tool that will prevent you from overwriting each other's code. You also want to ensure that you capture all updates in the latest version. What should you do?
A. * Store your code in a Git-based version control system.* Establish a process that allows developers to merge their own changes at the end of each day.* Package and upload code lo a versioned Cloud Storage bucket as the latest master version.
B. * Store your code in a Git-based version control system.* Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code.* Establish a process where the fully integrated code in the repository becomes the latest master version.
C. * Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day, confirm that all changes have been captured in the files within the folder structure and create a new .zip archive with a predefined naming convention.* Upload the .zip archive to a versioned Cloud Storage bucket and accept it as the latest version.
D. * Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day. confirm that all changes have been captured in the files within the folder structure.* Rename the folder structure with a predefined naming convention that increments the version.
正解：B

質問 9：
You are writing a postmortem for an incident that severely affected users. You want to prevent similar incidents in the future. Which two of the following sections should you include in the postmortem? (Choose two.)
A. A list of employees responsible for causing the incident
B. An explanation of the root cause of the incident
C. Copies of the design documents for all the services impacted by the incident
D. A list of action items to prevent a recurrence of the incident
E. Your opinion of the incident's severity compared to past incidents
正解：B,D
解説: (Topexam メンバーにのみ表示されます)