Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
You are deploying an application to Cloud Run. The application requires a password to start. Your organization requires that all passwords are rotated every 24 hours, and your application must have the latest password. You need to deploy the application with no downtime. What should you do?
A. Store the password in Secret Manager and send the secret to the application by using environment variables.
B. Store the password directly in the code. Use Cloud Build to rebuild and deploy the application each time the password changes.
C. Store the password in Secret Manager and mount the secret as a volume within the application.
D. Use Cloud Build to add your password into the application container at build time. Ensure that Artifact Registry is secured from public access.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are developing a Node.js utility on a workstation in Cloud Workstations by using Code OSS. The utility is a simple web page, and you have already confirmed that all necessary firewall rules are in place. You tested the application by starting it on port 3000 on your workstation in Cloud Workstations, but you need to be able to access the web page from your local machine. You need to follow Google-recommended security practices.
What should you do?
A. Click the preview link in the Code OSS panel.
B. Allow public IP addresses in the Cloud Workstations configuration.
C. Run the gcloud compute start-iap-tunnel command to the Cloud Workstations VM.
D. Use a browser running on a bastion host VM.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?
A. Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
B. Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
C. Inject the secret at the time of instance creation via an encrypted configuration management system.
D. Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are on-call for an infrastructure service that has a large number of dependent systems. You receive an alert indicating that the service is failing to serve most of its requests and all of its dependent systems with hundreds of thousands of users are affected. As part of your Site Reliability Engineering (SRE) incident management protocol, you declare yourself Incident Commander (IC) and pull in two experienced people from your team as Operations Lead (OLJ and Communications Lead (CL). What should you do next?
A. Establish a communication channel where incident responders and leads can communicate with each other.
B. Start a postmortem, add incident information, circulate the draft internally, and ask internal stakeholders for input.
C. Look for ways to mitigate user impact and deploy the mitigations to production.
D. Contact the affected service owners and update them on the status of the incident.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are running an experiment to see whether your users like a new feature of a web application. Shortly after deploying the feature as a canary release, you receive a spike in the number of 500 errors sent to users, and your monitoring reports show increased latency. You want to quickly minimize the negative impact on users.
What should you do first?
A. Trace the origin of 500 errors and the root cause of increased latency.
B. Roll back the experimental canary release.
C. Record data for the postmortem document of the incident.
D. Start monitoring latency, traffic, errors, and saturation.
正解：B

質問 6：
You recently migrated an ecommerce application to Google Cloud. You now need to prepare the application for the upcoming peak traffic season. You want to follow Google-recommended practices. What should you do first to prepare for the busy season?
A. Migrate the application to Cloud Run, and use autoscaling.
B. Load test the application to profile its performance for scaling.
C. Create a Terraform configuration for the application's underlying infrastructure to quickly deploy to additional regions.
D. Pre-provision the additional compute power that was used last season, and expect growth.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You use Google Cloud Managed Service for Prometheus with managed collection to gather metrics from your service running on Google Kubernetes Engine (GKE). After deploying the service, there is no metric data appearing in Cloud Monitoring, and you have not encountered any error messages. You need to troubleshoot this issue. What should you do?
A. Confirm that your service has the monitoring.servicesViewer IAM role.
B. Verify that your PodMonitoring configuration references a valid port.
C. Determine if your service has exceeded its quota for writes to the Cloud Monitoring API.
D. Check if the Grafana service is installed on your GKE cluster.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?
A. File a bug with the development team so they can find the root cause of the crashing instance.
B. Create a Managed Instance Group with a single instance and use health checks to determine the system status.
C. Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.
D. Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.
正解：B