Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
You are building and running client applications in Cloud Run and Cloud Functions Your client requires that all logs must be available for one year so that the client can import the logs into their logging service You must minimize required code changes What should you do?
A. Create a Pub/Sub topic subscription and logging sink Configure the logging sink to send all logs into the topic Give your client access to the topic to retrieve the logs
B. Create a logs bucket and logging sink. Set the retention on the logs bucket to 365 days Configure the logging sink to send logs to the bucket Give your client access to the bucket to retrieve the logs
C. Create a storage bucket and appropriate VPC firewall rules Update all images in Cloud Run and all functions in Cloud Functions to send logs to a file within the storage bucket
D. Update all images in Cloud Run and all functions in Cloud Functions to send logs to both Cloud Logging and the client's logging service Ensure that all the ports required to send logs are open in the VPC firewall
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
A. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.
B. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
C. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.
D. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your company operates in a highly regulated domain that requires you to store all organization logs for seven years You want to minimize logging infrastructure complexity by using managed services You need to avoid any future loss of log capture or stored logs due to misconfiguration or human error What should you do?
A. Use Cloud Logging to configure an aggregated sink at the organization level to export all logs into a BigQuery dataset
B. Use Cloud Logging to configure an export sink at each project level to export all logs into Cloud Storage with a seven-year retention policy and Bucket Lock
C. Use Cloud Logging to configure an aggregated sink at the organization level to export all logs into Cloud Storage with a seven-year retention policy and Bucket Lock
D. Use Cloud Logging to configure an export sink at each project level to export all logs into a BigQuery dataset
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You need to build a CI/CD pipeline for a containerized application in Google Cloud Your development team uses a central Git repository for trunk-based development You want to run all your tests in the pipeline for any new versions of the application to improve the quality What should you do?
A. 1. Install a Git hook to require developers to run unit tests before pushing the code to a central repository If all tests are successful build a container
2. Trigger Cloud Build to deploy the application container to a testing environment, and run integration tests and acceptance tests
3. If all tests are successful tag the code as production ready Trigger Cloud Build to build and deploy the application container to the production environment
B. 1. Trigger Cloud Build to run unit tests when the code is pushed If all unit tests are successful, build and push the application container to a central registry.
2. Trigger Cloud Build to deploy the container to a testing environment, and run integration tests and acceptance tests
3. If all tests are successful the pipeline deploys the application to the production environment and runs smoke tests
C. 1. Install a Git hook to require developers to run unit tests before pushing the code to a central repository
2. Trigger Cloud Build to build the application container Deploy the application container to a testing environment, and run integration tests
3. If the integration tests are successful deploy the application container to your production environment. and run acceptance tests
D. 1. Trigger Cloud Build to build the application container and run unit tests with the container
2. If unit tests are successful, deploy the application container to a testing environment, and run integration tests
3. If the integration tests are successful the pipeline deploys the application container to the production environment After that, run acceptance tests
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
As part of your company's initiative to shift left on security, the infoSec team is asking all teams to implement guard rails on all the Google Kubernetes Engine (GKE) clusters to only allow the deployment of trusted and approved images You need to determine how to satisfy the InfoSec teams goal of shifting left on security. What should you do?
A. Configure Identity and Access Management (1AM) policies to create a least privilege model on your GKE clusters
B. Use Binary Authorization to attest images during your CI CD pipeline
C. Deploy Falco or Twistlock on GKE to monitor for vulnerabilities on your running Pods
D. Enable Container Analysis in Artifact Registry, and check for common vulnerabilities and exposures (CVEs) in your container images
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, and keep user data secure. What should you do?
A. Implement Jenkins on Google Cloud Functions.
B. Implement Jenkins on local workstations.
C. Implement Jenkins on Kubernetes on-premises
D. Implement Jenkins on Compute Engine virtual machines.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You work for a global organization and run a service with an availability target of 99% with limited engineering resources. For the current calendar month you noticed that the service has 99 5% availability. You must ensure that your service meets the defined availability goals and can react to business changes including the upcoming launch of new features You also need to reduce technical debt while minimizing operational costs You want to follow Google-recommended practices What should you do?
A. Add N+1 redundancy to your service by adding additional compute resources to the service
B. Identify, measure and eliminate toil by automating repetitive tasks
C. Allocate available engineers to the feature backlog while you ensure that the sen/ice remains within the availability target
D. Define an error budget for your service level availability and minimize the remaining error budget
正解：D

質問 8：
You are reviewing your deployment pipeline in Google Cloud Deploy You must reduce toil in the pipeline and you want to minimize the amount of time it takes to complete an end-to-end deployment What should you do?
Choose 2 answers
A. Use a script to automate the creation of the deployment pipeline in Google Cloud Deploy
B. Automate promotion approvals from the development environment to the test environment
C. Create a trigger to notify the required team to complete the next step when manual intervention is required
D. Add more engineers to finish the manual steps.
E. Divide the automation steps into smaller tasks
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are using Terraform to manage infrastructure as code within a Cl/CD pipeline You notice that multiple copies of the entire infrastructure stack exist in your Google Cloud project, and a new copy is created each time a change to the existing infrastructure is made You need to optimize your cloud spend by ensuring that only a single instance of your infrastructure stack exists at a time. You want to follow Google-recommended practices What should you do?
A. Create a new pipeline to delete old infrastructure stacks when they are no longer needed
B. Update the pipeline to remove any existing infrastructure before you apply the latest configuration
C. Verify that the pipeline is storing and retrieving the terrafom.tfstat* file from a source control
D. Confirm that the pipeline is storing and retrieving the terraform. if state file from Cloud Storage with the Terraform gcs backend
正解：D
解説: (Topexam メンバーにのみ表示されます)