Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service. What should you do first?
A. Upsize the virtual machines running the login services.
B. Roll back the recent release.
C. Deploy a new release to see whether it fixes the problem.
D. Review the Stackdriver monitoring.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You have a pool of application servers running on Compute Engine. You need to provide a secure solution that requires the least amount of configuration and allows developers to easily access application logs for troubleshooting. How would you implement the solution on GCP?
A. * Install the gsutil command line tool on your application servers.* Write a script using gsutil to upload your application log to a Cloud Storage bucket, and then schedule it to run via cron every 5 minutes.* Give the developers IAM Object Viewer access to view the logs in the specified bucket.
B. * Deploy the Stackdriver monitoring agent to the application servers.* Give the developers the IAM Monitoring Viewer role to access Stackdriver and view metrics.
C. * Deploy the Stackdriver logging agent to the application servers.* Give the developers the IAM Logs Viewer role to access Stackdriver and view logs.
D. * Deploy the Stackdriver logging agent to the application servers.* Give the developers the IAM Logs Private Logs Viewer role to access Stackdriver and view logs.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You support a trading application written in Python and hosted on App Engine flexible environment. You want to customize the error information being sent to Stackdriver Error Reporting. What should you do?
A. Install the Stackdriver Error Reporting library for Python, and then run your code on App Engine flexible environment.
B. Use the Stackdriver Error Reporting API to write errors from your application to ReportedErrorEvent, and then generate log entries with properly formatted error messages in Stackdriver Logging.
C. Install the Stackdriver Error Reporting library for Python, and then run your code on Google Kubernetes Engine.
D. Install the Stackdriver Error Reporting library for Python, and then run your code on a Compute Engine VM.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You recently created a Cloud Build pipeline for deploying Terraform code stored in a GitHub repository. You make Terraform code changes in short-lived branches and sometimes use tags during development. You tag releases with a semantic version when they are ready for deployment. You require your pipeline to apply the Terraform code whenever there is a new release, and you need to minimize operational overhead. What should you do?
A. Create a build trigger with the * branch pattern.
B. Create a build trigger with the \d*\.\d+\.\d* branch pattern.
C. Create a build trigger with the .* tag pattern.
D. Create a build trigger with the \d+\.\d+\.\d* tag pattern.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?
A. Use client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
B. Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.
C. Create a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
D. Encrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You use Terraform to manage an application deployed to a Google Cloud environment The application runs on instances deployed by a managed instance group The Terraform code is deployed by using aCI/CD pipeline When you change the machine type on the instance template used by the managed instance group, the pipeline fails at the terraform apply stage with the following error message

You need to update the instance template and minimize disruption to the application and the number of pipeline runs What should you do?
A. Set the create_bef ore_destroy meta-argument to true in the lifecycle block on the instance template
B. Delete the managed instance group and recreate it after updating the instance template
C. Add a new instance template update the managed instance group to use the new instance template and delete the old instance template
D. Remove the managed instance group from the Terraform state file update the instance template and reimport the managed instance group.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You are building the Cl/CD pipeline for an application deployed to Google Kubernetes Engine (GKE) The application is deployed by using a Kubernetes Deployment, Service, and Ingress The application team asked you to deploy the application by using the blue'green deployment methodology You need to implement the rollback actions What should you do?
A. Delete the new container image, and delete the running Pods
B. Update the Kubernetes Service to point to the previous Kubernetes Deployment
C. Run the kubectl rollout undo command
D. Scale the new Kubernetes Deployment to zero
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Your company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project might accidentally delete the project, so a lien has been placed on the project. You need to design a solution to restrict Shared VPC project deletion to those with the resourcemanager.projects.updateLiens permission at the organization level. What should you do?
A. Instruct teams to only perform IAM permission management as code with Terraform.
B. Enable VPC Service Controls for the container.googleapis.com API service.
C. Enable the compute.restrictXpnProjectLienRemoval organization policy constraint.
D. Revoke the resourcemanager.projects.updateLiens permission from all users associated with the project.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
A. tcp_ssl_proxy/new_connections
B. flex/instance/connections/current
C. tcp_ssl_proxy/open_connections
D. flex/connections/current
正解：D
解説: (Topexam メンバーにのみ表示されます)