Google

Professional-Cloud-DevOps-Engineer
Google Professional Cloud DevOps Engineer
QUESTION & ANSWERS

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
QUESTION 1

Which of the following statements are true when discussing toil in SRE? (Select Two)
A. Reducing toil is not expected as an SRE, that is DevOps that reduces toil
B. A toil budget is a result of toil hours minus toil costs
C. Toil is mundane, repetitive operational work providing no enduring value, which scales linearly
with service growth
D. Reducing toil is one of the most important tasks of an SRE

Correct Answer: C,D

Explanation/Reference:

Correct Answer(s): A, C: Reducing toil is one of the most important tasks of an SRE, Toil is mundane,
repetitive operational work providing no enduring value, which scales linearly with service growth
Explanation: Toil is expected but can be reduced. Google definition of toil is as follows. “Toil is the
kind of work tied to running a production service that tends to be manual, repetitive, automatable,
tactical, devoid of enduring value, and that scales linearly as a service grows.
https://landing.google.com/sre/sre-book/chapters/eliminating-toil/

QUESTION 2

You would like to add a strict deploy-time policy enforcement to your Kubernetes Engine cluster. What
would be your best option? (Select One)
A. Cloud Armor
B. Binary Authorization
C. Security Scanner
D. IAM Policies

Correct Answer: B

Explanation/Reference:

Correct Answer(s): A. Binary Authorization

Explanation: Binary Authorization is a deploy-time security control that ensures only trusted container
images are deployed on Google Kubernetes Engine (GKE).
Using Binary Authorization, you can require images to be signed by trusted authorities during the
development process and then enforce signature validation when deploying
https://cloud.google.com/binary-authorization

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
QUESTION 3

Container Analysis performs vulnerability scans on images in Container Registry and monitors the
vulnerability information to keep it up to date. What are the two main tasks that Container Analysis
performs? (Select Two)
A. Vulnerability Reporting
B. Continuous Logging
C. Incremental Scanning
D. Continuous Analysis

Correct Answer: C,D

Explanation/Reference:

Correct Answer(s): A, C. Incremental Scanning and Continuous Logging

Explanation: Incremental scanning: Container Analysis scans new images when they're uploaded to
Container Registry.
Continuous analysis: Container Analysis continuously monitors the metadata of scanned images in
Container Registry for new vulnerabilities.
https://cloud.google.com/container-registry/docs/vulnerability-scanning

QUESTION 4

The company that has hired you to design a cloud application for their business is now requiring you
to adhere to the following requirements. They want to utilize as many GCP data focused services as
possible
1. Enterprise Data Warehouse (EDW) with SQL
2. Fast response times for OLAP workloads up to petabyte-scale,
3. Supports Big Data services and BI Tools.
4. Fully managed service
What service would you recommend the customer consider based on the limited information? (Select
One)
A. Cloud SQL
B. BigTable
C. Cloud Datastore
D. Cloud Dataflow
E. BigQuery

Correct Answer: E

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
Explanation/Reference:

Correct Answer(s): B: BigQuery

Explanation: BigQuery is Enterprise Data Warehouse (EDW) with SQL and fast response times for
OLAP workloads up to petabyte-scale, Big Data exploration and processing, and reporting via Business
Intelligence (BI) tools https://cloud.google.com/storage-options/

QUESTION 5

The first step in Cloud Deployment manager is to create what____________? (Select One)

A. Template
B. Configuration
C. Pipeline
D. Resources

Correct Answer: B

Explanation/Reference:

Explanation: The first step in creating your deployment is to create a configuration. A configuration is
a list of resources, and their respective properties, that will be part of your deployment.
https://cloud.google.com/deployment-manager/docs/step-by-step-guide/create-a-configuration

QUESTION 6

Google Cloud Platform has several unique and innovative benefits when it comes to billing and
resource control. What are these benefits? (Select Three)

A. Sub Hour Billing

B. Compute Engine Custom Machines
C. Sustained Use Discounts
D. Spot Instances
E. A. Hourly billing (Billed for 1 hour and thereafter every minute on VMs)

Correct Answer: A,B,C

Explanation/Reference:

Explanation: 1. Sub-hour billing 2. Sustained-use discounts Automatically reward users who run virtual
machines for over 25% of any calendar month 3. Compute Engine custom machine types Pay only for
the resources you need for your application

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
QUESTION 7

Which of the following two statements are true about choices around Cloud Deployment Manager
templates? (Select Two)

A. Jinja2 templates are more powerful and give you the option to programmatically create or manage
your templates
B. Python is a simpler but less powerful templating language that uses the same syntax as YAML
C. Jinja2 is a simpler but less powerful templating language that uses the same syntax as YAML
D. Python templates are more powerful and give you the option to programmatically create or
manage your templates

Correct Answer: C,D

Explanation/Reference:

Explanation: You can write templates in your choice of Python 2.7 or Jinja2. Python templates are
more powerful and give you the option to programmatically create or manage your templates. If you
are familiar with Python, use Python for your templates. Jinja2 is a simpler but less powerful
templating language that uses the same syntax as YAML. If you aren't familiar with Python or just
want to write simple templates without messing with Python, use Jinja2.
https://cloud.google.com/deployment-manager/docs/step-by-step-guide/create-a-template

QUESTION 8

You are currently planning a Kubernetes deployment on premises but also extending Kubernetes to
GCP as well. Your team would like to understand how management, routing could work as well as how
users could extend services in a cluster. What would you specify to deal with these concerns? (Select
Two)
A. Ingress Controller
B. Cloud Endpoints
C. Core Proxy
D. Edge Proxy

Correct Answer: A,D

Explanation/Reference:

Explanation: Kubernetes ingress is a collection of routing rules that govern how external users access
services running in a Kubernetes cluster. The edge proxy is commonly called an ingress controller
because it is commonly configured using ingress resources in Kubernetes, however the edge proxy
can also be configured

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
QUESTION 9

You have been contacted by the enterprise support team which has told you there have reports of
significant latency at specific times for an application running on GCP. They would like you to review
the issue and provide them insight into why the application is latent at specific times?
What Google Cloud service could you use to inspect latency data that has been collected in near real
time?
A. Trace
B. VPC Flow Logs
C. Debug
D. Profiler

Correct Answer: A

Explanation/Reference:

Correct Answer(s): B: Stackdriver Trace (Cloud Trace)

Explanation: Cloud Trace formerly Stackdriver Trace is a distributed tracing system that collects
latency data from your applications and displays it in the Google Cloud Console. You can track how
requests propagate through your application and receive detailed near real-time performance
insights. Cloud Trace automatically analyses all your application's traces to generate in-depth latency
reports to surface performance degradation, and can capture traces from all your VMs, containers, or
App Engine projects.

QUESTION 10

Which command will configure Cloud Build to store the image in Container Registry as part of build
flow? (Select One)
A. Docker insert command
B. Docker push command
C. Pull command
D. Push command

Correct Answer: B

Explanation/Reference:

Explanation: docker push command will push an image or a repository to a registry such as Container
Registry. Specify the hostname which specifies location where you will store the image.
To specify use these prefixes (multi-region)
gcr.io hosts images in data centers in the United States, but the location may change in the future
us.gcr.io hosts image in data centers in the United States, in a separate storage bucket from images

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
hosted by gcr.io
eu.gcr.io hosts the images in the European Union
asia.gcr.io hosts images in data centers in Asia
The Docker credential helper is the simplest way to configure Docker to authenticate directly with
Container Registry. You then use the docker command to tag, push, and pull images. Alternatively,
you can use the client libraries to manage container images, or you can interact directly with the
Docker API

QUESTION 11

Google states that an SRE should not spend no more than what percentage of time on operations?
(Select One)
A. Depends on the scenario used
B. 75%
C. 50%
D. 25%
E. There is no official number from Google

Correct Answer: C

Explanation/Reference:

Explanation: Google states that SREs should not be spending more than 50% of their time on
operations and considers any violation of this rule a sign of system poor health.

QUESTION 12

You would like to create a new repository in Cloud Source Repositories with gcloud. What would be
the command to create a repo called "developer"? (Select One)

A. gcloud create source repos "developer

B. gcloud create source repos developer
C. gcloud source repo create developer
D. gcloud source repos create developer

Correct Answer: D

Explanation/Reference:

Explanation: gcloud source repo create developer https://cloud.google.com/source-

repositories/docs/creating-an-empty-repository

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
QUESTION 13

You are being requested to migrate VMS from your onsite datacenter to GCP Compute Engine. What is
the gcloud command to import images and create a bootable image? (Select One)

A. gcloud compute import "images"

B. gcloud compute images import
C. gcloud compute images "import"
D. gcloud compute import images

Correct Answer: B

Explanation/Reference:

Explanation: Remember to learn the syntax gcloud compute images import

https://cloud.google.com/compute/docs/images/importing-virtual-disks

QUESTION 14

You’re currently being summoned to the CIO office and he would like to have a copy of the billing
reports from Google Cloud Platform. What answer has the correct formats you can export billing info
to? (Select One)
A. CSV or JSON
B. JSON or XML
C. JSON or .Doc
D. CSV or XML

Correct Answer: A

Explanation/Reference:

Explanation: To access a detailed breakdown of your charges, you can export your daily usage and
cost estimates automatically to a CSV or JSON file stored in a Google Cloud Storage bucket you
specify. https://cloud.google.com/billing/docs/how-to/export-data-file

QUESTION 15

What type of resource is this? ___________ bundle application code and dependencies into a single
unit, abstracting the application from the infrastructure. (Select One)

A. Virtual Machines
B. Apps
https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html
C. Microservices
D. Containers

Correct Answer: D

Explanation/Reference:

Explanation: Containers bundle application code and dependencies into a single unit, abstracting the
application from the infrastructure

https://www.certsquestions.com/Professional-Cloud-DevOps-Engineer-pdf-dumps.html