Question 1

An application is currently operating on Google Kubernetes Engine. However, the application is responding slowly due to the invocation of multiple services per request. To identify the source of the delay, it is necessary to determine which downstream service or services are causing the issue.What actions are recommended?

Options :

A : Analyze VPC flow logs along the path of the request.

B : Investigate the Liveness and Readiness probes for each service.

C : Create a Dataflow pipeline to analyze service metrics in real time.

D : Use a distributed tracing framework such as OpenTelemetry or Stackdriver Trace.

Answer: D

Question 2

Your company processes IOT data at scale by using Pub/Sub, App Engine standard environment, and an application written in GO. You noticed that the performance inconsistently degrades at peak load. You could not reproduce this issue on your workstation. You need to continuously monitor the application in production to identify slow paths in the code. You want to minimize performance impact and management overhead. What should you do?Install a continuous profiling tool into Compute Engine. Configure the application to send profiling data to the tool.

Options :

A : Periodically run the go tool pprof command against the application instance. Analyze the results by using flame graphs.

B : Configure Cloud Profiler, and initialize the [email protected]/go/profiler library in the application.

C : Use Cloud Monitoring to assess the App Engine CPU utilization metric.

Answer: C

Question 3

The CI/CD pipeline is used for building and deploying application artifacts. To ensure secure access to application secrets through the pipeline, it is necessary to take measures. One such measure is to make sure that secrets can be rotated easily in the event of a security breach.What actions do you need to take?

Options :

A : Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.

B : Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.

C : Store secrets in Google Cloud Storage encrypted with a key from Google Cloud KMS. Provide the CI/CD pipeline with access to Google Cloud KMS via IAM.

D : Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it.

Answer: C

Question 4

As an online grocery delivery service company, you need to design a new application for deployment both inside and outside Google Cloud Platform (GCP). You want to collect detailed metrics such as system resource utilization using centralized GCP services while minimizing the amount of work required to set up this collection system. What steps should you take?

Options :

A : In order to analyze the data, it is recommended to install an Application Performance Monitoring (APM) tool in both locations and then configure it to export the data to a central data storage location.

B : To transmit function timing data to Google Cloud for in-depth analysis, install the Cloud Profiler package and set it up.

C : Configure the application to emit debug messages with timing information by importing the Cloud Debugger package.

D : One solution is to utilize a timing library to instrument the code, and then expose the metrics through a health check endpoint that is scraped by Google Cloud.

Answer: B

Question 5

What happens when a user tries to push code that includes a security key into a repository with enabled security key detection in CSR?

Options :

A : The user is granted access to the repository

B : The security key is automatically removed from the code

C : The code will not be pushed and the user will be notified

D : The user is not notified and can still push the code

Answer: C

Free Professional-Cloud-DevOps-Engineer Mock Exam – Practice Online Confidently

Buying Options: