Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
Your team is building a service that performs compute-heavy processing on batches of data The data is processed faster based on the speed and number of CPUs on the machine These batches of data vary in size and may arrive at any time from multiple third-party sources You need to ensure that third partiesare able to upload their data securely. You want to minimize costs while ensuring that the data is processed as quickly as possible What should you do?
A. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provide appropriate Identity and Access Management (1AM) access to the bucket
* Use Cloud Monitoring to detect new batches of data in the bucket and trigger a Cloud Function that processes the data
* Set a Cloud Function to use the largest CPU possible to minimize the runtime of the processing
B. * Provide a secure file transfer protocol (SFTP) server on a Compute Engine instance so that third parties can upload batches of data and provide appropriate credentials to the server
* Create a Cloud Function with a google.storage, object, finalize Cloud Storage trigger Write code so that the function can scale up a Compute Engine autoscaling managed instance group
* Use an image pre-loaded with the data processing software that terminates the instances when processing completes
C. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provide appropriate Identity and Access Management (1AM) access to the bucket
* Use a standard Google Kubernetes Engine (GKE) cluster and maintain two services one that processes the batches of data and one that monitors Cloud Storage for new batches of data
* Stop the processing service when there are no batches of data to process
D. * Provide a Cloud Storage bucket so that third parties can upload batches of data, and provide appropriate identity and Access Management (1AM) access to the bucket
* Create a Cloud Function with a google, storage, object .finalise Cloud Storage trigger Write code so that the function can scale up a Compute Engine autoscaling managed instance group
* Use an image pre-loaded with the data processing software that terminates the instances when processing completes
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members.
What should you do?
A. Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.
B. Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
C. Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
D. Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are writing a postmortem for an incident that severely affected users. You want to prevent similar incidents in the future. Which two of the following sections should you include in the postmortem? (Choose two.)
A. A list of employees responsible for causing the incident
B. An explanation of the root cause of the incident
C. Copies of the design documents for all the services impacted by the incident
D. A list of action items to prevent a recurrence of the incident
E. Your opinion of the incident's severity compared to past incidents
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are investigating issues in your production application that runs on Google Kubernetes Engine (GKE).
You determined that the source Of the issue is a recently updated container image, although the exact change in code was not identified. The deployment is currently pointing to the latest tag. You need to update your cluster to run a version of the container that functions as intended. What should you do?
A. Apply the latest tag to the previous container image, and do a rolling update on the deployment.
B. Alter the deployment to point to the sha2 56 digest of the previously working container.
C. Create a new tag called stable that points to the previously working container, and change the deployment to point to the new tag.
D. Build a new container from a previous Git tag, and do a rolling update on the deployment to the new container.
正解：B

質問 5：
You use Google Cloud Managed Service for Prometheus with managed collection to gather metrics from your service running on Google Kubernetes Engine (GKE). After deploying the service, there is no metric data appearing in Cloud Monitoring, and you have not encountered any error messages. You need to troubleshoot this issue. What should you do?
A. Confirm that your service has the monitoring.servicesViewer IAM role.
B. Verify that your PodMonitoring configuration references a valid port.
C. Determine if your service has exceeded its quota for writes to the Cloud Monitoring API.
D. Check if the Grafana service is installed on your GKE cluster.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You recently deployed your application in Google Kubernetes Engine (GKE) and now need to release a new version of the application You need the ability to instantly roll back to the previous version of the application in case there are issues with the new version Which deployment model should you use?
A. Perform a canary deployment, and test your new application periodically after the new version is deployed
B. Perform A. B testing, and test your application periodically after the deployment is complete
C. Perform a blue/green deployment and test your new application after the deployment is complete
D. Perform a rolling deployment and test your new application after the deployment is complete
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage. What should you do?
A. Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.
B. Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage for seven years.
C. Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs, and then select the bucket as the log export destination.
D. Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are designing a new Google Cloud organization for a client. Your client is concerned with the risks associated with long-lived credentials created in Google Cloud. You need to design a solution to completely eliminate the risks associated with the use of JSON service account keys while minimizing operational overhead. What should you do?
A. Apply the constraints/iam.disableserviceAccountKeycreation constraint to the organization.
B. Use custom versions of predefined roles to exclude all iam.serviceAccountKeys. * service account role permissions.
C. Apply the constraints/iam. disableServiceAccountKeyUp10ad constraint to the organization.
D. Grant the roles/ iam.serviceAccountKeyAdmin IAM role to organization administrators only.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You have a pool of application servers running on Compute Engine. You need to provide a secure solution that requires the least amount of configuration and allows developers to easily access application logs for troubleshooting. How would you implement the solution on GCP?
A. * Deploy the Stackdriver monitoring agent to the application servers.
* Give the developers the IAM Monitoring Viewer role to access Stackdriver and view metrics.
B. * Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Viewer role to access Stackdriver and view logs.
C. * Install the gsutil command line tool on your application servers.
* Write a script using gsutil to upload your application log to a Cloud Storage bucket, and then schedule it to run via cron every 5 minutes.
* Give the developers IAM Object Viewer access to view the logs in the specified bucket.
D. * Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Private Logs Viewer role to access Stackdriver and view logs.
正解：B
解説: (Topexam メンバーにのみ表示されます)