Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
Your CTO has asked you to implement a postmortem policy on every incident for internal use. You want to define what a good postmortem is to ensure that the policy is successful at your company. What should you do?
Choose 2 answers
A. Ensure that all postmortems include what caused the incident, identify the person or team responsible for causing the incident. and how to prevent a future occurrence of the incident.
B. Ensure that all postmortems include all incident participants in postmortem authoring and share postmortems as widely as possible,
C. Ensure that all postmortems include what caused the incident, how the incident could have been worse, and how to prevent a future occurrence of the incident.
D. Ensure that all postmortems include the severity of the incident, how to prevent a future occurrence of the incident. and what caused the incident without naming internal system components.
E. Ensure that all postmortems include how the incident was resolved and what caused the incident without naming customer information.
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are developing a strategy for monitoring your Google Cloud Platform (GCP) projects in production using Stackdriver Workspaces. One of the requirements is to be able to quickly identify and react to production environment issues without false alerts from development and staging projects. You want to ensure that you adhere to the principle of least privilege when providing relevant team members with access to Stackdriver Workspaces. What should you do?
A. Create a new GCP monitoring project, and create a Stackdriver Workspace inside it. Attach the production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.
B. Grant relevant team members read access to all GCP production projects. Create Stackdriver workspaces inside each project.
C. Choose an existing GCP production project to host the monitoring workspace. Attach the production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.
D. Grant relevant team members the Project Viewer IAM role on all GCP production projects. Create Slackdriver workspaces inside each project.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You support an application deployed on Compute Engine. The application connects to a Cloud SQL instance to store and retrieve dat a. After an update to the application, users report errors showing database timeout messages. The number of concurrent active users remained stable. You need to find the most probable cause of the database timeout. What should you do?
A. Use Stackdriver Profiler to visualize the resources utilization throughout the application.
B. Use Cloud Security Scanner to see whether your Cloud SQL is under a Distributed Denial of Service (DDoS) attack.
C. Check the serial port logs of the Compute Engine instance.
D. Determine whether there is an increased number of connections to the Cloud SQL instance.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
A. Configure the build system with protected branches that require pull request approval.
B. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
C. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
D. Use an Admission Controller to verify that incoming requests originate from approved sources.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You have an application that runs in Google Kubernetes Engine (GKE). The application consists of several microservices that are deployed to GKE by using Deployments and Services One of the microservices is experiencing an issue where a Pod returns 403 errors after the Pod has been running for more than five hours Your development team is working on a solution but the issue will not be resolved for a month You need to ensure continued operations until the microservice is fixed You want to follow Google-recommended practices and use the fewest number of steps What should you do?
A. Add a HTTP liveness probe to the microservice s deployment
B. Create a cron job to terminate any Pods that have been running for more than five hours
C. Configure an alert to notify you whenever a Pod returns 403 errors
D. Monitor the Pods and terminate any Pods that have been running for more than five hours
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Your team is designing a new application for deployment both inside and outside Google Cloud Platform (GCP). You need to collect detailed metrics such as system resource utilization. You want to use centralized GCP services while minimizing the amount of work required to set up this collection system. What should you do?
A. Instrument the code using a timing library, and publish the metrics via a health check endpoint that is scraped by Stackdriver.
B. Import the Stackdriver Debugger package, and configure the application to emit debug messages with timing information.
C. Install an Application Performance Monitoring (APM) tool in both locations, and configure an export to a central data storage location for analysis.
D. Import the Stackdriver Profiler package, and configure it to relay function timing data to Stackdriver for further analysis.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your development team has created a new version of their service's API. You need to deploy the new versions of the API with the least disruption to third-party developers and end users of third-party installed applications. What should you do?
A. Announce deprecation of the old version of the API.
Contact remaining users on the old API.
Introduce the new version of the API.
Deprecate the old version of the API.
Provide best effort support to users of the old API.
Turn down the old version of the API.
B. Introduce the new version of the API.
Contact remaining users of the old API.
Announce deprecation of the old version of the API.
Deprecate the old version of the API.
Turn down the old version of the API.
Provide best effort support to users of the old API.
C. Introduce the new version of the API.
Announce deprecation of the old version of the API.
Deprecate the old version of the API.
Contact remaining users of the old API.
Provide best effort support to users of the old API.
Turn down the old version of the API.
D. Announce deprecation of the old version of the API.
Introduce the new version of the API.
Contact remaining users on the old API.
Deprecate the old version of the API.
Turn down the old version of the API.
Provide best effort support to users of the old API.
正解：C

質問 8：
You are the on-call Site Reliability Engineer for a microservice that is deployed to a Google Kubernetes Engine (GKE) Autopilot cluster. Your company runs an online store that publishes order messages to Pub/Sub and a microservice receives these messages and updates stock information in the warehousing system. A sales event caused an increase in orders, and the stock information is not being updated quickly enough. This is causing a large number of orders to be accepted for products that are out of stock You check the metrics for the microservice and compare them to typical levels.

You need to ensure that the warehouse system accurately reflects product inventory at the time orders are placed and minimize the impact on customers What should you do?
A. Increase the Pod CPU and memory limits
B. Increase the number of Pod replicas
C. Decrease the acknowledgment deadline on the subscription
D. Add a virtual queue to the online store that allows typical traffic levels
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are implementing a CI'CD pipeline for your application in your company s multi-cloud environment Your application is deployed by using custom Compute Engine images and the equivalent in other cloud providers You need to implement a solution that will enable you to build and deploy the images to your current environment and is adaptable to future changes Which solution stack should you use'?
A. Cloud Build with kpt
B. Cloud Build with Google Cloud Deploy
C. Google Kubernetes Engine with Google Cloud Deploy
D. Cloud Build with Packer
正解：B
解説: (Topexam メンバーにのみ表示されます)