Google Professional-Cloud-DevOps-Engineer 問題集

質問 1：
Your company recently migrated to Google Cloud. You need to design a fast, reliable, and repeatable solution for your company to provision new projects and basic resources in Google Cloud. What should you do?
A. Use the Terraform repositories from the Cloud Foundation Toolkit. Apply the code with appropriate parameters to create the Google Cloud project and related resources.
B. Use the Google Cloud console to create projects.
C. Write a script by using the gcloud CLI that passes the appropriate parameters from the request. Save the script in a Git repository.
D. Write a Terraform module and save it in your source control repository. Copy and run the apply command to create the new project.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are ready to deploy a new feature of a web-based application to production. You want to use Google Kubernetes Engine (GKE) to perform a phased rollout to half of the web server pods.
What should you do?
A. Use a stateful set with parallel pod management policy.
B. Use a replica set in the deployment specification.
C. Use Node taints with NoExecute.
D. Use a partitioned rolling update.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Your company operates in a highly regulated domain. Your security team requires that only trusted container images can be deployed to Google Kubernetes Engine (GKE). You need to implement a solution that meets the requirements of the security team, while minimizing management overhead. What should you do?
A. Use Cloud Run to write and deploy a custom validator Enable an Eventarc trigger to perform validations when new images are uploaded.
B. Configure Binary Authorization in your GKE clusters to enforce deploy-time security policies
C. Configure Kritis to run in your GKE clusters to enforce deploy-time security policies.
D. Grant the roles/artifactregistry. writer role to the Cloud Build service account. Confirm that no employee has Artifact Registry write permission.
正解：B

質問 4：
Your development team has created a new version of their service's API. You need to deploy the new versions of the API with the least disruption to third-party developers and end users of third-party installed applications. What should you do?
A. Announce deprecation of the old version of the API.
Contact remaining users on the old API.
Introduce the new version of the API.
Deprecate the old version of the API.
Provide best effort support to users of the old API.
Turn down the old version of the API.
B. Introduce the new version of the API.
Contact remaining users of the old API.
Announce deprecation of the old version of the API.
Deprecate the old version of the API.
Turn down the old version of the API.
Provide best effort support to users of the old API.
C. Introduce the new version of the API.
Announce deprecation of the old version of the API.
Deprecate the old version of the API.
Contact remaining users of the old API.
Provide best effort support to users of the old API.
Turn down the old version of the API.
D. Announce deprecation of the old version of the API.
Introduce the new version of the API.
Contact remaining users on the old API.
Deprecate the old version of the API.
Turn down the old version of the API.
Provide best effort support to users of the old API.
正解：C

質問 5：
You deployed an application into a large Standard Google Kubernetes Engine (GKE) cluster. The application is stateless and multiple pods run at the same time. Your application receives inconsistent traffic. You need to ensure that the user experience remains consistent regardless of changes in traffic. and that the resource usage of the cluster is optimized.
What should you do?
A. Configure cluster autoscaling on the node pool.
B. Configure a cron job to scale the deployment on a schedule.
C. Configure a Vertical Pod Autoscaler.
D. Configure a Horizontal Pod Autoscaler.
正解：D

質問 6：
Your organization wants to increase the availability target of an application from 99 9% to 99 99% for an investment of $2 000 The application's current revenue is S1,000,000 You need to determine whether the increase in availability is worth the investment for a single year of usage What should you do?
A. Calculate the value of improved availability to be $9,000. and determine that the increase in availability is worth the investment
B. Calculate the value of improved availability to be $1 000 and determine that the increase in availability is worth the investment
C. Calculate the value of improved availability to be $900, and determine that the increase in availability is not worth the investment
D. Calculate the value of improved availability to be $1 000 and determine that the increase in availability is not worth the investment
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your company runs applications in Google Kubernetes Engine (GKE). Several applications rely on ephemeral volumes. You noticed some applications were unstable due to the DiskPressure node condition on the worker nodes. You need to identify which Pods are causing the issue, but you do not have execute access to workloads and nodes. What should you do?
A. Locate all the Pods with emptyDir volumes. Use the du -sh * command to measure volume disk usage.
B. Check the node/ephemeral_storage/used_bytes metric by using Metrics Explorer.
C. Check the metric by using Metrics Explorer.
D. Locate all the Pods with emptyDir volumes. use the df-h command to measure volume disk usage.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Your organization is using Helm to package containerized applications Your applications reference both public and private charts Your security team flagged that using a public Helm repository as a dependency is a risk You want to manage all charts uniformly, with native access control and VPC Service Controls What should you do?
A. Store public and private charts by using GitHub Enterprise with Google Workspace as the identity provider
B. Store public and private charts by using Git repository Configure Cloud Build to synchronize contents of the repository into a Cloud Storage bucket Connect Helm to the bucket by using https: // [bucket] .srorage.googleapis.com/ [holnchart] as the Helm repository
C. Store public and private charts in OCI format by using Artifact Registry
D. Configure a Helm chart repository server to run in Google Kubernetes Engine (GKE) with Cloud Storage bucket as the storage backend
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are creating Cloud Logging sinks to export log entries from Cloud Logging to BigQuery for future analysis Your organization has a Google Cloud folder named Dev that contains development projects and a folder named Prod that contains production projects Log entries for development projects must be exported to dev_dataset. and log entries for production projects must be exported to prod_dataset You need to minimize the number of log sinks created and you want to ensure that the log sinks apply to future projects What should you do?
A. Create two aggregated log sinks at the organization level, and filter by project ID
B. Create a single aggregated log sink at the organization level.
C. Create an aggregated Iog sink in the Dev and Prod folders
D. Create a log sink in each project
正解：C
解説: (Topexam メンバーにのみ表示されます)