Professional Cloud DevOps Engineer 시험 - Google실제시험문제와 답 - 50문항

Question No : 1

You support the backend of a mobile phone game that runs on a Google Kubernetes Engine (GKE) cluster. The application is serving HTTP requests from users. You need to implement a solution that will reduce the network cost .
What should you do?

A.Configure the VPC as a Shared VPC Host project.
B.Configure your network services on the Standard Tier.
C.Configure your Kubernetes duster as a Private Cluster.
D.Configure a Google Cloud HTTP Load Balancer as Ingress.

정답:
Explanation:
Costs associated with a load balancer are charged to the project containing the load balancer components. Because of these benefits, container-native load balancing is the recommended solution for load balancing through Ingress. When NEGs are used with GKE Ingress, the Ingress controller facilitates the creation of all aspects of the L7 load balancer. This includes creating the virtual IP address, forwarding rules, health checks, firewall rules, and more.
https://cloud.google.com/architecture/best-practices-for-running-cost-effective-kubernetes-applications-on-gke

Question No : 2

You are responsible for the reliability of a high-volume enterprise application. A large number of users report that an important subset of the application’s functionality C a data intensive reporting feature C is consistently failing with an HTTP 500 error. When you investigate your application’s dashboards, you notice a strong correlation between the failures and a metric that represents the size of an internal queue used for generating reports. You trace the failures to a reporting backend that is experiencing high I/O wait times. You quickly fix the issue by resizing the backend’s persistent disk (PD) .
How you need to create an availability Service Level Indicator (SLI) for the report generation feature .
How would you define it?

A.As the I/O wait times aggregated across all report generation backends
B.As the proportion of report generation requests that result in a successful response
C.As the application’s report generation queue size compared to a known-good threshold
D.As the reporting backend PD throughout capacity compared to a known-good threshold

정답:

Question No : 3

You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service .
What should you do first?

A.Roll back the recent release.
B.Review the Stackdriver monitoring.
C.Upsize the virtual machines running the login services.
D.Deploy a new release to see whether it fixes the problem.

정답:

Question No : 4

You support a popular mobile game application deployed on Google Kubernetes Engine (GKE) across several Google Cloud regions. Each region has multiple Kubernetes clusters. You receive a report that none of the users in a specific region can connect to the application. You want to resolve the incident while following Site Reliability Engineering practices .
What should you do first?

A.Reroute the user traffic from the affected region to other regions that don’t report issues.
B.Use Stackdriver Monitoring to check for a spike in CPU or memory usage for the affected region.
C.Add an extra node pool that consists of high memory and high CPU machine type instances to the cluster.
D.Use Stackdriver Logging to filter on the clusters in the affected region, and inspect error messages in the logs.

정답:

Question No : 5

You deploy a new release of an internal application during a weekend maintenance window when there is minimal user traffic. After the window ends, you learn that one of the new features isn't working as expected in the production environment. After an extended outage, you roll back the new release and deploy a fix. You want to modify your release process to reduce the mean time to recovery so you can avoid extended outages in the future .
What should you do? Choose 2 answers

A.Before merging new code, require 2 different peers to review the code changes.
B.Adopt the blue/green deployment strategy when releasing new code via a CD server.
C.Integrate a code linting tool to validate coding standards before any code is accepted into the repository.
D.Require developers to run automated integration tests on their local development environments before release.
E.Configure a CI server. Add a suite of unit tests to your code and have your CI server run them on commit and verify any changes.

정답:

Question No : 6

Your product is currently deployed in three Google Cloud Platform (GCP) zones with your users divided between the zones. You can fail over from one zone to another, but it causes a 10-minute service disruption for the affected users. You typically experience a database failure once per quarter and can detect it within five minutes. You are cataloging the reliability risks of a new real-time chat feature for your product.
You catalog the following information for each risk:
• Mean Time to Detect (MUD} in minutes
• Mean Time to Repair (MTTR) in minutes
• Mean Time Between Failure (MTBF) in days
• User Impact Percentage
The chat feature requires a new database system that takes twice as long to successfully fail over between zones. You want to account for the risk of the new database failing in one zone .
What would be the values for the risk of database failover with the new system?

A.MTTD: 5 MTTR: 10 MTBF: 90 Impact: 33%
B.MTTD:5 MTTR: 20 MTBF: 90 Impact: 33%
C.MTTD:5 MTTR: 10 MTBF: 90 Impact 50%
D.MTTD:5 MTTR: 20 MTBF: 90 Impact: 50%

정답:
Explanation:
https://www.atlassian.com/incident-management/kpis/common-metrics
https://linkedin.github.io/school-of-sre/

Question No : 7

You use Spinnaker to deploy your application and have created a canary deployment stage in the pipeline. Your application has an in-memory cache that loads objects at start time. You want to automate the comparison of the canary version against the production version .
How should you configure the canary analysis?

A.Compare the canary with a new deployment of the current production version.
B.Compare the canary with a new deployment of the previous production version.
C.Compare the canary with the existing deployment of the current production version.
D.Compare the canary with the average performance of a sliding window of previous production versions.

정답:
Explanation:
https://cloud.google.com/architecture/automated-canary-analysis-kubernetes-engine-spinnaker
https://spinnaker.io/guides/user/canary/best-practices/#compare-canary-against-baseline-not-against-production

Question No : 8

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use
Terraform to manage infrastructure. You need a way to implement code versioning and to
share code with other team members .
What should you do?

A.Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
B.Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
C.Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
D.Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member’s computer. Organize files with a naming convention that identifies each new version.

정답:

Question No : 9

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach .
What should you do?

A.Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
B.Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
C.Store secrets in Cloud Storage encrypted with a key from Cloud KM
D.Provide the CI/CD pipeline with access to Cloud KMS via IA
E.Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it

정답:

Question No : 10

You support an application deployed on Compute Engine. The application connects to a Cloud SQL instance to store and retrieve data. After an update to the application, users report errors showing database timeout messages. The number of concurrent active users remained stable. You need to find the most probable cause of the database timeout .
What should you do?

A.Check the serial port logs of the Compute Engine instance.
B.Use Stackdriver Profiler to visualize the resources utilization throughout the application.
C.Determine whether there is an increased number of connections to the Cloud SQL instance.
D.Use Cloud Security Scanner to see whether your Cloud SQL is under a Distributed Denial of Service (DDoS) attack.

정답:

Question No : 11

You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage .
What should you do?

A.Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.
B.Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.
C.Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage for seven years.
D.Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs, and then select the bucket as the log export destination.

정답:

Question No : 12

You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (Pll) is leaking into certain log entry fields. All Pll entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging .
What should you do?

A.Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
B.Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
C.Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a tog exclusion with userinfo as a filter.
D.Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.

정답:
Explanation:
https://medium.com/google-cloud/fluentd-filter-plugin-for-google-cloud-data-loss-prevention-api-42bbb1308e76

Question No : 13

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs .
What should you do?

A.Grant the team members the IAM role of logging.config Writer on Cloud IA
B.Configure Access Context Manager to allow only these members to export logs.
C.Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
D.Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.

정답:
Explanation:
https://cloud.google.com/logging/docs/access-control

Question No : 14

Your team is designing a new application for deployment into Google Kubernetes Engine (GKE). You need to set up monitoring to collect and aggregate various application-level metrics in a centralized location. You want to use Google Cloud Platform services while minimizing the amount of work required to set up monitoring .
What should you do?

A.Publish various metrics from the application directly to the Slackdriver Monitoring API, and then observe these custom metrics in Stackdriver.
B.Install the Cloud Pub/Sub client libraries, push various metrics from the application to various topics, and then observe the aggregated metrics in Stackdriver.
C.Install the OpenTelemetry client libraries in the application, configure Stackdriver as the export destination for the metrics, and then observe the application's metrics in Stackdriver.
D.Emit all metrics in the form of application-specific log messages, pass these messages from the containers to the Stackdriver logging collector, and then observe metrics in Stackdriver.

정답:
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics#custom_metrics
https://github.com/GoogleCloudPlatform/k8s-stackdriver/blob/master/custom-metrics-stackdriver-adapter/README.md
Your application can report a custom metric to Cloud Monitoring. You can configure Kubernetes to respond to these metrics and scale your workload automatically. For example, you can scale your application based on metrics such as queries per second, writes per second, network performance, latency when communicating with a different application, or other metrics that make sense for your workload. https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics

Question No : 15

You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time .
What should you do?

A.Link Stackdriver Logging as a source in Google Data Studio. Filler (he logs on the cache misses.
B.Configure Stackdriver Profiler to identify and visualize when the cache misses occur based on the logs.
C.Create a logs-based metric in Stackdriver Logging and a dashboard for that metric in Stackdriver Monitoring.
D.Configure BigOuery as a sink for Stackdriver Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table

정답:
Explanation:
https://cloud.google.com/logging/docs/logs-based-metrics#counter-metric

Google Professional Cloud DevOps Engineer 시험