Free Google Professional-Cloud-DevOps-Engineer Exam Questions

Question 1

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

A : Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.

B : Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.

C : Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.

D : Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.

Answer: B

Question 2

You are designing a system with three different environments: development, quality assurance (QA), and production. Each environment will be deployed with Terraform and has a Google Kubernetes Engine Enterprise (GKE Enterprise) cluster created so that application teams can deploy their applications. Config Sync will be used and templated to deploy infrastructure-level resources in each GKE Enterprise cluster. All users (for example, infrastructure operators and application owners) will use GitOps. How should you structure your source control repositories for both infrastructure as code (IaC) and application code?

A : Cloud Infrastructure (Terraform) repository is shared: different directories are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared: different overlay directories are different environments Application (app source code) repositories are separated: different branches are different features

B : Cloud Infrastructure (Terraform) repository is shared: different directories are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different branches are different environments Application (app source code) repositories are separated: different branches are different features

C : Cloud Infrastructure (Terraform) repository is shared: different branches are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared: different overlay directories are different environments Application (app source code) repository is shared: different directories are different features

D : Cloud Infrastructure (Terraform) repositories are separated: different branches are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different overlay directories are different environments Application (app source code) repositories are separated: different branches are different features

Answer: A

Question 3

You recently configured an App Hub application. You are able to see the managed instance group, backend service, and URL map listed in App Hub, but you do not see the forwarding rule. You must ensure that the forwarding rule is listed. What should you do?

A : Attach the project containing the forwarding rule as an App Hub service project.

B : Enable the App Hub API in the project containing the forwarding rule.

C : Configure the forwarding rule to forward to the correct target proxy.

D : Register the forwarding rule as a service in the application configuration.

Answer: D

Question 4

As a Social impact investment platform company, you are deploying an application that requires access to sensitive information. What measures should you take to ensure that this information is encrypted and the chances of exposure are minimal in case of a breach? Additionally, which Google Cloud Services can be leveraged to achieve this goal?

A : Incorporate a Single sign-on (SSO) system to the application and ensure that no secrets are revealed to the application.

B : Frequently rotate encryption keys and keep them stored in Cloud Key Management Service (KMS).

C : During the creation of the instance, use an encrypted configuration management system to insert the secret.

D : Create a continuous build pipeline that generates various versions of the secret for every application instance.

Answer: B

Question 5

You are designing a system with three different environments: development, quality assurance (QA), and production. Each environment will be deployed with Terraform and has a Google Kubernetes Engine Enterprise (GKE Enterprise) cluster created so that application teams can deploy their applications. Config Sync will be used and templated to deploy infrastructure-level resources in each GKE Enterprise cluster. All users (for example, infrastructure operators and application owners) will use GitOps. How should you structure your source control repositories for both infrastructure as code (IaC) and application code?

A : Cloud Infrastructure (Terraform) repository is shared: different directories are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared: different overlay directories are different environments Application (app source code) repositories are separated: different branches are different features

B : Cloud Infrastructure (Terraform) repository is shared: different directories are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different branches are different environments Application (app source code) repositories are separated: different branches are different features

C : Cloud Infrastructure (Terraform) repository is shared: different branches are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared: different overlay directories are different environments Application (app source code) repository is shared: different directories are different features

D : Cloud Infrastructure (Terraform) repositories are separated: different branches are different environments GKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different overlay directories are different environments Application (app source code) repositories are separated: different branches are different features

Answer: A