Free Google Professional-Cloud-DevOps-Engineer Exam Questions

Question 1

You work for a company that manages highly sensitive user data. You are designing the Google Kubernetes Engine (GKE) infrastructure for your company, including several applications that will be deployed in development and production environments. Your design must protect data from unauthorized access from other applications while minimizing the amount of management overhead required. What should you do?

A : Create one cluster for the organization with separate namespaces for each application and environment combination.

B : Create one cluster for each environment (development and production) with each application in its own namespace within each cluster.

C : Create one cluster for the organization with separate namespaces for each application.

D : Create one cluster for each application with separate namespaces for production and development environments.

Answer: B

Question 2

What is the first step to create a repository in CSR through Google Cloud Console?

A : Create a new repository

B : Connect to an external repository

C : Enable the CSR API

D : Select a project

Answer: C

Question 3

You work for a company that manages highly sensitive user data. You are designing the Google Kubernetes Engine (GKE) infrastructure for your company, including several applications that will be deployed in development and production environments. Your design must protect data from unauthorized access from other applications while minimizing the amount of management overhead required. What should you do?

A : Create one cluster for the organization with separate namespaces for each application and environment combination.

B : Create one cluster for each environment (development and production) with each application in its own namespace within each cluster.

C : Create one cluster for the organization with separate namespaces for each application.

D : Create one cluster for each application with separate namespaces for production and development environments.

Answer: B

Question 4

The focus of your work is creating a monitoring strategy for your GCP projects in production, using Stackdriver Workspaces. The main objective is to promptly detect and resolve production environment issues, avoiding false alerts from development and staging projects. A key requirement is to observe the principle of least privilege when granting access to relevant team members to Stackdriver Workspaces.

What actions do you need to take?

A : Grant relevant team members the Project Viewer IAM role on all GCP production projects. Create Stackdriver workspaces inside each project.

B : Choose an existing GCP production project to host the monitoring workspace. Attach production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.

C : Create a new GCP monitoring project and create a Stackdriver Workspace inside it. Attach production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.

D : Grant relevant team members read access to all GCP production projects. Create Stackdriver workspaces inside each project.

Answer: C

Question 5

What is Shielded GKE nodes and how does it increase cluster security?

A : It is a GKE feature that provides strong, verifiable node identity and integrity, based on Compute Engine Shielded VMs.

B : It is a GKE feature that restricts traffic among pods in a cluster.

C : It is a GCP feature that secures the boot process of VM instances.

D : It is a GKE feature that increases cluster performance by enabling faster communication between nodes.

Answer: A