QUESTION: 113

You are designing a resource-sharing policy for applications used by different teams in a Google Kubernetes Engine cluster. You need to ensure that all applications can access the resources needed to run.
What should you do? (Choose two.)

Specify the resource limits and requests in the object specifications.
Create a namespace for each team, and attach resource quotas to each namespace.
Create a LimitRange to specify the default compute resource requirements for each namespace.
Create a Kubernetes service account (KSA) for each application, and assign each KSA to the namespace.
Use the Anthos Policy Controller to enforce label annotations on all namespaces. Use taints and tolerations to allow resource sharing for namespaces.

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 114

You are developing a new application that has the following design requirements:

•Creation and changes to the application infrastructure are versioned and auditable.
•The application and deployment infrastructure uses Google-managed services as much as possible.
•The application runs on a serverless compute platform.

How should you design the application’s architecture?

1. Store the application and infrastructure source code in a Git repository.
2. Use Cloud Build to deploy the application infrastructure with Terraform.
3. Deploy the application to a Cloud Function as a pipeline step.
1. Deploy Jenkins from the Google Cloud Marketplace, and define a continuous integration pipeline in Jenkins.
2. Configure a pipeline step to pull the application source code from a Git repository.
3. Deploy the application source code to App Engine as a pipeline step.
1. Create a continuous integration pipeline on Cloud Build, and configure the pipeline to deploy the application infrastructure using Deployment Manager templates.
2. Configure a pipeline step to create a container with the latest application source code.
3. Deploy the container to a Compute Engine instance as a pipeline step.
1. Deploy the application infrastructure using gcloud commands.
2. Use Cloud Build to define a continuous integration pipeline for changes to the application source code.
3. Configure a pipeline step to pull the application source code from a Git repository, and create a containerized application.
4. Deploy the new container on Cloud Run as a pipeline step.

Answer(s): A

Reference:

https://cloud.google.com/docs/ci-cd

Reveal Solution Next Question

QUESTION: 115

You are creating and running containers across different projects in Google Cloud. The application you are developing needs to access Google Cloud services from within Google Kubernetes Engine (GKE).
What should you do?

Assign a Google service account to the GKE nodes.
Use a Google service account to run the Pod with Workload Identity.
Store the Google service account credentials as a Kubernetes Secret.
Use a Google service account with GKE role-based access control (RBAC).

Answer(s): B

Reveal Solution Next Question

QUESTION: 116

You have containerized a legacy application that stores its configuration on an NFS share. You need to deploy this application to Google Kubernetes Engine
(GKE) and do not want the application serving traffic until after the configuration has been retrieved.
What should you do?

Use the gsutil utility to copy files from within the Docker container at startup, and start the service using an ENTRYPOINT script.
Create a PersistentVolumeClaim on the GKE cluster. Access the configuration files from the volume, and start the service using an ENTRYPOINT script.
Use the COPY statement in the Dockerfile to load the configuration into the container image. Verify that the configuration is available, and start the service using an ENTRYPOINT script.
Add a startup script to the GKE instance group to mount the NFS share at node startup. Copy the configuration files into the container, and start the service using an ENTRYPOINT script.

Answer(s): B

Reference:

https://cloud.google.com/compute/docs/instances/startup-scripts/linux

Reveal Solution Next Question

Free Professional Cloud Developer Exam Braindumps (page: 29)

QUESTION: 113

QUESTION: 114

Reference:

QUESTION: 115

QUESTION: 116

Reference: