QUESTION: 53

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members.
What should you do?

Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
Store the Terraform code in a network shared folder with child folders for each version release.
Ensure that everyone works on different files.
Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.

Answer(s): A

Explanation:

https://www.terraform.io/docs/cloud/guides/recommended-practices/part3.3.html

Reveal Solution Next Question

QUESTION: 54

You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard. You need to troubleshoot the issue.
What should you do?

Confirm that the Stackdriver agent has been installed in the hosting virtual machine.
Confirm that your account has the proper permissions to use the Stackdriver dashboard.
Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
Confirm that the application is using the required client library and the service account key has proper permissions.

Answer(s): A

Explanation:

https://cloud.google.com/monitoring/agent/monitoring/troubleshooting#checklist

Reveal Solution Next Question

QUESTION: 55

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline.
What should you do?

Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.
Configure the containers in the build pipeline to always update themselves before release.
Reconfigure the existing operating system vulnerability software to exist inside the container.
Implement static code analysis tooling against the Docker files used to create the containers.

Answer(s): D

Explanation:

https://cloud.google.com/binary-authorization

Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE) or Cloud Run. With Binary Authorization, you can require images to be signed by trusted authorities during the development process and then enforce signature validation when deploying. By enforcing validation, you can gain tighter control over your container environment by ensuring only verified images are integrated into the build-and-release process.

Reveal Solution Next Question

QUESTION: 56

You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort.
What should you do?

Use Cloud Storage to cache intermediate artifacts.
Run multiple Jenkins agents to parallelize the build.
Use multiple smaller build steps to minimize execution time.
Use larger Cloud Build virtual machines (VMs) by using the machine-type option.

Answer(s): C

Explanation:

https://cloud.google.com/storage/docs/best-practices
. https://cloud.google.com/build/docs/speeding-up-
builds#caching_directories_with_google_cloud_storage
Caching directories with Google Cloud Storage To increase the speed of a build, reuse the results from a previous build. You can copy the results of a previous build to a Google Cloud Storage bucket, use the results for faster calculation, and then copy the new results back to the bucket. Use this method when your build takes a long time and produces a small number of files that does not take time to copy to and from Google Cloud Storage.

upvoted 2 times

Reveal Solution Next Question

Free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Exam Braindumps (page: 14)

QUESTION: 53

Explanation:

QUESTION: 54

Explanation:

QUESTION: 55

Explanation:

QUESTION: 56

Explanation: