Free PROFESSIONAL CLOUD DEVOPS ENGINEER Exam braindumps download (PROFESSIONAL CLOUD DEVOPS ENGINEER exam dumps Free)

QUESTION: 49

You need to reduce the cost of virtual machines (VM) for your organization. After reviewing different options, you decide to leverage preemptible VM instances. Which application is suitable for preemptible VMs?

A scalable in-memory caching system.
The organization's public-facing website.
A distributed, eventually consistent NoSQL database cluster with sufficient quorum.
A GPU-accelerated video rendering platform that retrieves and stores videos in a storage bucket.

Answer(s): D

Reference:

https://cloud.google.com/preemptible-vms

Show Answer Next Question

QUESTION: 50

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?

Configure the build system with protected branches that require pull request approval.
Use an Admission Controller to verify that incoming requests originate from approved sources.
Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.

Answer(s): D

Show Answer Next Question

QUESTION: 51

You support a stateless web-based API that is deployed on a single Compute Engine instance in the europe- west2-a zone. The Service Level Indicator (SLI) for service availability is below the specified Service Level Objective (SLO). A postmortem has revealed that requests to the API regularly time out. The time outs are due to the API having a high number of requests and running out memory. You want to improve service availability.
What should you do?

Change the specified SLO to match the measured SLI
Move the service to higher-specification compute instances with more memory
Set up additional service instances in other zones and load balance the traffic between all instances
Set up additional service instances in other zones and use them as a failover in case the primary instance is unavailable

Answer(s): C

Show Answer Next Question

QUESTION: 52

You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?

Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.
Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.
Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.
Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.

Answer(s): B

Show Answer Next Question

QUESTION: 53

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members.
What should you do?

Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the main branch.
Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.

Answer(s): A

Reference:

https://www.terraform.io/docs/cloud/guides/recommended-practices/part3.3.html

Show Answer Next Question

QUESTION: 54

You are using Cloud Monitoring to monitor applications hosted on Google Cloud. You recently deployed a new application, but its logs are not appearing on the Cloud Monitoring dashboard.

You need to troubleshoot the issue. What should you do?

Confirm that the Cloud Monitoring agent has been installed in the hosting virtual machine.
Confirm that your account has the proper permissions to use the Cloud Monitoring dashboard.
Confirm that port 25 has been opened in the firewall to allow messages through to Cloud Monitoring.
Confirm that the application is using the required client library and the service account key has proper permissions.

Answer(s): A

Show Answer Next Question

QUESTION: 55

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline. What should you do?

Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.
Configure the containers in the build pipeline to always update themselves before release.
Reconfigure the existing operating system vulnerability software to exist inside the container.
Implement static code analysis tooling against the Docker files used to create the containers.

Answer(s): D

Show Answer Next Question