QUESTION: 25

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach.
What should you do?

Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it

Answer(s): C

Reveal Solution Next Question

QUESTION: 26

You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices.
What should you do?

Disable the CI pipeline and revert to manually building and pushing the artifacts.
Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.

Answer(s): D

Explanation:

"After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline"- means something wrong on the recent change not with the image registry.

Reveal Solution Next Question

QUESTION: 27

You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time.
What should you do?

Link Stackdriver Logging as a source in Google Data Studio. Filler (he logs on the cache misses.
Configure Stackdriver Profiler to identify and visualize when the cache misses occur based on the logs.
Create a logs-based metric in Stackdriver Logging and a dashboard for that metric in Stackdriver Monitoring.
Configure BigOuery as a sink for Stackdriver Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table

Answer(s): C

Explanation:

https://cloud.google.com/logging/docs/logs-based-metrics#counter-metric

Reveal Solution Next Question

QUESTION: 28

You are part of an organization that follows SRE practices and principles. You are taking over the management of a new service from the Development Team, and you conduct a Production Readiness Review (PRR). After the PRR analysis phase, you determine that the service cannot currently meet its Service Level Objectives (SLOs). You want to ensure that the service can meet its SLOs in production.

What should you do next?

Adjust the SLO targets to be achievable by the service so you can bring it into production.
Notify the development team that they will have to provide production support for the service.
Identify recommended reliability improvements to the service to be completed before handover.
Bring the service into production with no SLOs and build them when you have collected operational data.

Answer(s): C

Reveal Solution Next Question

Free PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

Explanation:

QUESTION: 27

Explanation:

QUESTION: 28