Google PROFESSIONAL CLOUD DEVOPS ENGINEER Exam Questions
Professional Cloud DevOps Engineer (Page 14 )

Updated On: 30-May-2026

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach.
What should you do?

  1. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
  2. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
  3. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
  4. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it.

Answer(s): C



Your company follows Site Reliability Engineering practices. You are the person in charge of Communications for a large, ongoing incident affecting your customer-facing applications. There is still no estimated time for a resolution of the outage. You are receiving emails from internal stakeholders who want updates on the outage, as well as emails from customers who want to know what is happening. You want to efficiently provide updates to everyone affected by the outage. What should you do?

  1. Focus on responding to internal stakeholders at least every 30 minutes. Commit to "next update" times.
  2. Provide periodic updates to all stakeholders in a timely manner. Commit to a "next update" time in all communications.
  3. Delegate the responding to internal stakeholder emails to another member of the Incident Response Team.
    Focus on providing responses directly to customers.
  4. Provide all internal stakeholder emails to the Incident Commander, and allow them to manage internal communications. Focus on providing responses directly to customers.

Answer(s): B



Your team uses Cloud Build for all CI/CD pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?

  1. Assign the Container Developer role to the Cloud Build service account.
  2. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
  3. Create a new service account with the Container Developer role and use it to run Cloud Build.
  4. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.

Answer(s): A



You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Cloud Logging. You want to visualize how often a cache miss happens over time. What should you do?

  1. Link Cloud Logging as a source in Google Data Studio. Filter the logs on the cache misses.
  2. Configure Cloud Profiler to identify and visualize when the cache misses occur based on the logs.
  3. Create a logs-based metric in Cloud Logging and a dashboard for that metric in Cloud Monitoring.
  4. Configure BigQuery as a sink for Cloud Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table.

Answer(s): C



You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed across multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?

  1. Use the n1-highcpu-96 machine type in the configuration of the MIG.
  2. Monitor results of Cloud Trace to determine the optimal size.
  3. Validate that the resource requirements are within the available quota limits of each region.
  4. Deploy the service in one region and use a global load balancer to route traffic to this region.

Answer(s): C



You are running an application on Compute Engine and collecting logs through Cloud Logging. You discover that some personally identifiable information (PII) is leaking into certain log entry fields. All PII entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Cloud Logging. What should you do?

  1. Create a basic log filter matching userinfo, and then configure a log export in the Cloud console with Cloud Storage as a sink.
  2. Use a Fluentd filter plugin with the Logging agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
  3. Create an advanced log filter matching userinfo, configure a log export in the Cloud console with Cloud Storage as a sink, and then configure a log exclusion with userinfo as a filter.
  4. Use a Fluentd filter plugin with the Logging agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Cloud console with Cloud Storage as a sink.

Answer(s): B



You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?

  1. Disable the CI pipeline and revert to manually building and pushing the artifacts.
  2. Change the CI pipeline to push the artifacts is Container Registry instead of Docker Hub.
  3. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
  4. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.

Answer(s): D



Your company follows Site Reliability Engineering principles. You are writing a postmortem for an incident, triggered by a software change, that severely affected users. You want to prevent severe incidents from happening in the future. What should you do?

  1. Identify engineers responsible for the incident and escalate to their senior management.
  2. Ensure that test cases that catch errors of this type are run successfully before new software releases.
  3. Follow up with the employees who reviewed the changes and prescribe practices they should follow in the future.
  4. Design a policy that will require on-call teams to immediately call engineers and management to discuss a plan of action if an incident occurs.

Answer(s): B



Viewing page 14 of 31
Viewing questions 105 - 112 out of 239 questions


PROFESSIONAL CLOUD DEVOPS ENGINEER Exam Discussions & Posts (Share your experience with others)

AI Tutor AI Tutor 👋 I’m here to help!