Google Cloud Professional Cloud DevOps Engineer - Full Practice Exam 1

1. A CI job runs outside Google Cloud and can present a trusted external identity token. It needs short-lived Google Cloud access without storing a service-account key. Which approach best fits?
2. A CI workload runs outside Google Cloud and can present a trusted repository identity token. It must deploy only one approved project without storing long-lived Google credentials. Which two design choices meet these requirements? Select 2 answers.
3. A client retries a payment request after a network timeout. The server must avoid charging twice for the same logical operation. Which approach best fits?
4. A Cloud Run service can overwhelm its database during a traffic surge. The team wants an upper bound on service instance growth and accepts possible queuing or errors at that bound. Which approach best fits?
5. A Cloud Run service sees latency from cold starts after quiet periods. The team accepts additional standing cost to keep capacity warm. Which approach best fits?
6. A company has hundreds of analysts with identical access requirements. Joiners and leavers must be managed without editing every project policy individually. Which approach best fits?
7. A company wants common IAM grants for every production project while keeping development grants separate. Projects already belong to one organization. Which approach best fits?
8. A company wants reviewers to identify unused privileges before removing access from existing production workloads. Which approach best fits?
9. A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?
10. A Compute Engine VM's guest application logs and memory metrics are absent, although basic platform metrics are visible. Which approach best fits?
11. A continuously used, predictable compute baseline is expected for the next year. Finance accepts a usage commitment in exchange for a discount. Which approach best fits?
12. A CPU-bound application needs to identify which code paths consume most processing time under production-like load. Which approach best fits?
13. A CPU-intensive batch job checkpoints progress and can restart after interruption. Reducing compute cost is more important than continuous capacity availability. Which approach best fits?
14. A database replication setup copied an accidental delete to every replica. The team needs recovery to a time before the mistake. Which approach best fits?
15. A deployment changes an API consumed by independent teams. The provider needs evidence that existing consumer expectations remain valid. Which approach best fits?
16. A deployment must switch quickly between two fully provisioned versions after the replacement environment passes validation. Which approach best fits?
17. A developer needs temporary access as a service account for debugging. Administrators want auditable delegation without sharing a private key. Which approach best fits?
18. A developer wants fast checks for a pure calculation function without depending on deployed databases or network services. Which approach best fits?
19. A GKE workload's Pods cannot be scheduled because existing nodes lack capacity. More identical nodes can satisfy the requests. Which approach best fits?
20. A Kubernetes application consistently requests too little memory per Pod. The team wants resource-request recommendations or managed adjustments rather than more replicas. Which approach best fits?
21. A Kubernetes application needs more replicas as CPU demand per Pod rises. Nodes already have spare capacity. Which approach best fits?
22. A new Cloud Run revision must receive only 5% of requests while the stable revision keeps the rest, with rapid reversal if errors rise. Which approach best fits?
23. A nonproduction environment is only used during business hours and can safely be stopped overnight. Which approach best fits?
24. A pipeline needs a clear operational owner and alerts when expected outputs are late. Which approach best fits?
25. A pipeline step calls an external service that sometimes returns transient errors. A timeout may occur after the external action succeeds. Which two practices make retries safer? Select 2 answers.
26. A production credential is confirmed compromised. The service has an alternative credential path and responders need immediate risk reduction. Which approach best fits?
27. A release introduces a schema change while old and new application versions will temporarily run together. Which approach best fits?
28. A release may exceed backend capacity under expected peak traffic. The team needs evidence before increasing rollout traffic. Which approach best fits?
29. A security policy requires deployable images to be stored in a controlled repository with repository-level access permissions. Which approach best fits?
30. A service needs an alert when its error-rate metric exceeds a defined threshold for a sustained period. Which approach best fits?
31. A software team needs automated source-triggered builds and tests that produce versioned deployment artifacts. Which approach best fits?
32. A stateless HTTP container must scale with incoming requests. The team wants minimal server administration and does not require Kubernetes APIs. Which approach best fits?
33. A synchronous API must survive a slow downstream service without waiting indefinitely or consuming every worker. Which approach best fits?
34. A team measures successful requests as a percentage and needs a name for the actual measured service behavior. Which approach best fits?
35. A team needs managed delivery progression through staging and production with approval gates and rollout tracking. Which approach best fits?
36. A team needs notification as actual or forecast spending approaches its monthly budget. It does not want resources automatically shut down. Which approach best fits?
37. A team needs the same infrastructure configuration in several environments, with reviewed changes and repeatable provisioning rather than console recreation. Which approach best fits?
38. A team wants 99.9% of valid requests to succeed over a rolling month. It needs to document that internal reliability target. Which approach best fits?
39. A team wants to expose a new feature only to a small user cohort without deploying a different binary for each cohort. Which approach best fits?
40. A transformation should be tested against malformed records and boundary values before production data is processed. Which approach best fits?
41. A VM has persistently low utilization and no workload requirement for its current size. The team wants to reduce cost without changing application architecture. Which approach best fits?
42. After an outage, leaders want to learn which technical and process conditions enabled the failure without discouraging honest reporting. Which approach best fits?
43. An analyst needs read-only access to one dataset. The administrator must avoid granting unrelated project administration permissions. Which approach best fits?
44. An application change affects how the service interacts with a real database schema. The team needs to verify the interaction rather than a mocked function result. Which approach best fits?
45. An application emits an important business event only in logs. Operations needs a numerical time series counting those events for alerting. Which approach best fits?
46. An application has elevated request latency across several services. The team needs to locate the slow dependency and inspect the detailed events for the same requests. Which two telemetry practices are most useful? Select 2 answers.
47. An application must tolerate a database primary's zonal failure with managed failover and minimal manual intervention. Which approach best fits?
48. An application requires privileged operating-system configuration and a legacy VM image. The team accepts responsibility for guest OS maintenance. Which approach best fits?
49. An emergency administrator needs elevated access only during an incident, with approval and auditability rather than a permanent broad grant. Which approach best fits?
50. An enterprise wants its networking team to control subnets centrally while application teams deploy resources in separate projects using those subnets. Which approach best fits?
51. An existing Cloud Run revision contains a faulty application change. A known-good earlier revision remains available and uses compatible data contracts. Which approach best fits?
52. An on-call engineer spends hours every week performing a repetitive, scriptable recovery operation. The team wants to reduce operational toil. Which approach best fits?
53. An operator must search application events around one failed request using its correlation ID and timestamp. Which approach best fits?
54. An organization must route matching logs from multiple projects to a centralized destination according to defined inclusion filters. Which approach best fits?
55. An organization needs to detect security telemetry gaps when a log source unexpectedly stops sending events. Which approach best fits?
56. Finance needs detailed cloud spending data that can be queried with SQL and joined to internal cost-center records. Which approach best fits?
57. Responders see a possibly compromised service account and need to understand recent supported administrative activity before containment. Which approach best fits?
58. Security needs organization-wide discovery and prioritization of supported cloud misconfigurations and vulnerabilities. Which approach best fits?
59. Several applications depend on Kubernetes custom resources and admission policies. The team wants a managed Kubernetes control plane. Which approach best fits?
60. Users report slow requests across several microservices. The team needs to identify which downstream call contributes most to end-to-end latency. Which approach best fits?

Comments — 0