Free Access Google.Professional-Cloud-DevOps-Engineer.v2022-04-13.q62 Practice Test (Page 3)

Question 6

Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?

A.Create a new service account with the Container Developer role and use it to run Cloud Build.

B.Assign the Container Developer role to the Cloud Build service account.

C.Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.

D.Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.

Question 7

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach.
What should you do?

A.Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.

B.Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.

C.Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it.

D.Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.

Question 8

You support an e-commerce application that runs on a large Google Kubernetes Engine (GKE) cluster deployed on-premises and on Google Cloud Platform. The application consists of microservices that run in containers. You want to identify containers that are using the most CPU and memory. What should you do?

A.Use Stackdriver Kubernetes Engine Monitoring.

B.Use Prometheus to collect and aggregate logs per container, and then analyze the results in Grafana.

C.Use the Stackdriver Monitoring API to create custom metrics, and then organize your containers using groups.

D.Use Stackdriver Logging to export application logs to BigOuery. aggregate logs per container, and then analyze CPU and memory consumption.

Question 9

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?

A.Grant the team members the IAM role of logging.configWriter on Cloud IAM.

B.Configure Access Context Manager to allow only these members to export logs.

C.Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.

D.Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.

Question 10

You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

A.Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.

B.Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently

C.Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application

D.Inject the secret at the time of instance creation via an encrypted configuration management system.

Premium Bundle

Newest Professional-Cloud-DevOps-Engineer Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing Professional-Cloud-DevOps-Engineer Exam! BraindumpsPass.com now offer the updated Professional-Cloud-DevOps-Engineer exam dumps, the BraindumpsPass.com Professional-Cloud-DevOps-Engineer exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com Professional-Cloud-DevOps-Engineer pdf dumps with Exam Engine here:

Access Professional-Cloud-DevOps-Engineer Premium Version

(200 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 777Google.Professional-Cloud-DevOps-Engineer.v2023-01-21.q29; 1766Google.Professional-Cloud-DevOps-Engineer.v2022-06-30.q61; 65Google.Pass4surecert.Professional-Cloud-DevOps-Engineer.v2021-09-22.by.horace.37q.pdf

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 155TheSecOpsGroup.CNSP.v2025-09-08.q20; 206CFAInstitute.ESG-Investing.v2025-09-08.q173; 152PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 140Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 176Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104