Free Access Google.Professional-Cloud-DevOps-Engineer.v2025-09-27.q141 Practice Test (Page 7)

Question 26

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

A.Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.

B.Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io
/altostrat-images.

C.Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.

D.Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.

Question 27

You are creating a CI/CD pipeline to perform Terraform deployments of Google Cloud resources Your CI/CD tooling is running in Google Kubernetes Engine (GKE) and uses an ephemeral Pod for each pipeline run You must ensure that the pipelines that run in the Pods have the appropriate Identity and Access Management (1AM) permissions to perform the Terraform deployments You want to follow Google-recommended practices for identity management What should you do?
Choose 2 answers

A.Assign the appropriate 1AM permissions to the Google service account associated with the Compute Engine VM instances that run the Pods

B.Create a new Google service account, and assign the appropriate 1AM permissions

C.Create a new JSON service account key for the Google service account store the key as a Kubernetes secret, inject the key into the Pods, and set the boogle_application_credentials environment variable

D.Create a new Kubernetes service account, and assign the service account to the Pods Use Workload Identity to authenticate as the Google service account

E.Create a new JSON service account key for the Google service account store the key in the secret management store for the CI/CD tool and configure Terraform to use this key for authentication

Question 28

You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

A.Instrumentation coded directly in the client

B.GKE health checks for your application servers

C.Your application servers' logs

D.A synthetic client that periodically sends simulated user requests

E.Metrics exported from the application servers

Question 29

Your team is preparing to launch a new API in Cloud Run. The API uses an OpenTelemetry agent to send distributed tracing data to Cloud Trace to monitor the time each request takes. The team has noticed inconsistent trace collection. You need to resolve the issue. What should you do?

A.Increase the CPU limit in Cloud Run from 2 to 4.

B.Use an HTTP health check.

C.Configure CPU to be allocated only during request processing.

D.Configure CPU to be always-allocated.

Question 30

Your company follows Site Reliability Engineering practices. You are the Incident Commander for a new. customer-impacting incident. You need to immediately assign two incident management roles to assist you in an effective incident response. What roles should you assign?
Choose 2 answers

A.External Customer Communications Lead

B.Communications Lead

C.Engineering Lead

D.Operations Lead

E.Customer Impact Assessor

Other Version: 781Google.Professional-Cloud-DevOps-Engineer.v2023-01-21.q29; 1786Google.Professional-Cloud-DevOps-Engineer.v2022-06-30.q61; 1727Google.Professional-Cloud-DevOps-Engineer.v2022-04-13.q62; 65Google.Pass4surecert.Professional-Cloud-DevOps-Engineer.v2021-09-22.by.horace.37q.pdf

Latest Upload: 108Google.Professional-Cloud-DevOps-Engineer.v2025-09-27.q141; 138Snowflake.ARA-C01.v2025-09-27.q148; 112Sitecore.Sitecore-XM-Cloud-Developer.v2025-09-27.q25; 110GRI.ESRS-Professional.v2025-09-27.q15; 106Oracle.1Z0-1061-24.v2025-09-27.q116; 134SAP.C-THINK1-02.v2025-09-26.q87; 142Salesforce.Marketing-Cloud-Administrator.v2025-09-26.q153; 130AGA.GAFRB.v2025-09-26.q38; 108SAP.C-THR95-2505.v2025-09-26.q30; 120Google.Chrome-Enterprise-Administrator.v2025-09-25.q17

Question 26

Question 27

Question 28

Question 29

Question 30

Download PDF File