Exam Question 21
True or false: DevOps is an official framework.
A. True
B. False
Correct Answer:
B. False
Answer Description:
DevOps is a departure from familiar IT methodologies, such as Waterfall, Agile and ITIL, in that it lacks a set of explicit tenets for IT organizations to follow. DevOps is not a prescriptive set of rules, but rather a collection of loose guidelines that encapsulate the notion that IT is more valuable as a cohesive whole. While that ambiguity can be frustrating, it gives a wide berth to accommodate the unique requirements and features of every IT ecosystem.
Exam Question 22
Are DevOps and site reliability engineering (SRE) synonymous?
A. Yes
B. No
C. Both A and B
Correct Answer:
C. Both A and B
Answer Description:
Time to confess: This was a trick question. DevOps and SRE cover a lot of the same ground with many of the same goals. SRE is also focused heavily on automation and the reduction of manual interaction with application operation and management. But, while DevOps practices can extend outside of IT into the business, SRE is focused — almost exclusively — on IT itself.
Exam Question 23
True or false: Modern apps are designed to support the DevOps methodology.
A. True
B. False
Correct Answer:
A. True
Answer Description:
Despite the decade-long refrain that DevOps is a methodology, not a tool set, there is now a broad spectrum of tools designed specifically to perform vital actions in a DevOps pipeline. While DevOps tool is a misnomer, the reality is that vendors are building tools that support DevOps tenets, like CI/CD, modularization, broadly applied automation and more comprehensive monitoring efforts. And, while those tools can be used by non-DevOps organizations, they are a prime gateway to a wide-scale takeover.
Exam Question 24
You have been tasked with budgeting a new project that will be deployed on Google App Engine. What is the best strategy for keeping tabs on the project and helping you mitigate cloud overages?
A. Set up budget alerts for different thresholds to help monitor excessive spending, such as 25%, 50% and 90% of total budget.
B. Use a credit card configured with a limit that corresponds to your monthly budget.
C. Set up a billing query that automatically generates a summary of the spending.
D. Set up a daily budget in Google App Engine settings that corresponds to 1/30 of your monthly budget.Correct Answer:
A. Set up budget alerts for different thresholds to help monitor excessive spending, such as 25%, 50% and 90% of total budget.
Answer Description:
Set up budget alerts for different thresholds to help monitor excessive spending, such as 25%, 50% and 90% of total budget. B is incorrect because you will still be billed for it and be responsible for the total even if the payment does not go through. C will not necessarily give you enough notice if you accidentally run up a large charge in a short period of time. D is not correct because you may be billed for other services outside of App Engine that could cause you to exceed your budget.
Exam Question 25
You are onboarding a new developer involved in deploying apps to your Google infrastructure. What kind of security IAM role would be best suited for them?
A. App Engine Code Viewer
B. App Engine Service Admin
C. Project Editor
D. App Engine Deployer
Correct Answer:
D. App Engine Deployer
Answer Description:
App Engine Deployer. App Engine Code Viewer provides read-only access. App Engine Service Admin would allow them to make updates, but not deploy a new version. A Project Editor role would grant them full access, but it is preferable to grant the least privilege required for a role.
Exam Question 26
You are tasked with estimating the cost of a new application. What approach will work best?
A. Send the configuration settings to Google Cloud billing support and ask for an estimate.
B. Generate a YAML file detailing the configuration settings for the app and process it using the “gcloud app estimate” command.
C. Manually generate an estimate using the app engine pricing calculator.
D. Calculate the estimated number of users and then multiply this by what it costs for a single user.
Correct Answer:
C. Manually generate an estimate using the app engine pricing calculator.
Answer Description:
Manually generate an estimate using the app engine pricing calculator. D is not correct because billing support manages the payment process and not estimates. B will generate an error. Also, B does not consider the intricacies of scaling different services and will not be accurate.
Exam Question 27
What is the best data storage to use with a high-volume IoT streaming data application?
A. Cloud Bigtable
B. BigQuery
C. Cloud data store
D. Cloud storage
Correct Answer:
A. Cloud Bigtable
Answer Description:
Cloud Bigtable provides the best performance-to-cost ratio appropriate for time-series data. BigQuery is much slower. Cloud data store is not as performant and not the best choice for time-series data. Cloud storage keeps the data in a format that is not easy to query and update.
Exam Question 28
What is the best way to ensure the right permissions have been configured for a new IAM role?
A. Check the API section of the GCP console.
B. Explore the security section in the GCP console.
C. Check the IAM section of the GCP console.
D. Use the “gcloud IAM” command to automate the process.
Correct Answer:
C. Check the IAM section of the GCP console.
Answer Description:
Check the IAM section of the GCP console. The information is not found in A and B. D will generate an error.
Exam Question 29
What is the best way to grant everyone on a small team the ability to view all resources for a project?
A. Set up a new Google Group specific to the project and add everyone to this group. Then use the “gcloud projects add-iam-policy-binding” command to add the group’s email address with the Project Viewer role.
B. Set up a new Google Group specific to the project and add everyone to this group. Then use the “gcloud iam roles create” command to add the group’s email address with the Project Viewer role.
C. Use a script that includes all the email addresses that runs the “gcloud iam roles create” command.
D. Use a script that includes all the email addresses that runs the “gcloud projects add-iam-policy-binding” command.
Correct Answer:
A. Set up a new Google Group specific to the project and add everyone to this group. Then use the “gcloud projects add-iam-policy-binding” command to add the group’s email address with the Project Viewer role.
Answer Description:
Set up a new Google Group specific to the project and add everyone to this group. Then use the “gcloud projects add-iam-policy-binding” command to add the group’s email address with the Project Viewer role. B and C will only create the roles and not add everyone. D is not recommended because it is easier to remove and add people to one group that can be shared across different permissions than doing so for each permission setting.
Exam Question 30
What is the best storage option for allowing international users to share files for an application?
A. A Filestore managed instance
B. A Cloud data store database
C. SSD attached to a virtual machine instance
D. A multi-regional Cloud storage bucket
Correct Answer:
D. A multi-regional Cloud storage bucket
Answer Description:
A multi-regional Cloud storage bucket. A Filestore instance would be restricted to one region. A Cloud data store is does not work well for files. The SSD storage would go away if a problem emerged with the virtual machine instance.