Logo ExamsQA
Exit
Official Bank 0/205

Google Cloud Certified – Professional Cloud DevOps Engineer Exam (Professional-Cloud-DevOps-Engineer) - Google Cloud Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
205 Total Questions
1
Question
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat- images project can be deployed to the cluster while minimizing development time. What should you do?
Options
A Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
B Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
C Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat- images/.
D Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
You are leading a DevOps project for your organization. The DevOps team is responsible for managing the service infrastructure and being on-call for incidents. The Software Development team is responsible for writing, submitting, and reviewing code. Neither team has any published SLOs. You want to design a new joint-ownership model for a service between the DevOps team and the Software Development team. Which responsibilities should be assigned to each team in the new

Exhibit

joint-ownership model?
Options
A Option A
B Option D
C Option C
D Option B
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (PII) is leaking into certain log entry fields. You want to prevent these fields from being written in new log entries as quickly as possible. What should you do?
Options
A Wait for the application developers to patch the application, and then verify that the log entries are no longer exposing PII.
B Use the filter-record-transformer Fluentd filter plugin to remove the fields from the log entries in flight.
C Stage log entries to Cloud Storage, and then trigger a Cloud Function to remove the fields and write the entries to Stackdriver via the Stackdriver Logging API.
D Use the fluent-plugin-record-reformer Fluentd output plugin to remove the fields from the log entries in flight.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
You are designing a system with three different environments: development, quality assurance (QA), and production. Each environment will be deployed with Terraform and has a Google Kubernetes Engine Enterprise (GKE Enterprise) cluster created so that application teams can deploy their applications. Config Sync will be used and templated to deploy infrastructure-level resources in each GKE Enterprise cluster. All users (for example, infrastructure operators and application owners) will use GitOps. How should you structure your source control repositories for both infrastructure as code (IaC) and application code?
Options
A Cloud Infrastructure (Terraform) repositories are separated: different branches are different environmentsGKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different overlay directories are different environmentsApplication (app source code) repositories are separated: different branches are different features
B Cloud Infrastructure (Terraform) repository is shared: different branches are different environmentsGKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared:
different overlay directories are different environmentsApplication (app source code) repository is shared: different directories are different features
C Cloud Infrastructure (Terraform) repository is shared: different directories are different environmentsGKE Enterprise Infrastructure (Config Sync Kustomize manifests) repositories are separated: different branches are different environmentsApplication (app source code) repositories are separated: different branches are different features
D Cloud Infrastructure (Terraform) repository is shared: different directories are different environmentsGKE Enterprise Infrastructure (Config Sync Kustomize manifests) repository is shared:
different overlay directories are different environmentsApplication (app source code) repositories are separated: different branches are different features
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage. What should you do?
Options
A Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage
for seven years.
B Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.
C Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.
D Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs,
and then select the bucket as the log export destination.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.