PCDOE practice questions 161–170

1. Question 161 · 210 in bank

   Some of your production services are running in Google Kubernetes Engine (GKE) in the eu-west-1 region. Your build system runs in the us-west-1 region. You want to push the container images from your build system to a scalable registry to maximize the bandwidth for transferring the images to the cluster. What should you do?

   • APush the images to Google Container Registry (GCR) using the gcr.io hostname.
   • BPush the images to Google Container Registry (GCR) using the us.gcr.io hostname.
   • CPush the images to Google Container Registry (GCR) using the eu.gcr.io hostname.
   • DPush the images to a private image registry running on a Compute Engine instance in the eu-west-1 region.

   Show answer

   Answer: C

   Explanation

   To maximize the bandwidth for transferring the images to the cluster, one needs the the registry to be closer to the production or system where it needs to be deployed. I would go with C, since the production system is in Europe.

   Source: Adapted from community discussion — Nik22

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 162 · 210 in bank

   You manage several production systems that run on Compute Engine in the same Google Cloud Platform (GCP) project. Each system has its own set of dedicated Compute Engine instances. You want to know how must it costs to run each of the systems. What should you do?

   • AIn the Google Cloud Platform Console, use the Cost Breakdown section to visualize the costs per system.
   • BAssign all instances a label specific to the system they run. Configure BigQuery billing export and query costs per label.
   • CEnrich all instances with metadata specific to the system they run. Configure Stackdriver Logging to export to BigQuery, and query costs based on the metadata.
   • DName each virtual machine (VM) after the system it runs. Set up a usage report export to a Cloud Storage bucket. Configure the bucket as a source in BigQuery to query costs based on VM name.

   Show answer

   Answer: B

   Explanation

   B. Assign all instances a label specific to the system they run. Configure BigQuery billing export and query costs per label. is the correct answer. Using labels to tag instances with the specific system they run allows you to easily filter and query costs by system in BigQuery. This allows you to see the costs associated with each system and make informed decisions about cost optimization.

   Source: Adapted from community discussion — JonathanSJ

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 163 · 210 in bank

   You use Spinnaker to deploy your application and have created a canary deployment stage in the pipeline. Your application has an in-memory cache that loads objects at start time. You want to automate the comparison of the canary version against the production version. How should you configure the canary analysis?

   • ACompare the canary with a new deployment of the current production version.
   • BCompare the canary with a new deployment of the previous production version.
   • CCompare the canary with the existing deployment of the current production version.
   • DCompare the canary with the average performance of a sliding window of previous production versions.

   Show answer

   Answer: A

   Explanation

   Ans A https://spinnaker.io/guides/user/canary/best-practices/#compare-canary-against-baseline-not-against-production You might be tempted to compare the canary deployment against your current production deployment. Instead always compare the canary against an equivalent baseline, deployed at the same time. The baseline uses the same version and configuration that is currently running in production, but is otherwise identical to the canary: Same time of deployment Same size of deployment Same type and amount of traffic In this way, you control for version and configuration only, and you reduce factors that could affect the analysis, like the cache warmup time, the heap size, and so on.

   Source: Adapted from community discussion — francisco_guerra

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 164 · 210 in bank

   You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?

   • ACreate a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
   • BEncrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
   • CUse client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
   • DUse Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.

   Show answer

   Answer: D

   References

   • Google Cloud documentation

   Next question

5. Question 165 · 210 in bank

   You support a popular mobile game application deployed on Google Kubernetes Engine (GKE) across several Google Cloud regions. Each region has multiple Kubernetes clusters. You receive a report that none of the users in a specific region can connect to the application. You want to resolve the incident while following Site Reliability Engineering practices. What should you do first?

   • AReroute the user traffic from the affected region to other regions that don't report issues.
   • BUse Stackdriver Monitoring to check for a spike in CPU or memory usage for the affected region.
   • CAdd an extra node pool that consists of high memory and high CPU machine type instances to the cluster.
   • DUse Stackdriver Logging to filter on the clusters in the affected region, and inspect error messages in the logs.

   Show answer

   Answer: A

   Explanation

   My answer would be option A, to reroute user traffic from the affected region to other regions that don't report issues, in order to immediately resolve the problem for users and minimize impact, and then use option D, Stackdriver Logging, to investigate the root cause of the issue. This approach aligns with SRE best practices of resolving incidents quickly and then conducting a post-mortem analysis to prevent similar incidents from happening in the future.

   Source: Adapted from community discussion — JonathanSJ

   Next question

6. Question 166 · 210 in bank

   Select 2

   You are writing a postmortem for an incident that severely affected users. You want to prevent similar incidents in the future. Which two of the following sections should you include in the postmortem? (Choose two.)

   • AAn explanation of the root cause of the incident.
   • BA list of employees responsible for causing the incident
   • CA list of action items to prevent a recurrence of the incident
   • DYour opinion of the incident's severity compared to past incidents
   • ECopies of the design documents for all the services impacted by the incident

   Show answer

   Answer: AC

   Explanation

   For a postmortem to be truly blameless, it must focus on identifying the contributing causes of the incident without indicting any individual or team for bad or inappropriate behavior.

   Source: Adapted from community discussion — cyrus86

   References

   • Google Cloud documentation

   Next question

7. Question 167 · 210 in bank

   You are ready to deploy a new feature of a web-based application to production. You want to use Google Kubernetes Engine (GKE) to perform a phased rollout to half of the web server pods. What should you do?

   • AUse a partitioned rolling update.
   • BUse Node taints with NoExecute.
   • CUse a replica set in the deployment specification.
   • DUse a stateful set with parallel pod management policy.

   Show answer

   Answer: A

   Explanation

   A is the answer. https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps#partitioning_a_rollingupdate Partitioning is useful if you want to stage an update, roll out a canary, or perform a phased roll out.

   Source: Adapted from community discussion — zellck

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Kubernetes documentation

   Next question

8. Question 168 · 210 in bank

   You are responsible for the reliability of a high-volume enterprise application. A large number of users report that an important subset of the application's functionality `" a data intensive reporting feature `" is consistently failing with an HTTP 500 error. When you investigate your application's dashboards, you notice a strong correlation between the failures and a metric that represents the size of an internal queue used for generating reports. You trace the failures to a reporting backend that is experiencing high I/O wait times. You quickly fix the issue by resizing the backend's persistent disk (PD). How you need to create an availability Service Level Indicator (SLI) for the report generation feature. How would you define it?

   • AAs the I/O wait times aggregated across all report generation backends
   • BAs the proportion of report generation requests that result in a successful response
   • CAs the application's report generation queue size compared to a known-good threshold
   • DAs the reporting backend PD throughout capacity compared to a known-good threshold

   Show answer

   Answer: B

   Explanation

   The question is: "create an availability SLI for the report generation feature." => availability. B is correct. Others aren't availability SLI.

   Source: Adapted from community discussion — NXD

   References

   • Google Cloud documentation

   Next question

9. Question 169 · 210 in bank

   You have an application running in Google Kubernetes Engine. The application invokes multiple services per request but responds too slowly. You need to identify which downstream service or services are causing the delay. What should you do?

   • AAnalyze VPC flow logs along the path of the request.
   • BInvestigate the Liveness and Readiness probes for each service.
   • CCreate a Dataflow pipeline to analyze service metrics in real time.
   • DUse a distributed tracing framework such as OpenTelemetry or Stackdriver Trace.

   Show answer

   Answer: D

   Explanation

   D is the answer. https://cloud.google.com/trace/docs/overview Cloud Trace, a distributed tracing system for Google Cloud, helps you understand how long it takes your application to handle incoming requests from users or other applications, and how long it takes to complete operations like RPC calls performed when handling the requests.

   Source: Adapted from community discussion — zellck

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 170 · 210 in bank

    You are creating and assigning action items in a postmodern for an outage. The outage is over, but you need to address the root causes. You want to ensure that your team handles the action items quickly and efficiently. How should you assign owners and collaborators to action items?

    • AAssign one owner for each action item and any necessary collaborators.
    • BAssign multiple owners for each item to guarantee that the team addresses items quickly.
    • CAssign collaborators but no individual owners to the items to keep the postmortem blameless.
    • DAssign the team lead as the owner for all action items because they are in charge of the SRE team.

    Show answer

    Answer: A

    Explanation

    The fact that the the question STRESSES that the outage is OVER ust give you a clue. Check what google SRE book says Missing ownership Declaring official ownership results in accountability, which leads to action. Our example postmortem contains several examples of missing ownership: The postmortem lists four owners. Ideally, an owner is a single point of contact who is responsible for the postmortem, follow-up, and completion. The Action Items section has little or no ownership for its entries. Actions items without clear owners are less likely to be resolved. It’s better to have a single owner and multiple collaborators.

    Source: Adapted from community discussion — TNT87

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCDOE practice, question 161. 210 questions available.