You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?

• A.Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.
• B.File a bug with the development team so they can find the root cause of the crashing instance.
• C.Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.
• D.Create a Managed Instance Group with a single instance and use health checks to determine the system status.

Comment: *

Name: *

Email: *

Verification: *

You are developing a strategy for monitoring your Google Cloud Platform (GCP) projects in production using Stackdriver Workspaces. One of the requirements is to be able to quickly identify and react to production environment issues without false alerts from development and staging projects. You want to ensure that you adhere to the principle of least privilege when providing relevant team members with access to Stackdriver Workspaces. What should you do?

• A.Grant relevant team members read access to all GCP production projects. Create Stackdriver workspaces inside each project.
• B.Create a new GCP monitoring project, and create a Stackdriver Workspace inside it. Attach the production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.
• C.Choose an existing GCP production project to host the monitoring workspace. Attach the production projects to this workspace. Grant relevant team members read access to the Stackdriver Workspace.
• D.Grant relevant team members the Project Viewer IAM role on all GCP production projects. Create Slackdriver workspaces inside each project.

Comment: *

Name: *

Email: *

Verification: *

You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

• A.GKE health checks for your application servers
• B.Your application servers' logs
• C.Metrics exported from the application servers
• D.A synthetic client that periodically sends simulated user requests
• E.Instrumentation coded directly in the client

Comment: *

Name: *

Email: *

Verification: *

You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort. What should you do?

• A.Use Cloud Storage to cache intermediate artifacts.
• B.Run multiple Jenkins agents to parallelize the build.
• C.Use multiple smaller build steps to minimize execution time.
• D.Use larger Cloud Build virtual machines (VMs) by using the machine-type option.

Comment: *

Name: *

Email: *

Verification: *

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?

• A.Configure the build system with protected branches that require pull request approval.
• B.Use an Admission Controller to verify that incoming requests originate from approved sources.
• C.Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
• D.Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.

Comment: *

Name: *

Email: *

Verification: *