Google GOOGLE-PRO-DEVOPS Practice Questions

The latest changes and updates from the administration for this exam.

verified

Latest Update: Jun 10 2026

All questions are working fine.

All Questions (391)bookmarkBookmarked (0)

All391Show all accessible questions in this exam.Missed391Questions you haven't attempted yet.Incorrect0Questions you answered incorrectly on your last attempt.

Question 101

Your considering placing your Infrastructure as code processes on Cloud Deployment Manager. What would be a risk of doing this?

Cloud Deployment Manager APIs could be deprecated in the future.

Cloud Deployment Manager can be used to permanently delete cloud resources.

Cloud Deployment Manager requires a Google APIs service account to run.

Cloud Deployment Manager takes some training to use

Question 102

You have created a new image of an application without the signature part and you tried to deploy. Instead of deploying you received an error “ Denied by Attestor”.. What could be the problem to resolve?

Extract the signature of PGP with Putty

Contact Support since its clearly a Google Issue

Create an attestation and submit to Binary Authorization

Enable Cloud Build with proper permissions in IAM

Question 103

What GCP service component can you select to create, manage, and upgrade Kubernetes clusters in your on-premises environment while using your Kubernetes Engine services?

GKE has this native capability

Cloud Anthos

Third party services

GKE On Prem

Question 104

You are currently deploying an application on a Kubernetes cluster. Your aware that a Deployment’s rollout is triggered if and only if the Deployment’s pod template is changed, for example if the labels or container images of the template are updated. Other updates, such as scaling the Deployment, do not trigger a rollout.. What is the name that would need to be changed?

.template.yaml

.spectemplate.yaml

.spec.template

App.py

Question 105

You would like to create a new repository in Cloud Source Repositories with gcloud. What would be the command to create a repo called “developer”?

gcloud create source repos developer

gcloud source repo create developer

gcloud source repos create developer

gcloud create source repos "developer"

Question 106

You have an application that accepts inputs from users. The application needs to kick off different background tasks based on these inputs. You want to allow for automated asynchronous execution of these tasks as soon as input is submitted by the user.. Which product should you use?

Cloud SDK

Cloud Crons

Cloud Tasks

Cloud Pub/Sub

Question 107

Several teams in your company want to use Cloud Build to deploy to their own Google Kubernetes Engine (GKE) clusters. The clusters are in projects that are dedicated to each team. The teams only have access to their own projects. One team should not have access to the cluster of another team. You are in charge of designing the Cloud Build setup, and want to follow Google-recommended practices. What should you do?

Create a single project for Cloud Build that all the teams will use. List the service accounts in this project and identify the one used by Cloud Build. Grant the Kubernetes Engine Developer IAM role to that service account in each team’s project.

In each team’s project, list the service accounts and identify the one used by Cloud Build for each project. In each project, grant the Kubernetes Engine Developer IAM role to the service account used by Cloud Build. Ask each team to execute Cloud Build builds in their own project.

Limit each team member’s access so that they only have access to their team’s clusters. Ask each team member to install the gcloud CLI and to authenticate themselves by running “gcloud init”. Ask each team member to execute Cloud Build builds by using the “gcloud builds submit”.

In each team’s project, create a service account, download a JSON key for that service account, and grant the Kubernetes Engine Developer IAM role to that service account in that project. Create a single project for Cloud Build that all the teams will use. In that project, encrypt all the service account keys by using Cloud KMS. Grant the Cloud KMS CryptoKey Decrypter IAM role to Cloud Build’s service account. Ask each team to include in their “cloudbuild.yaml” files a step that decrypts the key of their service account, and use that key to connect to their cluster.

Question 108

You are deploying an application to a Kubernetes cluster that requires a username and password to connect to another service. When you deploy the application, you want to ensure that the credentials are used securely in multiple environments with minimal code changes. What should you do?

Leverage a CI/CD pipeline to update the variables at build time and inject them into a templated Kubernetes application manifest.

Store the credentials as a Kubernetes ConfigMap and let the application access it via environment variables at runtime.

Store the credentials as a Kubernetes Secret and let the application access it via environment variables at runtime.

Bundle the credentials with the code inside the container and secure the container registry.

Question 109

In the App Engine standard environment which applications don’t need to use the Cloud Trace client libraries? (select3)

Question 110

Which of the following is not allowed in snapshot condition of Google debugger?

The operator <=

The operator ==

The operator ||

The operator &&

Update History

Update History