Pro-DevOps-2

You support a stateless web-based API that is deployed on a single Compute Engine instance in the europe-west2-a zone. The Service Level Indicator (SLI) for service availability is below the specified Service Level Objective (SLO). A postmortem has revealed that requests to the API regularly time out. The time outs are due to the API having a high number of requests and running out memory. You want to improve service availability. What should you do?

• Change the specified SLO to match the measured SLI

• Move the service to higher-specification compute instances with more memory

• Set up additional service instances in other zones and load balance the traffic between all instances

• Set up additional service instances in other zones and use them as a failover in case the primary instance is unavailable

You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?

• Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.

• Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.

• Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.

• Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members. What should you do?

• Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.

• Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.

• Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.

• Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.

You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard. You need to troubleshoot the issue. What should you do?

• Confirm that the Stackdriver agent has been installed in the hosting virtual machine.

• Confirm that your account has the proper permissions to use the Stackdriver dashboard.

• Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.

• Confirm that the application is using the required client library and the service account key has proper permissions.

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline. What should you do?

• Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.

• Configure the containers in the build pipeline to always update themselves before release.

• Reconfigure the existing operating system vulnerability software to exist inside the container.

• Implement static code analysis tooling against the Docker files used to create the containers.

You are a DevOps Engineer in wipro. You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort. What should you do?

• Use Cloud Storage to cache intermediate artifacts.

• Run multiple Jenkins agents to parallelize the build.

• Use multiple smaller build steps to minimize execution time.

• Use larger Cloud Build virtual machines (VMs) by using the machine-type option.

You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service. What should you do first?

• Roll back the recent release.

• Review the Stackdriver monitoring.

• Upsize the virtual machines running the login services.

• Deploy a new release to see whether it fixes the problem.

You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

• Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently

• Inject the secret at the time of instance creation via an encrypted configuration management system.

• Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application.

• Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.

You encounter a large number of outages in the production systems you support. You receive alerts for all the outages that wake you up at night. The alerts are due to unhealthy systems that are automatically restarted within a minute. You want to set up a process that would prevent staff burnout while following Site Reliability Engineering practices. What should you do?

• Eliminate unactionable alerts.

• Create an incident report for each of the alerts.

• Distribute the alerts to engineers in different time zones.

• Redefine the related Service Level Objective so that the error budget is not exhausted.

You have migrated an e-commerce application to Google Cloud Platform (GCP). You want to prepare the application for the upcoming busy season. What should you do first to prepare for the busy season?

• Load test the application to profile its performance for scaling

• Enable AutoScaling on the production clusters, in case there is growth.

• Pre-provision double the compute power used last season, expecting growth.

• Create a runbook on inflating the disaster recovery (DR) environment if there is growth.