A company runs workloads in GKE and also in an on-premises Kubernetes cluster. They want to deploy the same application to both environments using a single CI/CD pipeline. They want to use GitOps principles. What should they do?

Use a single Cloud Build trigger that deploys to GKE only

Use Cloud Build to build the image and then use kubectl to apply the manifest to both clusters

Use a VPN to connect the on-premises cluster to GKE and deploy via a single kubectl command

Use Config Sync to sync the application manifest from a Git repository to both clusters

A company uses Artifact Registry to store container images. They want to automatically scan images for vulnerabilities and delete images that are older than 90 days. They also want to prevent untrusted users from pushing images. What should they configure?

Enable vulnerability scanning and set a retention policy on the bucket

Enable vulnerability scanning on the repository and set a cleanup policy for images older than 90 days, and use IAM roles to restrict push access

Use a Cloud Function to scan images and delete old ones

Use Cloud Build to scan images and manually delete old images

What is a key advantage of using infrastructure-as-code (IaC) pipelines over manually configuring infrastructure?

It eliminates the need for any human oversight.

It makes infrastructure changes irreversible.

It provides consistency and repeatability, reducing configuration drift.

It guarantees that infrastructure is always free of vulnerabilities.

A team uses Cloud Build triggers. They have a monorepo with multiple services. They want to run a specific pipeline only when changes are made to the 'service-a/' directory, but they also want to run a separate pipeline when changes are made to the 'service-b/' directory. They want to avoid running both pipelines for a single change. What should they do?

Create one trigger with a path filter for 'service-a/' and use a Cloud Build step to check if 'service-b/' was changed

Create one trigger with a path filter for 'service-a/' and another with a path filter for 'service-b/', but use a branch filter to avoid conflicts

Create two triggers, each with a path filter for the respective service directory

Create one trigger with a path filter for 'service-a/' and another with a path filter for 'service-b/', but use a tag filter to differentiate

What is the purpose of environment promotion rules in a deployment pipeline?

To ensure that all environments have identical configurations.

To define the order and conditions under which a build moves from one environment to the next.

To increase the number of environments in the pipeline.

To automatically delete old environments.

Google CloudProfessional Cloud DevOps Engineer

Domain 2Objective 1

2.1 Designing Pipelines PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 4)

Part of the Section 2: Building and implementing CI/CD pipelines, including continuous testing, for application, infrastructure, and machine learning workloads domain, which accounts for ~25% of the exam of the PROFESSIONAL-CLOUD-DEVOPS-ENGINEER exam.

28questions here

6free pages

10concepts

~25% of the examof the exam

10 Concepts in This Objective

CI/CD for Applications
CI/CD for Infrastructure
Artifact Registry Fundamentals
Artifact Lifecycle and Security
Hybrid and Multi-Cloud Deployment
GKE Deployment Strategies
Pipeline Trigger Types
Trigger Conditions and Filtering
Approval Flows in Deployments
Deployment Process Configuration

Questions 16–20

16application · medium
A company runs workloads in GKE and also in an on-premises Kubernetes cluster. They want to deploy the same application to both environments using a single CI/CD pipeline. They want to use GitOps principles. What should they do?
Select an answer first
17application · medium
A company uses Artifact Registry to store container images. They want to automatically scan images for vulnerabilities and delete images that are older than 90 days. They also want to prevent untrusted users from pushing images. What should they configure?
Select an answer first
18foundation · easy
What is a key advantage of using infrastructure-as-code (IaC) pipelines over manually configuring infrastructure?
Select an answer first
19expert · hard
A team uses Cloud Build triggers. They have a monorepo with multiple services. They want to run a specific pipeline only when changes are made to the 'service-a/' directory, but they also want to run a separate pipeline when changes are made to the 'service-b/' directory. They want to avoid running both pipelines for a single change. What should they do?
Select an answer first
20foundation · easy
What is the purpose of environment promotion rules in a deployment pipeline?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVOPS-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVOPS-ENGINEER” is a trademark of its owner, used for identification only.