You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?

• A.Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.
• B.Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.
• C.Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.
• D.Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.

Comment: *

Name: *

Email: *

Verification: *

You have an application running in Google Kubernetes Engine. The application invokes multiple services per request but responds too slowly. You need to identify which downstream service or services are causing the delay. What should you do?

• A.Create a Dataflow pipeline to analyze service metrics in real time.
• B.Use a distributed tracing framework such as OpenTelemetry or Stackdriver Trace.
• C.Analyze VPC flow logs along the path of the request.
• D.Investigate the Liveness and Readiness probes for each service.

Comment: *

Name: *

Email: *

Verification: *

Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

• A.Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
• B.Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.
• C.Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
• D.Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.

Comment: *

Name: *

Email: *

Verification: *

You support a service that recently had an outage. The outage was caused by a new release that exhausted the service memory resources. You rolled back the release successfully to mitigate the impact on users. You are now in charge of the post-mortem for the outage. You want to follow Site Reliability Engineering practices when developing the post-mortem. What should you do?

• A.Focus on identifying the contributing causes of the incident rather than the individual responsible for the cause.
• B.Focus on developing new features rather than avoiding the outages from recurring.
• C.Plan individual meetings with all the engineers involved. Determine who approved and pushed the new release to production.
• D.Use the Git history to find the related code commit. Prevent the engineer who made that commit from working on production services.

Comment: *

Name: *

Email: *

Verification: *

You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard.
You need to troubleshoot the issue. What should you do?

• A.Confirm that the Stackdriver agent has been installed in the hosting virtual machine.
• B.Confirm that your account has the proper permissions to use the Stackdriver dashboard.
• C.Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
• D.Confirm that the application is using the required client library and the service account key has proper permissions.

Comment: *

Name: *

Email: *

Verification: *