Important Google Professional Cloud DevOps Engineer Exam Questions

CertPrep • Google • Professional Cloud DevOps Engineer Exam Questions

Select Certification Providers

Select Certification Exam

Get Full Version

Google Professional Cloud DevOps Engineer Exam

Attempt the Google Cloud Certified practice test and solve real exam-like Professional Cloud DevOps Engineer questions to prepare efficiently and increase your chances of success. Our Google Professional Cloud DevOps Engineer practice questions match the actual Professional Cloud DevOps Engineer exam format, helping you enhance confidence and improve performance. With our Professional Cloud DevOps Engineer practice exam software, you can analyze your performance, identify weak areas, and work on them effectively to boost your final Google Cloud Certified exam score.

Vendor:	Google
Exam Name:	Professional Cloud DevOps Engineer
Registration Code:	Professional-Cloud-DevOps-Engineer
Related Certification:	Google Cloud Certified Certification
Exam Audience:	DevOps engineers,

Total Questions

205

Last Updated

20-05-2026

Exam Duration

120 MINUTES

Upgrade to Premium

GET FULL PDF

Question: 1

Your company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project might accidentally delete the project, so a lien has been placed on the project. You need to design a solution to restrict Shared VPC project deletion to those with the resourcemanager.projects.updateLiens permission at the organization level. What should you do?

AEnable VPC Service Controls for the container.googleapis.com API service.

BRevoke the resourcemanager.projects.updateLiens permission from all users associated with the project.

CEnable the compute.restrictXpnProjectLienRemoval organization policy constraint.

DInstruct teams to only perform IAM permission management as code with Terraform.

Answer: C

Explanation:

Comprehensive and Detailed Explanation From General Google Cloud IAM and Organization Policy Knowledge:

The core requirement is to prevent accidental deletion of a Shared VPC host project, even by project owners, by ensuring that only users with a specific permission at the organization level can remove the lien that protects the project.

A lien (resourcemanager.projects.delete) has already been placed on the project. This prevents its deletion. The challenge is to prevent the removal of this lien by project-level administrators.

The permission to remove a lien is resourcemanager.projectLiens.update (or resourcemanager.projects.updateLiens as stated in the question, which implies a broader update capability including liens).

Option A (Enable VPC Service Controls for the container.googleapis.com API service): VPC Service Controls are for data exfiltration prevention by creating service perimeters. They do not directly control IAM permissions for lien management or project deletion.

Option B (Revoke the resourcemanager.projects.updateLiens permission from all users associated with the project): While this would prevent project-level users from removing the lien, it doesn't enforce therequirement that only users with this permission at the organization level can remove it. A project owner could potentially re-grant themselves this permission at the project level if not otherwise restricted. The goal is a stronger, centrally enforced restriction.

Option C (Enable the compute.restrictXpnProjectLienRemoval organization policy constraint): This is specifically designed for the scenario described.Organization Policies allow centralized control over resource configurations across the organization.

The compute.restrictXpnProjectLienRemoval constraint, when enforced (set to True), restricts the removal of liens on Shared VPC host projects. Only users who have the resourcemanager.projectLiens.update permission (or resourcemanager.projects.updateLiens) granted at the organization level can then remove such liens. This prevents project owners or other project-level principals from removing the lien unless they also have this specific permission at the org level.

Option D (Instruct teams to only perform IAM permission management as code with Terraform): While Infrastructure as Code (IaC) is a good practice for managing IAM, it's an operational guideline and doesn't technically enforce the restriction on lien removal. A user with sufficient project-level IAM permissions could still manually remove the lien via the console or gcloud if not prevented by an organization policy.

Therefore, enabling the compute.restrictXpnProjectLienRemoval organization policy is the direct and most effective way to meet the requirement.

Reference (Based on Google Cloud Organization Policy and Shared VPC documentation):

Google Cloud documentation on Resource Manager Liens: https://cloud.google.com/resource-manager/docs/project-liens

Google Cloud documentation on Organization Policy Constraints: https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints

Specifically, the compute.restrictXpnProjectLienRemoval constraint: 'When set to true, liens on Shared VPC host projects can only be removed by users that have resourcemanager.projectLiens.update permission on the organization.' (or similar wording indicating org-level permission is required). This constraint ensures that the protection afforded by the lien on a critical Shared VPC host project cannot be easily circumvented at the project level.

Question: 2

You are the on-call Site Reliability Engineer for a microservice that is deployed to a Google Kubernetes Engine (GKE) Autopilot cluster. Your company runs an online store that publishes order messages to Pub/Sub and a microservice receives these messages and updates stock information in the warehousing system. A sales event caused an increase in orders, and the stock information is not being updated quickly enough. This is causing a large number of orders to be accepted for products that are out of stock You check the metrics for the microservice and compare them to typical levels.

Exam Question 2 Exhibit 1

You need to ensure that the warehouse system accurately reflects product inventory at the time orders are placed and minimize the impact on customers What should you do?

ADecrease the acknowledgment deadline on the subscription

BAdd a virtual queue to the online store that allows typical traffic levels

CIncrease the number of Pod replicas

DIncrease the Pod CPU and memory limits

Answer: C

Explanation:

The best option for ensuring that the warehouse system accurately reflects product inventory at the time orders are placed and minimizing the impact on customers is to increase the number of Pod replicas. Increasing the number of Pod replicas will increase the scalability and availability of your microservice, which will allow it to handle more Pub/Sub messages and update stock information faster. This way, you can reduce the backlog of undelivered messages and oldest unacknowledged message age, which are causing delays in updating product inventory. You can use Horizontal Pod Autoscaler or Cloud Monitoring metrics-based autoscaling to automatically adjust the number of Pod replicas based on load or custom metrics.

Question: 3

You are responsible for creating and modifying the Terraform templates that define your Infrastructure. Because two new engineers will also be working on the same code, you need to define a process and adopt a tool that will prevent you from overwriting each other's code. You also want to ensure that you capture all updates in the latest version. What should you do?

A* Store your code in a Git-based version control system.* Establish a process that allows developers to merge their own changes at the end of each day.* Package and upload code lo a versioned Cloud Storage bucket as the latest master version.

B* Store your code in a Git-based version control system.* Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code.* Establish a process where the fully integrated code in the repository becomes the latest master version.

C* Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day. confirm that all changes have been captured in the files within the folder structure.* Rename the folder structure with a predefined naming convention that increments the version.

D* Store your code as text files in Google Drive in a defined folder structure that organizes the files.* At the end of each day, confirm that all changes have been captured in the files within the folder structure and create a new .zip archive with a predefined naming convention.* Upload the .zip archive to a versioned Cloud Storage bucket and accept it as the latest version.

Answer: B

Question: 4

You encountered a major service outage that affected all users of the service for multiple hours. After several hours of incident management, the service returned to normal, and user access was restored. You need to provide an incident summary to relevant stakeholders following the Site Reliability Engineering recommended practices. What should you do first?

ACall individual stakeholders lo explain what happened.

BDevelop a post-mortem to be distributed to stakeholders.

CSend the Incident State Document to all the stakeholders.

DRequire the engineer responsible to write an apology email to all stakeholders.

Answer: B

Question: 5

Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, and keep user data secure. What should you do?

AImplement Jenkins on local workstations.

BImplement Jenkins on Kubernetes on-premises

CImplement Jenkins on Google Cloud Functions.

DImplement Jenkins on Compute Engine virtual machines.

Answer: D

Explanation:

https://plugins.jenkins.io/google-compute-engine/

SAVE TIME & QUICKLY PREPARE WITH REAL QUESTIONS

GET FULL ACCESS