Cloud DevOps Engineer Intermediate Practice Exam: Medium Difficulty 2025

You are bootstrapping a new Google Cloud organization for a company with multiple product teams. They want consistent guardrails (no public IPs by default, centralized audit logging), but teams must manage their own resources independently. What approach best meets these requirements?

A security team requires that Cloud Audit Logs from all projects be retained in a central project and that product teams cannot disable logging. At the same time, teams should be able to query their own logs. What should you do?

Your team uses Cloud Build for CI. You want to speed up builds for a containerized app by caching dependencies and also ensure builds are only triggered for changes to specific directories. What is the best solution?

You deploy to GKE using a progressive delivery approach. The requirement is to gradually shift traffic to a new version, automatically roll back if key metrics degrade, and keep the rollout logic version-controlled. Which solution best fits?

Your company uses multiple microservices deployed on Cloud Run. You need to enforce that production deployments can only occur if the build artifacts were produced from a trusted pipeline and the source repository is verified. What should you implement?

An SRE team is defining SLOs for a customer-facing API on GKE behind an external HTTP(S) load balancer. They want an availability SLO based on successful requests and a latency SLO based on the 95th percentile. What is the best way to implement and monitor this on Google Cloud?

A production service has an SLO of 99.9% monthly availability. A recent incident consumed most of the error budget early in the month. The product team still wants to release several risky features. What is the most appropriate SRE-aligned action?

Your batch processing workload runs on GKE and has highly variable demand. Costs are higher than expected, and nodes are often underutilized. You want to reduce cost while keeping the system responsive to spikes. What should you do?

A Cloud Run service experiences occasional latency spikes. You suspect cold starts and uneven scaling. You want to improve tail latency while controlling costs. Which configuration change is the best first step?

Your team runs a 24/7 service on Compute Engine managed instance groups (MIGs). You need a safe way to roll out OS and application changes, ensure quick rollback, and keep changes auditable. What should you do?