Question 241 of 300
mediummultiple choiceObjective-mapped

GCDL Practice Question: A DevOps team wants to adopt GitOps practices for…

This GCDL practice question tests your understanding of a devops team wants to adopt gitops practices for…. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A DevOps team wants to adopt GitOps practices for managing their Google Cloud infrastructure. Which combination of tools and practices defines a GitOps approach to cloud infrastructure management?

Question 1mediummultiple choice
Full question →

A DevOps team wants to adopt GitOps practices for managing their Google Cloud infrastructure. Which combination of tools and practices defines a GitOps approach to cloud infrastructure management?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

A

Distractor review

Using the Google Cloud Console to make infrastructure changes and exporting the configuration to Git after each change

Post-hoc export to Git is backwards GitOps — Git becomes a documentation store rather than the source of truth. Console changes that aren't reviewed via PR bypass governance controls.

B

Distractor review

GitOps only applies to application code deployment, not to cloud infrastructure management

GitOps originated in application deployment but has been widely adopted for infrastructure management (infrastructure as code via Terraform, Pulumi, or Kubernetes-native Config Connector). It applies equally to both.

C

Distractor review

Manually applying Terraform changes from engineers' local machines and documenting changes in a shared wiki

Manual local applies with wiki documentation is not GitOps. There's no single source of truth (different engineers may have different local state), no automated reconciliation, and documentation diverges from actual state over time.

D

Best answer

Storing all infrastructure as code (Terraform or Config Connector) in a Git repository, using pull requests for all changes, and automated CI/CD pipelines that apply changes and detect drift from the declared state

This is GitOps. Git repo as truth: ✓. Pull request process for changes: ✓ (provides review, approval, audit trail). Automated reconciliation: ✓ (CI/CD applies changes and detects drift). This pattern makes infrastructure management reproducible, auditable, and collaborative.

Common exam trap

Common exam trap: NAT rules depend on direction and matching traffic

NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.

Technical deep dive

How to think about this question

NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.

KKey Concepts to Remember

  • Static NAT maps one inside address to one outside address.
  • PAT allows many inside hosts to share one public address using ports.
  • Inside local and inside global describe the private and translated addresses.
  • NAT ACLs identify traffic for translation, not always security filtering.

TExam Day Tips

  • Identify inside and outside interfaces first.
  • Check whether the scenario needs static NAT, dynamic NAT or PAT.
  • Do not confuse NAT matching ACLs with normal packet-filtering intent.

Key takeaway

NAT direction and interface roles matter as much as the IP address mapping. Inside/outside designation controls which traffic is translated.

Related practice questions

Related GCDL practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

Practice this exam

Start a free GCDL practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this GCDL question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Storing all infrastructure as code (Terraform or Config Connector) in a Git repository, using pull requests for all changes, and automated CI/CD pipelines that apply changes and detect drift from the declared state — GitOps is an operational framework where Git is the single source of truth for infrastructure state. All infrastructure changes are made via pull requests to a Git repository; automation (CI/CD pipelines) reconciles the actual cloud state to match the declared state in Git. This provides auditability (every change has a PR, review, and commit), rollback capability (revert the PR), and drift detection (automation detects when actual state diverges from declared state).

What should I do if I get this GCDL question wrong?

Review the four NAT address types (inside local, inside global, outside local, outside global), PAT port overload, and static vs dynamic NAT use cases. Then practise related GCDL NAT questions on configuration and troubleshooting.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Discussion

Loading comments…

Sign in to join the discussion.

This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.