Courseiva
← Back to Google Professional Cloud DevOps Engineer questions

Scenario-based practice

Refer to the Exhibit Practice Questions

Practise Google Professional Cloud DevOps Engineer practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
15
scenario questions
PCDOE
exam code
Google Cloud
vendor

Scenario guide

How to approach refer to the exhibit practice questions

Practise exhibit-style questions that ask you to read a topology, table, command output or diagram before choosing the best answer.

Quick answer

Exhibit-style questions test whether you can read a topology, command output, diagram or table before choosing the best answer.

How to extract the relevant detail from an exhibit.

How topology, command output or routing information affects the answer.

How to avoid answering from memory before reading the evidence.

How to map the exhibit back to the exam objective.

Related practice questions

Related PCDOE topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Bootstrapping a Google Cloud organization for DevOps practice questions

Practise PCDOE questions linked to Bootstrapping a Google Cloud organization for DevOps.

Applying site reliability engineering practices practice questions

Work through PCDOE questions on Applying site reliability engineering practices.

Optimizing performance and cost practice questions

Practise PCDOE questions linked to Optimizing performance and cost.

Building and implementing CI/CD pipelines practice questions

Targeted PCDOE practice covering Building and implementing CI/CD pipelines.

Implementing service monitoring strategies practice questions

Sharpen your PCDOE knowledge of Implementing service monitoring strategies.

Optimizing service performance practice questions

Optimizing service performance practice questions for PCDOE.

PCDOE fundamentals practice questions

Targeted PCDOE practice covering PCDOE fundamentals.

PCDOE scenario practice questions

Practise PCDOE questions linked to PCDOE scenario.

PCDOE troubleshooting practice questions

Sharpen your PCDOE knowledge of PCDOE troubleshooting.

Practice set

Practice scenarios

Question 1mediummultiple choice
Full question →

Refer to the exhibit. An App Engine application returns 504 errors. The application calls an external API and processes the result. Which change is most likely to resolve the errors?

Exhibit

Refer to the exhibit.

---
# Sample error from Cloud Logging
{
  "httpRequest": {
    "requestUrl": "https://example.com/data",
    "status": 504
  },
  "resource": {
    "type": "gae_app",
    "labels": {
      "module_id": "default",
      "version_id": "v2"
    }
  },
  "textPayload": "The request was terminated because it took longer than 60 seconds."
}
---
Question 2mediummultiple choice
Full question →

Refer to the exhibit. A DevOps engineer wants to reduce compute costs immediately. Which action is most effective?

Exhibit

The output of `gcloud compute instances list --format="table(name,zone,machineType,preemptible,status)"` shows:
```
NAME        ZONE           MACHINE_TYPE   PREEMPTIBLE  STATUS
instance-1  us-central1-a  n1-standard-4  true         RUNNING
instance-2  us-central1-b  n1-standard-8  false        RUNNING
instance-3  us-central1-a  n1-standard-2  false        TERMINATED
```
Question 3hardmultiple choice
Full question →

Refer to the exhibit. A DevOps engineer applies this Terraform configuration but gets an error: "Error creating Project: googleapi: Error 403: The caller does not have permission to enable services". What is the most likely cause?

Exhibit

```
resource "google_project" "my_project" {
  name       = "My Project"
  project_id = "my-project-123"
  org_id     = "123456789012"
  auto_create_network = false
}
resource "google_project_service" "compute" {
  project = google_project.my_project.project_id
  service = "compute.googleapis.com"
}
```
Question 4easymultiple choice
Full question →

Refer to the exhibit. What does this recommendation suggest?

Network Topology
project=my-projectlocation=globalrecommender=google.compute.instance.MachineTypeRecommender` shows:```recommendationId: rec-123state: ACTIVEpriority: P1
Question 5easymultiple choice
Full question →

Refer to the exhibit. The DevOps team is trying to create a new service account key. The operation fails with a permission error. What is the most likely cause?

Network Topology
gcloud resource-manager org-policies listorganization=123456789012CONSTRAINT: constraints/iam.disableServiceAccountKeyUploadLIST_POLICY: trueUPDATE_TIME: 2023-01-15T10:00:00Z
Question 6easymultiple choice
Full question →

Refer to the exhibit. What does the alert condition indicate?

Exhibit

Cloud Monitoring alert policy configuration:
Condition type: Metric threshold
Resource type: Cloud Run Revision
Metric: request_count
Condition: Any time series violates
Threshold: > 1000
Duration: 1m
Question 7hardmultiple choice
Full question →

Refer to the exhibit. You are investigating a performance issue where the api-server container is using excessive CPU. You run a Cloud Monitoring API query and receive the JSON configuration shown. However, the query returns no data points. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
{
  "monitoredResource": {
    "type": "k8s_container",
    "labels": {
      "project_id": "my-project",
      "location": "us-central1",
      "cluster_name": "prod-cluster",
      "namespace_name": "default",
      "pod_name": "api-server-7d8f9c",
      "container_name": "api-server"
    }
  },
  "interval": {
    "startTime": "2025-02-10T10:00:00Z",
    "endTime": "2025-02-10T11:00:00Z"
  },
  "aggregation": {
    "alignmentPeriod": "60s",
    "perSeriesAligner": "ALIGN_MEAN",
    "crossSeriesReducer": "REDUCE_SUM"
  },
  "filter": "metric.type="kubernetes.io/container/cpu/core_usage_time" AND resource.labels.container_name="api-server"",
  "metric": {
    "type": "kubernetes.io/container/cpu/core_usage_time"
  }
}
Question 8hardmultiple choice
Full question →

Refer to the exhibit.

```yaml name: projects/my-project/alertPolicies/12345 displayName: High Error Rate combiner: OR conditions: - conditionThreshold: filter: metric.type="logging.googleapis.com/user/myapp/error_count" resource.type="k8s_container" aggregations: - alignmentPeriod: 60s perSeriesAligner: ALIGN_RATE duration: 120s comparison: COMPARISON_GT thresholdValue: 5 trigger: count: 1 ```

An engineer notices that this alert fires too frequently during normal operation. Which change would most likely reduce the noise?

Exhibit

Refer to the exhibit.
Question 9easymultiple choice
Full question →

Refer to the exhibit. A DevOps engineer needs to view the cost report for a project. Which role should be granted at the organization level to allow viewing billing data for all projects in the organization?

Network Topology
gcloud projects get-ancestors my-projectformat="json"{"type": "folder", "id": "777777777777"},{"type": "organization", "id": "123456789012"}
Question 10mediummultiple choice
Full question →

Refer to the exhibit. A DevOps engineer noticed that the nightly batch processing costs are higher than expected. After running the above command, what is the most likely cause?

Network Topology
gcloud compute instances listfilter="name~'^batch-*'"format="json""name": "batch-job-1","zone": "us-central1-a","machineType": "n2-standard-4","status": "RUNNING","scheduling": {"preemptible": false,"onHostMaintenance": "MIGRATE","automaticRestart": true},"name": "batch-job-2","zone": "us-central1-b",
Question 11hardmultiple choice
Full question →

Refer to the exhibit. A DevOps engineer is trying to create a new project using the Cloud Console. The project creation fails with a policy violation. The engineer has permissions on folders/12345678 and folders/87654321 but not on any other folders. They select folder/87654321 as the parent. What is the most likely reason for the failure?

Exhibit

{
  "name": "projects/my-project/policies/constraints/resourcemanager.allowedProjectParent",
  "spec": {
    "rules": [
      {
        "values": {
          "allowedValues": [
            "folders/12345678"
          ]
        }
      }
    ]
  }
}
Question 12mediummultiple choice
Full question →

Refer to the exhibit. A DevOps engineer observes that a GKE cluster's node performance is degraded during high I/O workloads. Based on the exhibit, which change would most likely improve disk I/O performance?

Network Topology
zone us-central1format="json""machineType": "n1-standard-4","diskSizeGb": 100,"diskType": "pd-standard","imageType": "COS","serviceAccount": "default","oauthScopes": ["https://www.googleapis.com/auth/cloud-platform"]
Question 13mediummultiple choice
Full question →

Refer to the exhibit. A Cloud Build pipeline using this configuration fails on the third step with a permission error. The Cloud Build service account has the 'Cloud Run Admin' role. What is the most likely missing permission?

Network Topology
args: ['gcloud'image'region'steps:- name: 'gcr.io/cloud-builders/docker'args: ['build', '-t', 'us-central1-docker.pkg.dev/my-project/my-repo/my-image:latest', '.']args: ['push', 'us-central1-docker.pkg.dev/my-project/my-repo/my-image:latest']- name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
Question 14hardmultiple choice
Full question →

Refer to the exhibit. A DevOps engineer assigned this custom role to a service account used in Cloud Build. The pipeline fails when trying to access a secret stored in Secret Manager. Which permission is missing?

Exhibit

{
  "name": "projects/my-project/roles/customDevOpsRole",
  "title": "Custom DevOps Role",
  "description": "For CI/CD pipelines",
  "includedPermissions": [
    "cloudbuild.builds.create",
    "cloudbuild.builds.get",
    "artifactregistry.repositories.downloadArtifacts",
    "artifactregistry.repositories.uploadArtifacts",
    "run.routes.invoke",
    "run.services.update"
  ]
}
Question 15mediummultiple choice
Full question →

Refer to the exhibit. A Cloud Function (2nd gen) is timing out. The function's timeout is set to 60 seconds. The function queries a Cloud SQL database. What is the most likely cause and the best action?

Network Topology
limit 5format jsonRefer to the exhibit.```"severity": "WARNING","timestamp": "2025-03-15T14:23:00Z"},"timestamp": "2025-03-15T14:24:00Z"

These PCDOE practice questions are part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style PCDOE questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.