This PCDOE practice question tests your understanding of optimizing service performance. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A DevOps team is investigating performance issues in their GKE cluster. They want to use Cloud Profiler to identify the bottleneck. Which three steps are required to start profiling? (Select THREE)
Configure IAM permissions
The agent needs roles/profiler.agent.
Deploy the profiler agent to the application container
The agent collects profiling data.
Enable Cloud Profiler API
The API must be enabled in the project.
Install a sidecar proxy
Why wrong: Not needed for profiling.
Modify the application code to include profiling endpoints
Why wrong: The agent instruments the app automatically.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Configure IAM permissions
A is correct because Cloud Profiler requires the `cloudprofiler.agent` IAM role (or equivalent permissions) on the service account used by the GKE node or application to allow the agent to write profiling data to the Cloud Profiler API. Without this permission, the agent cannot upload profiles, and no data will appear in the console.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Configure IAM permissions
Why this is correct
The agent needs roles/profiler.agent.
Related concept
Read the scenario before looking for a memorised answer.
Deploy the profiler agent to the application container
Why this is correct
The agent collects profiling data.
Related concept
Read the scenario before looking for a memorised answer.
Enable Cloud Profiler API
Why this is correct
The API must be enabled in the project.
Related concept
Read the scenario before looking for a memorised answer.
Install a sidecar proxy
Why it's wrong here
Not needed for profiling.
Modify the application code to include profiling endpoints
Why it's wrong here
The agent instruments the app automatically.
Common exam traps
Google Cloud often tests the misconception that Cloud Profiler requires code modifications or sidecar proxies, when in fact it uses a lightweight agent that requires only API enablement, IAM permissions, and agent deployment.
Detailed technical explanation
Cloud Profiler uses statistical sampling via agents that hook into runtime signals (e.g., SIGPROF on Linux) to capture stack traces at a configurable rate (default 10 Hz). The agent communicates over gRPC to the `cloudprofiler.googleapis.com` endpoint, and the IAM permission `cloudprofiler.profiles.create` is checked at write time. A common subtlety is that the agent must be deployed in the same container as the application or as a sidecar container sharing the process namespace, but it is not a proxy.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Optimizing service performance — study guide chapter
Learn the concepts, then practise the questions
Optimizing service performance practice questions
Targeted practice on this topic area only
All PCDOE questions
500 questions across all exam domains
Google Professional Cloud DevOps Engineer study guide
Full concept coverage aligned to exam objectives
PCDOE practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise PCDOE questions linked to Bootstrapping a Google Cloud organization for DevOps.
Practise PCDOE questions linked to Managing service incidents.
Practise PCDOE questions linked to Managing Google Cloud costs.
Practise PCDOE questions linked to Building and implementing CI/CD pipelines.
Practise PCDOE questions linked to Implementing service monitoring strategies.
Practise PCDOE questions linked to Optimizing service performance.
Practise PCDOE questions linked to PCDOE fundamentals.
Practise PCDOE questions linked to PCDOE scenario.
Practise PCDOE questions linked to PCDOE troubleshooting.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Optimizing service performance — This question tests Optimizing service performance — Read the scenario before looking for a memorised answer..
The correct answer is: Configure IAM permissions — A is correct because Cloud Profiler requires the `cloudprofiler.agent` IAM role (or equivalent permissions) on the service account used by the GKE node or application to allow the agent to write profiling data to the Cloud Profiler API. Without this permission, the agent cannot upload profiles, and no data will appear in the console.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 30, 2026
This PCDOE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCDOE exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.