NEW QUESTION 1
Which step must be taken to enable centralized logging in a Kubernetes environment?

• A. No steps need to be take
• B. The master node automatically aggregates logs from all worker nodes and stores them on the specified persistent volume.
• C. Create a CustomResourceDefinition in each deployment that specifies the IP or names the log collector.
• D. Deploy a sidecar node that aggregates logs from the entire cluster.
• E. Create a DaemonSet that deploys a container with a logging agent on every node in the cluster.

Answer: C

NEW QUESTION 2
Which method is a safe way to provide a username/password combination to an application running as a service in a Docker container?

• A. encode the value with base64 in a secure DNS CTEXT entry
• B. as an environment variable in the Dockerfile
• C. Docker environment variable
• D. Docker secrets

Answer: D

NEW QUESTION 3
When DevOps practices are integrated into an existing organization, which two characteristics are positive indicators of DevOps maturity? (Choose two.)

• A. mean time between success
• B. mean time to recover
• C. cone testing
• D. change lead time
• E. age of codebase

Answer: BD

NEW QUESTION 4
A DevOps engineer must validate the working state of the network before implementing a CI/CD pipeline model. Which configuration management tool is designed to accomplish this?

• A. Jenkins
• B. Genie CLI
• C. Travis CI
• D. Python YAML data libraries

Answer: A

NEW QUESTION 5
The E-commerce application is being monitored using AppDynamics. AppDynamics has noticed that the application response has degraded and has identified some thread contention that might be the cause of the delays.
Where in the interface does AppDynamics bring this to your attention?

• A. Potential Issues section of an individual transaction
• B. Transaction Score graph of a business transaction
• C. Code Deadlock section of the Event List
• D. Slow Calls and Errors tab of the application

Answer: A

NEW QUESTION 6
Which Kubernetes object is used to create a ClusterIP or NodePort?

• A. service
• B. pod
• C. deployment
• D. loadbalancer

Answer: A

NEW QUESTION 7
A DevOps engineering wants to build an application implementation based on the CI/CD pipeline model. Which service should be used to provide hosted continuous service for open and private projects?

• A. Ansible
• B. pyATS
• C. Genie CLI
• D. Travis CI

Answer: D

NEW QUESTION 8
What is as responsibility for teams running private cloud servers that is less of a concern when running in the public cloud?

• A. cost
• B. metrics and monitoring
• C. hardware maintenance
• D. credentials management

Answer: D

NEW QUESTION 9
What are two reasons a Docker golden image should be updated? (Choose two.)

• A. when there is a change to a username or password in the Docker secrets
• B. when the application has a new release
• C. when a fix for a security vulnerability is released
• D. when a change is needed to an environment variable in the Dockerfile
• E. when the base image is nearing the end of life

Answer: BC

NEW QUESTION 10
Which two characteristics of a build tool that is used in an automated build pipeline? (Choose two.)

• A. It runs unit tests against code that is committed.
• B. It builds your software on the production environment.
• C. It builds your software when changes are committed.
• D. It builds your software every 500 milliseconds.
• E. It must have a plug-in for Puppet and Maven.

Answer: AC

NEW QUESTION 11
How does eliminating hardcoded or default passwords help to secure an environment?

• A. helps by enforcing your password in a repository and storing it in a secure vault
• B. helps to manage passwords centrally
• C. helps penetration testing team to focus on other issues more efficiently
• D. helps by removing back doors in your environments

Answer: A

NEW QUESTION 12
Which two practices help make the security of an application a more integral part of the software development lifecycle? (Choose two.)

• A. Add a step to the CI/CD pipeline that runs a dynamic code analysis tool during the pipeline execution.
• B. Add a step to the CI/CD pipeline that runs a static code analysis tool during the pipeline execution.
• C. Use only software modules that are written by the internal team.
• D. Add a step to the CI/CD pipeline to modify the release plan so that updated versions of the software are made available more often.
• E. Ensure that the code repository server has enabled drive encryption and stores the keys on a Trusted Platform Module or Hardware Security Module.

Answer: AE

NEW QUESTION 13
A company has experienced serious growth and the hosted applications are getting more and more hits. Based on the increased work load, applications have started to show signs of reduced performance, which is affecting the user experience.
Which two server metrics should be tracked to ensure that the customer experience remains within acceptable limits? (Choose two.)

• A. application feature sprawl
• B. CPU peak usage
• C. CPU average usage
• D. microservices count
• E. CPU frequency

Answer: BC

NEW QUESTION 14
A DevOps engineer is supporting a containerized application with multiple components running across the Kubernetes cluster. Metrics from the container (CPU and memory) and application (requests per second and heap size) are being collected by Prometheus and displayed with Grafana. Users report transaction timeout problems with the application, but the metric graphs all look within normal levels.
Which type of failure would prevent the engineer from seeing the problem using the captured metrics?

• A. Grafana has lost connectivity to Prometheus, which causes graphs to display only the cached data.
• B. CPU and memory metrics from Kubernetes nodes are not accurate due to the way that containers share resources.
• C. Some containers are crashing regularly and being restarted automatically by Kubernetes.
• D. The metricbeat agent has crashed and is no longer sending new data to Prometheus, so the metrics are not updating.

Answer: D

NEW QUESTION 15
ConfigMap keys have been mapped to different file names using the volumes.configMap.items field. What is the result if a wrong ConfigMap key is specified?

• A. The default path is not used.
• B. The volume is not created.
• C. The volume is created.
• D. The volume is created with errors.

Answer: A

NEW QUESTION 16
......