Free Practice Questions for Google Professional Cloud DevOps Engineer Certification

    🔄 Last checked for updates February 22nd, 2026

    Study with exam-style practice questions designed to help you prepare for the Google Professional Cloud DevOps Engineer.

    Start Practicing

    Random Questions

    Practice with randomly mixed questions from all topics

    Question MixAll Topics
    FormatRandom Order

    Domain Mode

    Practice questions from a specific topic area

    Exam Information

    Exam Details

    Key information about Google Professional Cloud DevOps Engineer

    Official study guide:

    View

    level:

    Professional

    target audience:

    Individuals who implement processes and capabilities throughout the systems development lifecycle using Google-recommended methodologies and tools. They enable efficient software and infrastructure delivery while balancing reliability with delivery speed, and optimize production systems for performance and cost.

    Exam Topics & Skills Assessed

    Skills measured (from the official study guide)

    Domain 1: Bootstrapping and maintaining a Google Cloud organization

    Subdomain 1.1: Designing the overall resource hierarchy for an organization.

    Considerations include:

    - Organizing resources (e.g., application-centric, projects, folders) - Shared networking (e.g., Shared VPC, VPC Network Peering, Private Service Connect) - Multi-project monitoring and logging - Identity and Access Management (IAM) roles and organization-level policies - Creating and managing service accounts - Data residency

    Subdomain 1.2: Managing infrastructure.

    Considerations include:

    - Infrastructure-as-code tooling and managed services (e.g., Infrastructure Manager, Cloud Foundation Toolkit, Config Connector, GitOps, Terraform, Helm) - Making infrastructure changes using Google-recommended practices and blueprints - Automation with scripting (e.g., Python, Go)

    Subdomain 1.3: Designing a CI/CD architecture stack in Google Cloud, hybrid, and multi-cloud environments.

    Considerations include:

    - Continuous integration (CI) with Cloud Build - Continuous delivery (CD) with Cloud Deploy, including Kustomize and Skaffold - Artifact Registry configuration - Widely used third-party tooling (e.g., Git, Jenkins, Argo CD, Packer, kpt) - Security of CI/CD tooling

    Subdomain 1.4: Managing multiple environments (e.g., staging, production).

    Considerations include:

    - Managing ephemeral environments - Managing configuration and policy - Managing Google Kubernetes Engine (GKE) clusters across an enterprise (e.g., fleets) - Safe and secure patching and upgrading practices

    Subdomain 1.5: Enabling secure cloud development environments.

    Considerations include:

    - Configuring and managing cloud development environments (e.g., Cloud Workstations, Cloud Shell) - Bootstrapping environments with required tooling (e.g., custom images, IDE, Cloud SDK) - Leveraging AI to assist with development and operations (e.g., Gemini Code Assist, Gemini Cloud Assist, Gemini CLI)

    Domain 2: Building and implementing CI/CD pipelines, including continuous testing, for application, infrastructure, and machine learning workloads

    Subdomain 2.1: Designing pipelines.

    Considerations include:

    - CI/CD of applications and infrastructure - Artifact management with Artifact Registry - Deployment to hybrid and multi-cloud environments (e.g., GKE) - CI/CD pipeline triggers - Configuring deployment processes (e.g., approval flows)

    Subdomain 2.2: Implementing and managing pipelines.

    Considerations include:

    - Auditing and tracking deployments (e.g., Artifact Registry, Cloud Build, Cloud Deploy, Cloud Audit Logs) - Deployment strategies (e.g., canary, blue/green, rolling, traffic splitting, feature flags) and defining success metrics based on application or ML pipeline telemetry - Troubleshooting and mitigating deployment issues

    Subdomain 2.3: Managing pipeline configuration and secrets.

    Considerations include:

    - Key management (e.g., Cloud Key Management Service) - Configuration and secret management (e.g., Secret Manager, Certificate Manager, Parameter Manager, Workload Identity Federation) - Build versus runtime secret injection

    Subdomain 2.4: Securing the deployment pipeline.

    Considerations include:

    - Artifact Analysis and vulnerability scanning - Software supply chain security (e.g., Binary Authorization, Supply-chain Levels for Software Artifacts [SLSA] framework) - IAM policies based on environment

    Domain 3: Applying site reliability engineering practices

    Subdomain 3.1: Balancing change, velocity, and reliability of the service.

    Considerations include:

    - Defining SLIs (e.g., availability, latency), SLOs, and SLAs - Error budgets (e.g., Cloud Service Mesh definitions) - Opportunity cost of risk and reliability (e.g., number of “nines”)

    Subdomain 3.2: Managing service lifecycle.

    Considerations include:

    - Service management (e.g., planning, deployment, maintenance, retirement) - Capacity planning (e.g., quotas, limits, reservations, Dynamic Workload Scheduler) - Autoscaling (e.g., managed instance groups, Cloud Run, GKE)

    Subdomain 3.3: Mitigating incident impact on users.

    Considerations include:

    - Draining/redirecting traffic - Adding capacity - Rollback strategies

    Domain 4: Implementing observability practices and troubleshooting issues

    Subdomain 4.1: Instrumenting and collecting telemetry.

    Considerations include:

    - Collecting and importing logs (e.g., Ops Agent, OpenTelemetry, Cloud Audit Logs, VPC Flow Logs, Cloud Service Mesh) - Optimizing logs (e.g., filtering, sampling, exclusions, cost management, source considerations) - Collecting metrics (e.g., from applications, platforms, networking, Cloud Service Mesh, Google Cloud Managed Service for Prometheus, hybrid/multi-cloud environments) - Creating synthetic monitors to proactively probe application endpoints and workflows - Creating custom metrics, including log-based metrics

    Subdomain 4.2: Managing and analyzing logs.

    Considerations include:

    - Analyzing logs using the Logs Explorer and the Logging query language - Exporting and retaining logs (e.g., routing to BigQuery, Pub/Sub, Cloud Storage) - Handling sensitive data (e.g., using log processors to redact personally identifiable information [PII], protected health information [PHI]) - Using Gemini Cloud Assist for AI-powered log analysis

    Subdomain 4.3: Managing metrics, dashboards, and alerts.

    Considerations include:

    - Analyzing metrics using the Metrics Explorer - Managing dashboards (e.g., creating, filtering, sharing, playbooks, PromQL) - Configuring alerting and alerting policies (e.g., SLIs, SLOs, cost control) - Integrating with third-party alerting tools (e.g., webhooks, PagerDuty, Rootly) - Leveraging Gemini Cloud Assist for metrics interpretation

    Subdomain 4.4: Capturing and analyzing distributed traces.

    Considerations include:

    - Utilizing tracing frameworks (e.g., OpenTelemetry) - Analyzing trace waterfalls and spans - Correlating trace IDs with structured logs - Employing Gemini Cloud Assist for trace analysis

    Subdomain 4.5: Troubleshooting issues.

    Considerations include:

    - Infrastructure issues - CI/CD pipeline issues - Application issues - Observability issues - Performance and latency issues

    Domain 5: Optimizing performance and cost

    Subdomain 5.1: Collecting performance information in Google Cloud.

    Considerations include:

    - Application performance monitoring - Active Assist insights and recommendations

    Subdomain 5.2: Implementing FinOps practices for optimizing resource utilization and costs.

    Considerations include:

    - Observability costs - Spot virtual machines (VMs) - Optimizing resource usage for cost and efficiency - Infrastructure cost planning (e.g., committed-use discounts, sustained-use discounts, network tiers) - Leveraging Google Cloud recommenders (e.g., cost, security, performance, manageability, reliability) - Optimizing individual workload costs (e.g., GKE, Cloud Run, Compute Engine)

    Techniques & products

    Infrastructure Manager
    Cloud Foundation Toolkit
    Config Connector
    GitOps
    Terraform
    Helm
    Python
    Go
    Cloud Build
    Cloud Deploy
    Kustomize
    Skaffold
    Artifact Registry
    Git
    Jenkins
    Argo CD
    Packer
    kpt
    Cloud Workstations
    Cloud Shell
    Cloud SDK
    Gemini Code Assist
    Gemini Cloud Assist
    Gemini CLI
    Google Kubernetes Engine (GKE)
    Cloud Key Management Service
    Secret Manager
    Certificate Manager
    Parameter Manager
    Workload Identity Federation
    Artifact Analysis
    Binary Authorization
    SLSA framework
    IAM policies
    SLIs (Service Level Indicators)
    SLOs (Service Level Objectives)
    SLAs (Service Level Agreements)
    Error budgets
    Cloud Service Mesh
    Dynamic Workload Scheduler
    Managed instance groups
    Cloud Run
    Ops Agent
    OpenTelemetry
    Cloud Audit Logs
    VPC Flow Logs
    Google Cloud Managed Service for Prometheus
    Logs Explorer
    Logging query language
    BigQuery
    Pub/Sub
    Cloud Storage
    Metrics Explorer
    PromQL
    Webhooks
    PagerDuty
    Rootly
    Active Assist
    FinOps
    Spot VMs
    Google Cloud recommenders
    Compute Engine
    Canary deployments
    Blue/green deployments
    Rolling deployments
    Traffic splitting
    Feature flags
    PII (Personally Identifiable Information)
    PHI (Protected Health Information)

    CertSafari is not affiliated with, endorsed by, or officially connected to Google LLC. Full disclaimer