You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

• A.Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
• B.Give "project owner" for web-applications appropriate roles to crm-databases- proj
• C.Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.
• D.Give "project owner" role to crm-databases-proj and the web-applications project.

Comment: *

Name: *

Email: *

Verification: *

You are about to start working on a micro-service deployment project using Google Kubernetes Engine service. The client needs everything on Google and want you to maintain both frontend and backend code on Google Cloud as well. Which service best suites this case?

• A.Cloud Source Repository
• B.Cloud Storage
• C.Google Container Registry
• D.GitHub

Comment: *

Name: *

Email: *

Verification: *

You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?

• A.Navigate to Stackdriver Logging and select resource.labels.project_id="*"
• B.Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
• C.Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
• D.Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.

Comment: *

Name: *

Email: *

Verification: *

You are creating a Kubernetes Engine cluster to deploy multiple pods inside the cluster. All container logs must be stored in BigQuery for later analysis. You want to follow Google- recommended practices. Which two approaches can you take?

• A.Turn on Stackdriver Logging during the Kubernetes Engine cluster creation.
• B.Turn on Stackdriver Monitoring during the Kubernetes Engine cluster creation.
• C.Develop a custom add-on that uses Cloud Logging API and BigQuery API. Deploy the add-on to your Kubernetes Engine cluster.
• D.Use the Stackdriver Logging export feature to create a sink to Cloud Storage. Create a Cloud Dataflow job that imports log files from Cloud Storage to BigQuery.
• E.Use the Stackdriver Logging export feature to create a sink to BigQuery. Specify a filter expression to export log records related to your Kubernetes Engine cluster only.

Comment: *

Name: *

Email: *

Verification: *

You have several users who need access to some very specific Google Cloud functionality. You'd like to follow the principle of least privilege. What's the best way to ensure these users can list Cloud Storage buckets, list BigQuery jobs, and list compute disks?

• A.Add the users to the viewer role.
• B.Use the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.
• C.Add the users to a group, apply the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.
• D.Create a custom role for this job role, add the required permissions, and add the users to the role.

Comment: *

Name: *

Email: *

Verification: *