You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?

• A.Use gcloud to create a key file for the service account that has appropriate permissions.
• B.Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
• C.Use service account credentials in your on-premises application.
• D.Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.

Comment: *

Name: *

Email: *

Verification: *

You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

• A.Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
• B.Use Cloud Functions and configure the bucket as a trigger resource.
• C.Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
• D.Use Dataflow as a batch job, and configure the bucket as a data source.

Comment: *

Name: *

Email: *

Verification: *

You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic.
You want to ensure that the available capacity does not decrease during the deployment. What should you do?

• A.Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
• B.Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
• C.Create a new managed instance group with an updated instance template.
  Add the group to the backend service for the load balancer.
  When all instances in the new managed instance group are healthy, delete the old managed instance group.
• D.Create a new instance template with the new application version.
  Update the existing managed instance group with the new instance template.
  Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.

Comment: *

Name: *

Email: *

Verification: *

You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?

• A.Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
• B.Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.
• C.Create a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
• D.Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.

Comment: *

Name: *

Email: *

Verification: *

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *