You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

• A.Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.
• B.Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
• C.When creating the VM via the web console, specify the service account under the 'Identity and API Access' section.
• D.Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.

Comment: *

Name: *

Email: *

Verification: *

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A.Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• B.Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• C.Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
• D.Store the database password inside the Docker image of the container, not in the YAML file.

Comment: *

Name: *

Email: *

Verification: *

You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

• A.Use Dataflow as a batch job, and configure the bucket as a data source.
• B.Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
• C.Use Cloud Functions and configure the bucket as a trigger resource.
• D.Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.

Comment: *

Name: *

Email: *

Verification: *

You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

• A.Enable the Identity Aware Proxy API on the project.
• B.Scan the bucker using the Data Loss Prevention API.
• C.Allow only a single Service Account access to read the data.
• D.Enable Data Access audit logs for the Cloud Storage API.

Comment: *

Name: *

Email: *

Verification: *

You have developed a containerized web application that will serve Internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

• A.Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
• B.Deploy the container on App Engine flexible environment with autoscaling. and set the value min_instances to zero in the app yaml
• C.Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero
• D.Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app yaml

Comment: *

Name: *

Email: *

Verification: *