You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

• A.Add the support team group to the roles/monitoring.viewer role
• B.Add the support team group to the roles/spanner.databaseUser role.
• C.Add the support team group to the roles/spanner.databaseReader role.
• D.Add the support team group to the roles/stackdriver.accounts.viewer role.

Comment: *

Name: *

Email: *

Verification: *

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.Use the command gcloud projects get-iam-policy to view the current role assignments.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.In the console, validate which SSH keys have been stored as project-wide keys.
• D.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.

Comment: *

Name: *

Email: *

Verification: *

What is the gcloud command to set default zone for compute engine server using gcloud cli?

• A.gcloud config set compute/zone us-east-1
• B.gcloud config configurations set compute/zone us-east-1a
• C.gcloud config set compute/zone us-east1-a
• D.gcloud defaults set compute/zone us-east-1

Comment: *

Name: *

Email: *

Verification: *

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling.
What should you do?

• A.Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B.Tag all the instances with the same network tag.
  Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• C.Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• D.Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Comment: *

Name: *

Email: *

Verification: *

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

• A.Create a health check on port 443 and use that when creating the Managed Instance Group.
• B.Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
• C.In the Instance Template, add the label `health-check'.
• D.In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Comment: *

Name: *

Email: *

Verification: *