A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

• A.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
• B.Create a service account with an access scope. Use the access scope
  'https://www.googleapis.com/auth/cloud-platform'.
• C.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
• D.Create a service account with an access scope. Use the access scope
  'https://www.googleapis.com/auth/devstorage.write_only'.

Comment: *

Name: *

Email: *

Verification: *

You're attempting to set up a new budget with some alerts. Your team lead asked you to use last months spending as a reference for the budget amount. What's the best way to configure this budget?

• A.Use the "Last month's spend" option to allow Google Cloud to determine the budget amount.
• B.Locate the spending data from the File export; use that as the budget amount.
• C.Locate the spending data from the BigQuery export; use that as the budget amount.
• D.Look at the spending data and locate the amount; use that as the budget amount.

Comment: *

Name: *

Email: *

Verification: *

You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

• A.Review details of the myapp-service Service object and check for error messages.
• B.Review details of the myapp-deployment Deployment object and check for error messages.
• C.Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
• D.View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

Comment: *

Name: *

Email: *

Verification: *

You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI.
You need to perform the prerequisite stops. What should you do?

• A.Create a Cloud Monitoring Workspace.
• B.Create a VPC network in the project.
• C.Enable the compute googleapis.com API.
• D.Grant yourself the IAM role of Computer Admin.

Comment: *

Name: *

Email: *

Verification: *