Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

• A.Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
• B.Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
• C.Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
• D.Create an export to the sink that saves logs from Cloud Audit to BigQuery.

Comment: *

Name: *

Email: *

Verification: *

You have a Linux server running on a custom network. There's an allow firewall rule with an IP filter of 0.0.0.0/0 with a protocol/port of tcp:22. The logs on the instance show a constant stream of attempts from different IP addresses, trying to connect via SSH. You suspect this is a brute force attack.
How might you change the firewall rule to stop this from happening and still enable access for legit users?

• A.Stop the instance.
• B.Deny all traffic to port 22.
• C.Change the IP address range in the filter to only allow known IP addresses.
• D.Change the port that SSH is running on in the instance and change the port number in the firewall rule.

Comment: *

Name: *

Email: *

Verification: *

You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs.
What should you do?

• A.Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
• B.Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
• C.Select Compute Engine. Use VM instance types that support micro bursting.
• D.Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.

Comment: *

Name: *

Email: *

Verification: *

You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible.
You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?

• A.1. Create a configuration for each project you need to manage.
  2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• B.1. Create a configuration for each project you need to manage.
  2. Use gcloud init to update the configuration values when you need to work with a non-default project
• C.1. Use the default configuration for one project you need to manage.
  2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• D.1. Use the default configuration for one project you need to manage.
  2. Use gcloud init to update the configuration values when you need to work with a non-default project.

Comment: *

Name: *

Email: *

Verification: *

Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google- recommended practices. What should you do?

• A.Grant all members of the DevOps team the role of Project Editor on the production project.
• B.Create a custom role that combines the required permissions.
  Grant the DevOps team the custom role on the production project.
• C.Grant all members of the DevOps team the role of Project Editor on the organization level.
• D.Create a custom role that combines the required permissions.
  Grant the DevOps team the custom role on the organization level.

Comment: *

Name: *

Email: *

Verification: *