An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

• A.Move both projects under the same folder.
• B.Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
• C.Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
• D.Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name. Share the folder with the IoT team.

Comment: *

Name: *

Email: *

Verification: *

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

• A.View System Event Logs in Stackdriver. Search for the user's email as the principal.
• B.View System Event Logs in Stackdriver. Search for the service account associated with the user.
• C.View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
• D.View the Admin Activity log in Stackdriver. Search for the service account associated with the user.

Comment: *

Name: *

Email: *

Verification: *

You have files in a Cloud Storage bucket that you need to share with your suppliers. You want to restrict the time that the files are available to your suppliers to 1 hour. You want to follow Google recommended practices. What should you do?

• A.Create a service account with just the permissions to access files in the bucket. Create a JSON key for the service account. Execute the command gsutil signurl -m 1h gs:///*.
• B.Create a service account with just the permissions to access files in the bucket. Create a JSON key for the service account. Execute the command gsutil signurl -d 1h gs:///**.
• C.Create a service account with just the permissions to access files in the bucket. Create a JSON key for the service account. Execute the command gsutil signurl -p 60m gs:///.
• D.Create a JSON key for the Default Compute Engine Service Account. Execute the command gsutil signurl -t 60m gs:///***

Comment: *

Name: *

Email: *

Verification: *

You've finally been given a new laptop, but you need to install all of the tools you need. You already installed the Cloud SDK, but none of the commands seem to be working correctly. What step did you likely forget?

• A.gcloud application_init
• B.gcloud init
• C.gcloud config_list
• D.gcloud config list

Comment: *

Name: *

Email: *

Verification: *

Your engineers have asked you to set up a subnet with the largest IP address range possible. Which of the following ranges would work best?

• A.192.168.0.0/16
• B.10.0.0.0/32
• C.0.0.0.0/0
• D.10.0.0.0/8

Comment: *

Name: *

Email: *

Verification: *