A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *

You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

• A.Enable the Identity Aware Proxy API on the project.
• B.Scan the bucker using the Data Loss Prevention API.
• C.Allow only a single Service Account access to read the data.
• D.Enable Data Access audit logs for the Cloud Storage API.

Comment: *

Name: *

Email: *

Verification: *

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

• A.When creating the VM, use machine type n1-standard-96.
• B.When creating the VM, use Intel Skylake as the CPU platform.
• C.Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
• D.Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

Comment: *

Name: *

Email: *

Verification: *

Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

• A.Grant all members of the DevOps team the role of Project Editor on the organization level.
• B.Grant all members of the DevOps team the role of Project Editor on the production project.
• C.Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.
• D.Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.

Comment: *

Name: *

Email: *

Verification: *

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?

• A.Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.
• B.Deploy a Cloud SOL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.
• C.Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication.
• D.Deploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy.

Comment: *

Name: *

Email: *

Verification: *