You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table dat a. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

• A.Add the support team group to the roles/monitoring.viewer role
• B.Add the support team group to the roles/spanner.databaseUser role.
• C.Add the support team group to the roles/spanner.databaseReader role.
• D.Add the support team group to the roles/stackdriver.accounts.viewer role.

Comment: *

Name: *

Email: *

Verification: *

You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?

• A.Enable Audit Logs for all APIs that are related to data storage.
• B.Review the IAM permissions for any role that allows for data access.
• C.Review the Identity-Aware Proxy settings for each resource.
• D.Create a Data Loss Prevention job.

Comment: *

Name: *

Email: *

Verification: *

You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command? (Choose two.)

• A.Create a Google Cloud service account, and download the service account key. Place the key file in a folder on your machine where gcloud CLI can find it.
• B.Download your Cloud Identity user account key. Place the key file in a folder on your machine where gcloud CLI can find it.
• C.Run gcloud config set compute/zone $my_zone to set the default zone for gcloud CLI.
• D.Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.
• E.Run gcloud config set project $my_project to set the default project for gcloud CLI.

Comment: *

Name: *

Email: *

Verification: *

You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays.
You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?

• A.1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *2. Update your instances' metadata to add the following value: snapshot-retention: 30
• B.1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:-Schedule frequency: Daily-Start time: 1:00 AM - 2:00 AM-Autodelete snapshots after 30 days
• C.1. Create a Cloud Function that creates a snapshot of your instance's disk.2.Create a Cloud Function that deletes snapshots that are older than 30 days.3.Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.
• D.1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.2.Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.3.Configure the instance's crontab to execute these scripts daily at 1:00 AM.

Comment: *

Name: *

Email: *

Verification: *

You have a Bigtable instance that consists of three nodes that store personally identifiable information (PII) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company's Security Information and Event Management (SIEM) system. What should you do?

• A.- Navigate to Cloud Monitoring in the Google Cloud console, and create a custom monitoring job for the Bigtable instance to track all changes.
  - Create an alert by using webhook endpoints, with the SIEM endpoint as a receiver.
• B.- Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for the Bigtable instance.
  - Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.
• C.- Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read, Data Write and Admin Read logs for the Bigtable instance.
  - Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.
• D.- Install the Ops Agent on the Bigtable instance during configuration.
  - Create a service account with read permissions for the Bigtable instance.
  - Create a custom Dataflow job with this service account to export logs to the company's SIEM system.

Comment: *

Name: *

Email: *

Verification: *