You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

• A.When creating the VM via the web console, specify the service account under the 'Identity and API Access' section.
• B.Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
• C.Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
• D.Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.

Comment: *

Name: *

Email: *

Verification: *

You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?

• A.Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
• B.Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
• C.With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectl to create the DaemonSet.
• D.In the cluster's definition in Deployment Manager, add a metadata that has kube-system as key and the DaemonSet manifest as value.

Comment: *

Name: *

Email: *

Verification: *

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

• A.Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
• B.Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
• C.Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
• D.Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.

Comment: *

Name: *

Email: *

Verification: *

An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

• A.Move both projects under the same folder.
• B.Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
• C.Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
• D.Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.

Comment: *

Name: *

Email: *

Verification: *

Your manager asks you to deploy a workload to a Kubernetes cluster. You are not sure of the workload's resource requirements or how the requirements might vary depending on usage patterns, external dependencies, or other factors. You need a solution that makes cost-effective recommendations regarding CPU and memory requirements, and allows the workload to function consistently in any situation. You want to follow Google-recommended practices. What should you do?

• A.Configure the Vertical Pod Autoscaler recommendations for availability, and configure the Horizontal Pod Autoscaler for suggestions.
• B.Configure the Vertical Pod Autoscaler recommendations for availability, and configure the Cluster autoscaler for suggestions.
• C.Configure the Horizontal Pod Autoscaler for availability, and configure the Vertical Pod Autoscaler recommendations for suggestions.
• D.Configure the Horizontal Pod Autoscaler for availability, and configure the cluster autoscaler for suggestions.

Comment: *

Name: *

Email: *

Verification: *