Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery.
Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?

• A.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.
• B.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.
• C.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.
• D.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country- group.

Comment: *

Name: *

Email: *

Verification: *

Your company has a Google Cloud project that uses BigQuery for data warehousing They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should they do?

• A.Configure Private Google Access.
• B.Configure VPC Service Controls and configure Private Google Access.
• C.Perform the following tasks:
  1) Create a service account.
  2) Give the BigQuery JobUser role and Storage Reader role to the service account.
  3) Remove all other IAM access from the project.
• D.Configure Private Google Access for on-premises only.

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the TerramEarth case study. You are asked to design a new architecture for the ingestion of the data of the 200,000 vehicles that are connected to a cellular network. You want to follow Google-recommended practices.
Considering the technical requirements, which components should you use for the ingestion of the data?

• A.Google Kubernetes Engine with an SSL Ingress
• B.Cloud IoT Core with public/private key pairs
• C.Compute Engine with project-wide SSH keys
• D.Compute Engine with specific SSH keys

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the database workloads for your company, Mountkirk Games. Considering the business and technical requirements, what should you do?

• A.Use Cloud SQL for time series data, and use Cloud Bigtable for historical data queries.
• B.Use Cloud SQL to replace MySQL, and use Cloud Spanner for historical data queries.
• C.Use Cloud Bigtable to replace MySQL, and use BigQuery for historical data queries.
• D.Use Cloud Bigtable for time series data, use Cloud Spanner for transactional data, and use BigQuery for historical data queries.

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the Dress4Win case study.
At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center. How should he proceed?

• A.Create a cron script using gsutil to copy the files to a Coldline Storage bucket.
• B.Create a cron script using gsutil to copy the files to a Regional Storage bucket.
• C.Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.
• D.Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.

Comment: *

Name: *

Email: *

Verification: *