For this question, refer to the Dress4Win case study.
The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP). The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects. What can they do?

• A.Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
• B.Grant the operations engineers access to use Google Cloud Shell.
• C.Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
• D.Configure a VPN connection to GCP to allow SSH access to the cloud VMs.

Comment: *

Name: *

Email: *

Verification: *

Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery.
Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?

• A.Create a group per country. Add analysts to their respective country-groups. Create a single group
  `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.
• B.Create a group per country. Add analysts to their respective country-groups. Create a single group
  `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.
• C.Create a group per country. Add analysts to their respective country-groups. Create a single group
  `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country- group.
• D.Create a group per country. Add analysts to their respective country-groups. Create a single group
  `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.

Comment: *

Name: *

Email: *

Verification: *

Your company has developed a monolithic, 3-tier application to allow external users to upload and share files.
The solution cannot be easily enhanced and lacks reliability. The development team would like to re-architect the application to adopt microservices and a fully managed service approach, but they need to convince their leadership that the effort is worthwhile. Which advantage(s) should they highlight to leadership?

• A.The new approach will make it easier to decouple infrastructure from application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.
• B.The new approach will be significantly less costly, make it easier to manage the underlying infrastructure, and automatically manage the CI/CD pipelines.
• C.The process can be automated with Migrate for Compute Engine.
• D.The monolithic solution can be converted to a container with Docker. The generated container can then be deployed into a Kubernetes cluster.

Comment: *

Name: *

Email: *

Verification: *

You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.
What should you do?

• A.Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.
• B.Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.
• C.Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.
• D.Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.

Comment: *

Name: *

Email: *

Verification: *

Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

• A.Use the Admin Directory API to authenticate against the Active Directory domain controller.
• B.Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.
• C.Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.
• D.Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the onpremises AD domain controller using Google Cloud Directory Sync.

Comment: *

Name: *

Email: *

Verification: *