Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?

• A.Create a tokenizer service and store only tokenized data.
• B.Create separate projects that only process credit card data.
• C.Create separate subnetworks and isolate the components that process credit card data.
• D.Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
• E.Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.

Comment: *

Name: *

Email: *

Verification: *

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment You want to advocate for the adoption of Google Cloud Deployment Manager What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

• A.Cloud Deployment Manager uses Python.
• B.Cloud Deployment Manager APIs could be deprecated in the future.
• C.Cloud Deployment Manager is unfamiliar to the company's engineers.
• D.Cloud Deployment Manager requires a Google APIs service account to run.
• E.Cloud Deployment Manager can be used to permanently delete cloud resources.
• F.Cloud Deployment Manager only supports automation of Google Cloud resources.

Comment: *

Name: *

Email: *

Verification: *

Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?

• A.Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.
• B.Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.
• C.Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.
• D.Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.

Comment: *

Name: *

Email: *

Verification: *

Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data.
What should you do?

• A.Build or leverage an OAuth-compatible access control system
• B.Build SAML 2.0 SSO compatibility into your authentication system
• C.Restrict data access based on the source IP address of the partner systems
• D.Create secondary credentials for each dealer that can be given to the trusted third party

Comment: *

Name: *

Email: *

Verification: *

You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?

• A.Supply the encryption key in a .boto configuration file. Use gsutil to upload the files.
• B.Supply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.
• C.Use gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
• D.Use gsutil to create a bucket, and use the flag --encryption-key to supply the encryption key. Use gsutil to upload the files to that bucket.

Comment: *

Name: *

Email: *

Verification: *