You want to create a private connection between your instances on Compute Engine and your on-premises data center. You require a connection of at least 20 Gbps. You want to follow Google-recommended practices.
How should you set up the connection?

• A.Create a VPC and connect it to your on-premises data center using Dedicated Interconnect.
• B.Create a VPC and connect it to your on-premises data center using a single Cloud VPN.
• C.Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises data center using Dedicated Interconnect.
• D.Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises datacenter using a single Cloud VPN.

Comment: *

Name: *

Email: *

Verification: *

Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

• A.The effective policy is determined only by the policy set at the node
• B.The effective policy is the policy set at the node and restricted by the policies of its ancestors
• C.The effective policy is the union of the policy set at the node and policies inherited from its ancestors
• D.The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

Comment: *

Name: *

Email: *

Verification: *

You are designing an application for use only during business hours. For the minimum viable product release, you'd like to use a managed product that automatically "scales to zero" so you don't incur costs when there is no activity.
Which primary compute resource should you choose?

• A.Cloud Functions
• B.Compute Engine
• C.Kubernetes Engine
• D.AppEngine flexible environment

Comment: *

Name: *

Email: *

Verification: *

You are designing a mobile chat application. You want to ensure people cannot spoof chat messages, by providing a message were sent by a specific user.
What should you do

• A.Tag messages client side with the originating user identifier and the destination user.
• B.Encrypt the message client side using block-based encryption with a shared key.
• C.Use public key infrastructure (PKI) to encrypt the message client side using the originating user's private key.
• D.Use a trusted certificate authority to enable SSL connectivity between the client application and the server.

Comment: *

Name: *

Email: *

Verification: *

The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP).
The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects.
What can they do?

• A.Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
• B.Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
• C.Grant the operations engineer access to use Google Cloud Shell.
• D.Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.

Comment: *

Name: *

Email: *

Verification: *