Your company just finished a rapid lift and shift to Google Compute Engine for your compute needs. You have another 9 months to design and deploy a more cloud-native solution. Specifically, you want a system that is no-ops and auto-scaling.
Which two compute products should you choose? Choose 2 answers.

• A.Compute Engine with containers
• B.Google Container Engine with containers
• C.Google App Engine Standard Environment
• D.Compute Engine with custom instance types
• E.Compute Engine with managed instance groups

Comment: *

Name: *

Email: *

Verification: *

You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

• A.In the source code
• B.In an environment variable
• C.In a secret management system
• D.In a config file that has restricted access through ACLs

Comment: *

Name: *

Email: *

Verification: *

Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?

• A.Create a tokenizer service and store only tokenized data.
• B.Create separate projects that only process credit card data.
• C.Create separate subnetworks and isolate the components that process credit card data.
• D.Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
• E.Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.

Comment: *

Name: *

Email: *

Verification: *

You are monitoring Google Kubernetes Engine (GKE) clusters in a Cloud Monitoring workspace. As a Site Reliability Engineer (SRE), you need to triage incidents quickly. What should you do?

• A.Navigate the predefined dashboards in the Cloud Monitoring workspace, and then add metrics and create alert policies.
• B.Navigate the predefined dashboards in the Cloud Monitoring workspace, create custom metrics, and install alerting software on a Compute Engine instance.
• C.Write a shell script that gathers metrics from GKE nodes, publish these metrics to a Pub/Sub topic, export the data to BigQuery, and make a Data Studio dashboard.
• D.Create a custom dashboard in the Cloud Monitoring workspace for each incident, and then add metrics and create alert policies.

Comment: *

Name: *

Email: *

Verification: *

Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Kubernetes Engine for workload orchestration. Parts of your architecture must also be PCI DSScompliant.
Which of the following is most accurate?

• A.App Engine is the only compute platform on GCP that is certified for PCI DSS hosting.
• B.Kubernetes Engine cannot be used under PCI DSS because it is considered shared hosting.
• C.Kubernetes Engine and GCP provide the tools you need to build a PCI DSS-compliant environment.
• D.All Google Cloud services are usable because Google Cloud Platform is certified PCI-compliant.

Comment: *

Name: *

Email: *

Verification: *