Your application images are built using Cloud Build and pushed to Google Container Registry (GCR). You want to be able to specify a particular version of your application for deployment based on the release version tagged in source control. What should you do when you push the image?

• A.Reference the image digest in the source control tag.
• B.Use Cloud Build to include the release version tag in the application image.
• C.Supply the source control tag as a parameter within the image name.
• D.Use GCR digest versioning to match the image to the tag in source control.

Comment: *

Name: *

Email: *

Verification: *

You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?

• A.Create a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
• B.Encrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
• C.Use client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
• D.Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.

Comment: *

Name: *

Email: *

Verification: *

You support an application deployed on Compute Engine. The application connects to a Cloud SQL instance to store and retrieve dat a. After an update to the application, users report errors showing database timeout messages. The number of concurrent active users remained stable. You need to find the most probable cause of the database timeout. What should you do?

• A.Use Stackdriver Profiler to visualize the resources utilization throughout the application.
• B.Determine whether there is an increased number of connections to the Cloud SQL instance.
• C.Use Cloud Security Scanner to see whether your Cloud SQL is under a Distributed Denial of Service (DDoS) attack.
• D.Check the serial port logs of the Compute Engine instance.

Comment: *

Name: *

Email: *

Verification: *

Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?

• A.Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
• B.Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it
• C.Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
• D.Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.

Comment: *

Name: *

Email: *

Verification: *

You use a multiple step Cloud Build pipeline to build and deploy your application to Google Kubernetes Engine (GKE). You want to integrate with a third-party monitoring platform by performing a HTTP POST of the build information to a webhook. You want to minimize the development effort. What should you do?

• A.Add a new step at the end of the pipeline in Cloud Build to HTTP POST the build information to a webhook.
• B.Create a Cloud Pub/Sub push subscription to the Cloud Build cloud-builds PubSub topic to HTTP POST the build information to a webhook.
• C.Add logic to each Cloud Build step to HTTP POST the build information to a webhook.
• D.Use Stackdriver Logging to create a logs-based metric from the Cloud Buitd logs. Create an Alert with a Webhook notification type.

Comment: *

Name: *

Email: *

Verification: *