Your company has a BigQuery dataset named "Master" that keeps information about employee travel and expenses. This information is organized by employee department. That means employees should only be able to view information for their department. You want to apply a security framework to enforce this requirement with the minimum number of steps.
What should you do?

• A.Create a separate dataset for each department. Create a view with an appropriate WHERE clause to select records from a particular dataset for the specific department. Authorize this view to access records from your Master dataset. Give employees the permission to this department-specific dataset.
• B.Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.
• C.Create a dataset named Master dataset. Create a separate view for each department in the Master dataset. Give employees access to the specific view for their department.
• D.Create a dataset named Master dataset. Create a separate table for each department in the Master dataset. Give employees access to the specific table for their department.

Comment: *

Name: *

Email: *

Verification: *

You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?

• A.Cloud Amor
• B.Stackdriver Debugger
• C.Cloud Security Scanner
• D.Stackdriver Error Reporting

Comment: *

Name: *

Email: *

Verification: *

Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google. What should you do?

• A.Use Network Policies to block traffic between applications.
• B.Use an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.
• C.Install Istio, enable proxy injection on your application namespace, and then enable mTLS.
• D.Define Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.

Comment: *

Name: *

Email: *

Verification: *

You have an application controlled by a managed instance group. When you deploy a new version of the application, costs should be minimized and the number of instances should not increase. You want to ensure that, when each new instance is created, the deployment only continues if the new instance is healthy. What should you do?

• A.Perform a rolling-action with maxSurge set to 1, maxUnavailable set to 0.
• B.Perform a rolling-action with maxSurge set to 0, maxUnavailable set to 1
• C.Perform a rolling-action with maxHealthy set to 1, maxUnhealthy set to 0.
• D.Perform a rolling-action with maxHealthy set to 0, maxUnhealthy set to 1.

Comment: *

Name: *

Email: *

Verification: *

This architectural diagram depicts a system that streams data from thousands of devices. You want to ingest data into a pipeline, store the data, and analyze the data using SQL statements. Which Google Cloud services should you use for steps 1, 2, 3, and 4?

• A.1) Pub/Sub
  2) Dataflow
  3) Firestore
  4) BigQuery
• B.1) Pub/Sub
  2) Dataflow
  3) BigQuery
  4) Firestore
• C.1) App Engine
  2) Pub/Sub
  3) BigQuery
  4) Firestore
• D.1) Dataflow
  2) Pub/Sub
  3) Firestore
  4) BigQuery

Comment: *

Name: *

Email: *

Verification: *