Your organization develops and tests multiple applications on Compute Engine virtual machine instances across 3 environments; Test, Staging, and Production. The separate development teams for each application require minimal access to Production but broad access in Test and Staging. You need to design the Resource Manager structure to support your organization in following least-privilege best practices. What should you do?

• A.Create one project per environment. Assign the application team members an Identity Access Management role at the project level.
• B.Create one project per environment. Group each application team member into a Google Group.
  Assign the application team's Google Group an Identity Access Management role at the project level.
• C.Create one project per environment per application. Assign the application team members an Identity Access Management role at the project level.
• D.Create one project per environment per application. Group each application team member into a Google Group. Assign the application team's Google Group an Identity Access Management role at the project level.

Comment: *

Name: *

Email: *

Verification: *

Your application is deployed in a Google Kubernetes Engine (GKE) cluster. When a new version of your application is released, your CI/CD tool updates the spec.template.spec.containers[0].image value to reference the Docker image of your new application version. When the Deployment object applies the change, you want to deploy at least 1 replica of the new version and maintain the previous replicas until the new replica is healthy.
Which change should you make to the GKE Deployment object shown below?

• A.Set the Deployment strategy to RollingUpdate with maxSurge set to 0, maxUnavailable set to 1.
• B.Set the Deployment strategy to Recreate with maxSurge set to 0, maxUnavailable set to 1.
• C.Set the Deployment strategy to Recreate with maxSurge set to 1, maxUnavailable set to 0.
• D.Set the Deployment strategy to RollingUpdate with maxSurge set to 1, maxUnavailable set to 0.

Comment: *

Name: *

Email: *

Verification: *

You are developing an application that reads credit card data from a Pub/Sub subscription. You have written code and completed unit testing. You need to test the Pub/Sub integration before deploying to Google Cloud. What should you do?

• A.Create a service to publish messages, and deploy the Pub/Sub emulator. Collect the messages from Pub/Sub in production, and publish them to the emulator.
• B.Create a service to publish messages, and deploy the Pub/Sub emulator. Publish a standard set of testing messages from the publishing service to the emulator.
• C.Create a service to publish messages to your application. Collect the messages from Pub/Sub in production, and replay them through the publishing service.
• D.Create a service to publish messages, and deploy the Pub/Sub emulator. Generate random content in the publishing service, and publish to the emulator.

Comment: *

Name: *

Email: *

Verification: *

You need to deploy a new European version of a website hosted on Google Kubernetes Engine. The current and new websites must be accessed via the same HTTP(S) load balancer's external IP address, but have different domain names. What should you do?

• A.Define a new Ingress resource with a host rule matching the new domain
• B.Modify the existing Ingress resource with a host rule matching the new domain
• C.Create a new Service of type LoadBalancer specifying the existing IP address as the loadBalancerIP
• D.Generate a new Ingress resource and specify the existing IP address as the kubernetes.io/ingress.global-static-ip-name annotation value

Comment: *

Name: *

Email: *

Verification: *

You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.
What should you do?

• A.Use FTP to upload files.
• B.Use CPanel to upload files.
• C.Use signed URLs to upload files.
• D.Change the API to be a multipart file upload API.

Comment: *

Name: *

Email: *

Verification: *