You are developing a container build pipeline for an application hosted on GKE. You have the following requirements:
- Only images that are created using your build pipeline should be
deployed on your GKE cluster.
- All code and build artifacts should remain within your environment
and protected from data exfiltration.
How should you build the pipeline?

• A.1. Create a build pipeline by using Cloud Build with the default worker pool.
  2. Deploy container images to a private container registry in your VPC.
  3. Create a VPC firewall policy in your project that denies all egress and ingress traffic to public networks.
• B.1. Create a build pipeline by using Cloud Build with a private worker pool.
  2. Use VPC Service Controls to place all components and services in your CI/CD pipeline inside a security perimeter.
  3. Configure your GKE cluster to only allow container images signed by Binary Authorization.
• C.1. Create a build pipeline by using Cloud Build with a private worker pool.
  2. Configure the CI/CD pipeline to build container images and store them in Artifact Registry.
  3. Configure Artifact Registry to encrypt container images by using customer-managed encryption keys (CMEK).
• D.1. Create a build pipeline by using Cloud Build with the default worker pool.
  2. Configure the CI/CD pipeline to build container images and store them in Artifact Registry.
  3. Configure your GKE cluster to only allow container images signed by Binary Authorization.

Comment: *

Name: *

Email: *

Verification: *

You are responsible for managing the security of internal applications in your company. The applications are deployed on Cloud Run, and use Secret Manager to store passwords needed to access internal databases. Each application can cache secrets for up to 15 minutes. You need to determine how to rotate the secrets. You want to avoid application downtime. What should you do?

• A.Store the new username and password in the secret. Reference the latest version of any secret required, and cache the secret for 15 minutes.
• B.Design the applications to retrieve the Latest secret payload on application startup, and continue to use the secret for the duration of the application run.
• C.Store the new password in the secret. Reference the latest version of any secret required, and cache the secret for 15 minutes.
• D.Store the new password in the secret. Design the applications to reference a specific secret version. Change the code to reference the new version, and schedule the deployment of the application during a maintenance window.

Comment: *

Name: *

Email: *

Verification: *

You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.
Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com.
Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function's HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function. Which response header should you add?

• A.Access-Control-Allow-Origin: *
• B.Access-Control-Allow-Origin: https://fn.example.com
• C.Access-Control-Allow-origin: https://www.example.com
• D.Access-Control-Allow-Origin: https://*.example.com

Comment: *

Name: *

Email: *

Verification: *

Your API backend is running on multiple cloud providers. You want to generate reports for the network latency of your API.
Which two steps should you take? (Choose two.)

• A.Use Zipkin collector to gather data.
• B.Use Fluentd agent to gather data.
• C.Use Stackdriver Trace to generate reports.
• D.Use Stackdriver Debugger to generate report.
• E.Use Stackdriver Profiler to generate report.

Comment: *

Name: *

Email: *

Verification: *

You are supporting a business-critical application in production deployed on Cloud Run. The application is reporting HTTP 500 errors that are affecting the usability of the application. You want to be alerted when the number of errors exceeds 15% of the requests within a specific time window. What should you do?

• A.Create a Cloud Function that consumes the Cloud Monitoring API. Use Cloud Scheduler to trigger the Cloud Function daily and alert you if the number of errors is above the defined threshold.
• B.Navigate to the Cloud Run page in the Google Cloud console, and select the service from the services list. Use the Metrics tab to visualize the number of errors for that revision, and refresh the page daily.
• C.Create an alerting policy in Cloud Monitoring that alerts you if the number of errors is above the defined threshold.
• D.Create a Cloud Function that consumes the Cloud Monitoring API. Use Cloud Composer to trigger the Cloud Function daily and alert you if the number of errors is above the defined threshold.

Comment: *

Name: *

Email: *

Verification: *