Your team is building an application for a financial institution. The application's frontend runs on Compute Engine, and the data resides in Cloud SQL and one Cloud Storage bucket. The application will collect data containing PII, which will be stored in the Cloud SQL database and the Cloud Storage bucket. You need to secure the PII data. What should you do?

• A.1. Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
  2. Using IAM, allow only the frontend service account to access the Cloud Storage bucket
• B.1. Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
  2. Enable private access to allow the frontend to access the Cloud Storage bucket privately
• C.1. Configure a private IP address for Cloud SQL
  2. Use VPC-SC to create a service perimeter
  3. Add the Cloud SQL database and the Cloud Storage bucket to the same service perimeter
• D.1. Configure a private IP address for Cloud SQL
  2. Use VPC-SC to create a service perimeter
  3. Add the Cloud SQL database and the Cloud Storage bucket to different service perimeters

Comment: *

Name: *

Email: *

Verification: *

You are creating an App Engine application that writes a file to any user's Google Drive.
How should the application authenticate to the Google Drive API?

• A.With an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
• B.With an OAuth Client ID with delegated domain-wide authority.
• C.With the App Engine service account and https://www.googleapis.com/auth/drive.file scope that generates a signed JWT.
• D.With the App Engine service account with delegated domain-wide authority.

Comment: *

Name: *

Email: *

Verification: *

Your team is developing an application in Google Cloud that executes with user identities maintained by Cloud Identity. Each of your application's users will have an associated Pub/Sub topic to which messages are published, and a Pub/Sub subscription where the same user will retrieve published messages. You need to ensure that only authorized users can publish and subscribe to their own specific Pub/Sub topic and subscription. What should you do?

• A.Configure the application to run as a service account that has the pubsub.publisher and pubsub.subscriber roles.
• B.Bind the user identity to the pubsub.publisher and pubsub.subscriber roles at the resource level.
• C.Grant the user identity the pubsub.publisher and pubsub.subscriber roles at the project level.
• D.Grant the user identity a custom role that contains the pubsub.topics.create and pubsub.subscriptions.create permissions.

Comment: *

Name: *

Email: *

Verification: *

You are a developer that works for a local concert venue. Customers use your company's website to purchase tickets for events. You need to provide customers with immediate confirmation when a selected seat has been reserved. How should you design the ticket ordering process?

• A.Upload the seat reservation to a Cloud Storage bucket, which triggers an event to the backend service that processes the seat reservation.
• B.Submit the seat reservation in an HTTP POST request to an Application Load Balancer.
  Configure the Application Load Balancer to distribute the request to the backend service that processes the seat reservation.
• C.Add the seat reservation to a Cloud Tasks queue, which triggers Workflows to process the seat reservation.
• D.Publish the seat reservation to a Pub/Sub topic. Configure the backend service to subscribe to the topic to process the seat reservation.

Comment: *

Name: *

Email: *

Verification: *

You have an application controlled by a managed instance group. When you deploy a new version of the application, costs should be minimized and the number of instances should not increase. You want to ensure that, when each new instance is created, the deployment only continues if the new instance is healthy. What should you do?

• A.Perform a rolling-action with maxSurge set to 1, maxUnavailable set to 0.
• B.Perform a rolling-action with maxSurge set to 0, maxUnavailable set to 1
• C.Perform a rolling-action with maxHealthy set to 1, maxUnhealthy set to 0.
• D.Perform a rolling-action with maxHealthy set to 0, maxUnhealthy set to 1.

Comment: *

Name: *

Email: *

Verification: *