Your team is building an application for a financial institution. The application's frontend runs on Compute Engine, and the data resides in Cloud SQL and one Cloud Storage bucket. The application will collect data containing PII, which will be stored in the Cloud SQL database and the Cloud Storage bucket. You need to secure the PII data. What should you do?

• A.1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
  2) Enable private access to allow the frontend to access the Cloud Storage bucket privately
• B.1) Configure a private IP address for Cloud SQL
  2) Use VPC-SC to create a service perimeter
  3) Add the Cloud SQL database and the Cloud Storage bucket to different service perimeters
• C.1) Configure a private IP address for Cloud SQL
  2) Use VPC-SC to create a service perimeter
  3) Add the Cloud SQL database and the Cloud Storage bucket to the same service perimeter
• D.1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
  2) Using IAM, allow only the frontend service account to access the Cloud Storage bucket

Comment: *

Name: *

Email: *

Verification: *

You are deploying a microservices application to Google Kubernetes Engine (GKE). The application will receive daily updates. You expect to deploy a large number of distinct containers that will run on the Linux operating system (OS). You want to be alerted to any known OS vulnerabilities in the new containers. You want to follow Google-recommended best practices. What should you do?

• A.Use the gcloud CLI to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
• B.Enable Container Analysis, and upload new container images to Artifact Registry. Review the vulnerability results before each deployment.
• C.Enable Container Analysis, and upload new container images to Artifact Registry. Review the critical vulnerability results before each deployment.
• D.Use the Container Analysis REST API to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.

Comment: *

Name: *

Email: *

Verification: *

Your code is running on Cloud Functions in project A. It is supposed to write an object in a Cloud Storage bucket owned by project B. However, the write call is failing with the error "403 Forbidden".
What should you do to correct the problem?

• A.Grant your user account the roles/storage.objectCreator role for the Cloud Storage bucket.
• B.Grant your user account the roles/iam.serviceAccountUser role for the service-PROJECTA@gcf- admin-robot.iam.gserviceaccount.com service account.
• C.Grant the [email protected] service account the roles/ storage.objectCreator role for the Cloud Storage bucket.
• D.Enable the Cloud Storage API in project B.

Comment: *

Name: *

Email: *

Verification: *

How would you define a "positive no" to a co-worker?

• A.Lead with a positive then switch to a negative, such as, "Definitely not."
• B.It's leading with "no" and not engaging in any further conversation with the customer.
• C.It is a way to correct a customer by informing them of what you can do.
• D.You say no with a positive voice inflection.

Comment: *

Name: *

Email: *

Verification: *

Your application performs well when tested locally, but it runs significantly slower when you deploy it to App Engine standard environment. You want to diagnose the problem.
What should you do?

• A.File a ticket with Cloud Support indicating that the application performs faster locally.
• B.Use Stackdriver Trace to determine which functions within the application have higher latency.
• C.Add logging commands to the application and use Stackdriver Logging to check where the latency problem occurs.
• D.Use Stackdriver Debugger Snapshots to look at a point-in-time execution of the application.

Comment: *

Name: *

Email: *

Verification: *