You are designing a chat room application that will host multiple rooms and retain the message history for each room. You have selected Firestore as your database. How should you represent the data in Firestore?

• A.Create a collection for the rooms. For each room, create a document that lists the contents of the messages
• B.Create a collection for the rooms. For each room, create a collection that contains a document for each message
• C.Create a collection for the rooms. For each room, create a document that contains a collection for documents, each of which contains a message.
• D.Create a collection for the rooms, and create a document for each room. Create a separate collection for messages, with one document per message. Each room's document contains a list of references to the messages.

Comment: *

Name: *

Email: *

Verification: *

You are working on a new application that is deployed on Cloud Run and uses Cloud Functions Each time new features are added, new Cloud Functions and Cloud Run services are deployed You use ENV variables to keep track of the services and enable interservice communication but the maintenance of the ENV variables has become difficult. You want to implement dynamic discovery in a scalable way. What should you do?

• A.Create a Service Directory Namespace Use API calls to register the services during deployment, and query during runtime.
• B.Configure your microservices to use the Cloud Run Admin and Cloud Functions APIs to query for deployed Cloud Run services and Cloud Functions in the Google Cloud project.
• C.Deploy Hashicorp Consul on a single Compute Engine Instance Register the services with Consul during deployment and query during runtime
• D.Rename the Cloud Functions and Cloud Run services endpoints using a well-documented naming

Comment: *

Name: *

Email: *

Verification: *

Your team is developing a new application using a PostgreSQL database and Cloud Run. You are responsible for ensuring that all traffic is kept private on Google Cloud. You want to use managed services and follow Google-recommended best practices. What should you do?

• A.1. Enable Cloud SQL and Cloud Run in the same project. 2. Configure a private IP address for Cloud SQL. Enable private services access. 3. Create a Serverless VPC Access connector. 4.
  Configure Cloud Run to use the connector to connect to Cloud SQL.
• B.1. Install PostgreSQL on a Compute Engine virtual machine (VM), and enable Cloud Run in the same project. 2. Configure a private IP address for the VM. Enable private services access. 3.
  Create a Serverless VPC Access connector. 4. Configure Cloud Run to use the connector to connect to the VM hosting PostgreSQL.
• C.1. Use Cloud SQL and Cloud Run in different projects. 2. Configure a private IP address for Cloud SQL. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to connect to Cloud SQL.
• D.1. Install PostgreSQL on a Compute Engine VM, and enable Cloud Run in different projects. 2.Configure a private IP address for the VM. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to access the VM hosting PostgreSQL.

Comment: *

Name: *

Email: *

Verification: *

You use Cloud Build to build and test container images prior to deploying them to Cloud Run.
Your images are stored in Artifact Registry. You need to ensure that only container images that have passed testing are deployed. You want to minimize operational overhead. What should you do?

• A.Deploy a new revision to a Cloud Run service. Assign a tag that allows access to the revision at a specific URL without serving traffic. Test that revision again. Migrate the traffic to the Cloud Run service after you confirm that the new revision is performing as expected.
• B.Enable Binary Authorization on your Cloud Run service. Create an attestation if the container image has passed all tests. Configure Binary Authorization to allow only images with appropriate attestation to be deployed to the Cloud Run service.
• C.Create a GKE cluster. Verify that all tests have passed, and then deploy the image to the GKE cluster.
• D.Configure build provenance on your Cloud Build pipeline. Verify that all the tests have passed, and then deploy the image to a Cloud Run service.

Comment: *

Name: *

Email: *

Verification: *

You are a developer at a regulated financial company and are the lead of a risk calculation application that is running on Cloud Run. Binary Authorization for Cloud Run has been enabled as an organization policy, and there is one attestor. All applications in the company are attested.
Each application's image is deployed as part of a CI/CD pipeline during a 1-hour change window at 11 PM local time. There is a new security issue that requires you to deploy a critical fix before the next change window. You have created a new image with the fix, and your manager has approved the image in an email message. What should you do?

• A.Add the image to the exempt image patterns in the Binary Authorization policy.
• B.Sign the image with your private key and ask the project admin to change the public key in the attestor.
• C.Change the organization policy to temporarily disable Binary Authorization, and deploy the image.
• D.Use the breakglass approach to deploy the image.

Comment: *

Name: *

Email: *

Verification: *