Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

• A.Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.
• B.Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• C.Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• D.Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

Comment: *

Name: *

Email: *

Verification: *

You recently developed an application that monitors a large number of stock prices. You need to configure Pub/Sub to receive a high volume messages and update the current stock price in a single large in-memory database. A downstream service needs the most up-to-date prices in the in-memory database to perform stock trading transactions. Each message contains three pieces or information:
- Stock symbol
- Stock price
- Timestamp for the update
How should you set up your Pub/Sub subscription?

• A.Create a pull subscription with exactly-once delivery enabled.
• B.Create a push subscription with both ordering and exactly-once delivery turned off.
• C.Create a push subscription with exactly-once delivery enabled.
• D.Create a pull subscription with both ordering and exactly-once delivery turned off.

Comment: *

Name: *

Email: *

Verification: *

Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?

• A.Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.
• B.Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.
• C.Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.
• D.Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.

Comment: *

Name: *

Email: *

Verification: *

You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

• A.Use the service account attached to the GKE node.
• B.Enable Workload Identity in the cluster via the gcloud command-line tool.
• C.Access the Google service account keys from a secret management service.
• D.Store the Google service account keys in a central secret management service.
• E.Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

Comment: *

Name: *

Email: *

Verification: *

Your company has deployed a new API to a Compute Engine instance. During testing, the API is not behaving as expected. You want to monitor the application over 12 hours to diagnose the problem within the application code without redeploying the application. Which tool should you use?

• A.Cloud Trace
• B.Cloud Monitoring
• C.Cloud Debugger logpoints
• D.Cloud Debugger snapshots

Comment: *

Name: *

Email: *

Verification: *