Your team has created an application that is hosted on a Google Kubernetes Engine (GKE) cluster You need to connect the application to a legacy REST service that is deployed in two GKE clusters in two different regions. You want to connect your application to the legacy service in a way that is resilient and requires the fewest number of steps You also want to be able to run probe-based health checks on the legacy service on a separate port How should you set up the connection?

• A.Use Traffic Director with a sidecar proxy to connect the application to the service.
• B.Use a proxyless Traffic Director configuration to connect the application to the service.
• C.Configure the legacy service's firewall to allow health checks originating from the proxy.
• D.Configure the legacy service's firewall to allow health checks originating from the application.
• E.Configure the legacy service's firewall to allow health checks originating from the Traffic Director control plane.

Comment: *

Name: *

Email: *

Verification: *

You are designing a microservices application on GKE that will expose a public API to users.
Users will interact with the application by using OAuth 2.0, and illegitimate requests should receive a 403 response code. You need the API to be resilient against distributed denial of service (DDoS) attacks and critical security risks such as SQL injection (SQLi) and cross-site scripting (XSS). You want to design the application's architecture while following Google- recommended practices. What should you do?

• A.Install Service Mesh in your GKE cluster. Configure Service Mesh user authentication to integrate the service hosted on GKE by using an OpenID Connect-compliant identity provider. Expose the application externally by using an Istio Ingress Gateway. Use VPC firewall rules to restrict Ingress traffic to the Ingress gateway.
• B.Run an Apache HTTP server on Cloud Run to expose a service with a public IP address.
  Configure the Apache HTTP server as a reverse proxy to only forward valid requests to the API hosted on GKE.
• C.Use an external Application Load Balancer with Cloud Armor. Integrate Cloud Armor with reCAPTCHA Enterprise. Configure the load balancer to forward traffic to the application hosted on GKE.
• D.Use an external Application Load Balancer with Cloud Armor, and configure the load balancer to forward requests to Apigee to check the validity of the API requests. Configure GKE as the application's backend.

Comment: *

Name: *

Email: *

Verification: *

Your company plans to expand their analytics use cases. One of the new use cases requires your data analysts to analyze events using SQL on a near real-time basis. You expect rapid growth and want to use managed services as much as possible. What should you do?

• A.Create a Kafka instance on a large Compute Engine instance. Stream your events from the source into a Kafka pipeline. Leverage Cloud Dataflow to ingest these events into Cloud Storage.
• B.Create a Cloud Pub/Sub topic and a subscription. Stream your events from the source into the Pub/Sub topic. Leverage Cloud Dataflow to ingest these events into Cloud Storage.
• C.Create a Cloud Pub/Sub topic and a subscription. Stream your events from the source into the Pub/Sub topic. Leverage Cloud Dataflow to ingest these events into BigQuery.
• D.Create a Cloud Pub/Sub topic and a subscription. Stream your events from the source into the Pub/Sub topic. Leverage Cloud Dataflow to ingest these events into Cloud Datastore.

Comment: *

Name: *

Email: *

Verification: *

You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.
Which commands should you run?

• A.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS
• B.gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server
• C.gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS
• D.gcloud compute instances add-access-config ${NAME}-backend-instance-1

Comment: *

Name: *

Email: *

Verification: *

You are developing a scalable web application for internal users. Your organization uses Google Workspace. You need to set up authentication to the application for the users, and then deploy the application on Google Cloud. You plan to use cloud-native features, and you want to minimize infrastructure management effort. What should you do? (Choose two.)

• A.Create a Compute Engine VM, configure a web server, and deploy the application in a VPC.
• B.Containerize the application, and deploy it as a Cloud Run service.
• C.Configure Cloud SQL database with a table containing the users and password hashes. Add an authentication screen to ensure that only internal users can access the application.
• D.Configure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application.
• E.Configure Identity Aware Proxy, and grant the roles/iap.tunnelResourceAccessor IAM role to the users that need to access the application.

Comment: *

Name: *

Email: *

Verification: *