You are designing an application that consists of several microservices. Each microservice has its own RESTful API and will be deployed as a separate Kubernetes Service. You want to ensure that the consumers of these APIs aren't impacted when there is a change to your API, and also ensure that third-party systems aren't interrupted when new versions of the API are released.
How should you configure the connection to the application following Google-recommended best practices?

• A.Use an Ingress that uses the API's URL to route requests to the appropriate backend.
• B.Leverage a Service Discovery system, and connect to the backend specified by the request.
• C.Use multiple clusters, and use DNS entries to route requests to separate versioned backends.
• D.Combine multiple versions in the same service, and then specify the API version in the POST request.

Comment: *

Name: *

Email: *

Verification: *

You have containerized a legacy application that stores its configuration on an NFS share. You need to deploy this application to Google Kubernetes Engine (GKE) and do not want the application serving traffic until after the configuration has been retrieved. What should you do?

• A.Use the gsutil utility to copy files from within the Docker container at startup, and start the service using an ENTRYPOINT script.
• B.Create a PersistentVolumeClaim on the GKE cluster. Access the configuration files from the volume, and start the service using an ENTRYPOINT script.
• C.Use the COPY statement in the Dockerfile to load the configuration into the container image. Verify that the configuration is available, and start the service using an ENTRYPOINT script.
• D.Add a startup script to the GKE instance group to mount the NFS share at node startup. Copy the configuration files into the container, and start the service using an ENTRYPOINT script.

Comment: *

Name: *

Email: *

Verification: *

You want to upload files from an on-premises virtual machine to Google Cloud Storage as part of a data migration. These files will be consumed by Cloud DataProc Hadoop cluster in a GCP environment.
Which command should you use?

• A.gsutil cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• B.gcloud cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• C.hadoop fs cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• D.gcloud dataproc cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/

Comment: *

Name: *

Email: *

Verification: *

You are designing an application that shares PDF files containing time-sensitive information with users. The PDF files are saved in Cloud Storage. You need to provide secure access to the files.
You have the following requirements:
- Users should only have access to files that they are allowed to view.
- Users should be able to request to read, write, or delete the PDF
files for 24 hours.
Not all users of the application have a Google account. How should you provide access to data objects?

• A.Configure the application to generate signed URLs with an expiration time of 24 hours. Share the signed URLs with users. Attach the signed URL to the PDF files that users require access to.
• B.Provide users with the Service Account Token Creator IAM role to impersonate the application's service account. Assign the Cloud Storage User IAM role to the application's service account to access the Cloud Storage bucket. Rotate the application's service account key every 24 hours.
• C.Generate a service account that grants access to the POF files. Configure the application to provide users with a download link to the service account's key file. Set an expiration time of 24 hours to the service account Keys. Instruct users to authenticate by using the service account key file.
• D.Assign the Storage Object User IAM role to users that request access to the PDF files. Set an IAM condition on the role to expire after 24 hours.

Comment: *

Name: *

Email: *

Verification: *

You have an application written in Python running in production on Cloud Run. Your application needs to read/write data stored in a Cloud Storage bucket in the same project. You want to grant access to your application following the principle of least privilege. What should you do?

• A.Create a user-managed service account with a custom Identity and Access Management (IAM) role.
• B.Create a user-managed service account with the Storage Admin Identity and Access Management (IAM) role.
• C.Create a user-managed service account with the Project Editor Identity and Access Management (IAM) role.
• D.Use the default service account linked to the Cloud Run revision in production.

Comment: *

Name: *

Email: *

Verification: *