You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.
Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com. Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function's HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function. Which response header should you add?

• A.Access-Control-Allow-Origin: *
• B.Access-Control-Allow-Origin: https://*.example.com
• C.Access-Control-Allow-Origin: https://fn.example.com
• D.Access-Control-Allow-origin: https://www.example.com

Comment: *

Name: *

Email: *

Verification: *

You work for an organization that manages an online ecommerce website. Your company plans to expand across the world; however, the estore currently serves one specific region. You need to select a SQL database and configure a schema that will scale as your organization grows. You want to create a table that stores all customer transactions and ensure that the customer (CustomerId) and the transaction (TransactionId) are unique. What should you do?

• A.Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys.
  Use an incremental number for the TransactionId.
• B.Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys.
  Use a random string (UUID) for the Transactionid.
• C.Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use a random string (UUID) for the TransactionId.
• D.Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use an incremental number for the TransactionId.

Comment: *

Name: *

Email: *

Verification: *

You need to redesign the ingestion of audit events from your authentication service to allow it to handle a large increase in traffic. Currently, the audit service and the authentication system run in the same Compute Engine virtual machine. You plan to use the following Google Cloud tools in the new architecture:
Multiple Compute Engine machines, each running an instance of the authentication service Multiple Compute Engine machines, each running an instance of the audit service Pub/Sub to send the events from the authentication services.
How should you set up the topics and subscriptions to ensure that the system can handle a large volume of messages and can scale efficiently?

• A.Create one Pub/Sub topic. Create one pull subscription to allow the audit services to share the messages.
• B.Create one Pub/Sub topic. Create one pull subscription per audit service instance to allow the services to share the messages.
• C.Create one Pub/Sub topic. Create one push subscription with the endpoint pointing to a load balancer in front of the audit services.
• D.Create one Pub/Sub topic per authentication service. Create one pull subscription per topic to be used by one audit service.
• E.Create one Pub/Sub topic per authentication service. Create one push subscription per topic, with the endpoint pointing to one audit service.

Comment: *

Name: *

Email: *

Verification: *

You support an application that uses the Cloud Storage API. You review the logs and discover multiple HTTP 503 Service Unavailable error responses from the API. Your application logs the error and does not take any further action. You want to implement Google-recommended retry logic to improve success rates.
Which approach should you take?

• A.Retry the failures in batch after a set number of failures is logged.
• B.Retry each failure at a set time interval up to a maximum number of times.
• C.Retry each failure at increasing time intervals up to a maximum number of tries.
• D.Retry each failure at decreasing time intervals up to a maximum number of tries.

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the HipLocal case study.
HipLocal's application uses Cloud Client Libraries to interact with Google Cloud. HipLocal needs to configure authentication and authorization in the Cloud Client Libraries to implement least privileged access for the application. What should they do?

• A.Use the default compute service account to interact with Google Cloud.
• B.Create a service account for the application. Export and deploy the private key for the application. Use the service account to interact with Google Cloud.
• C.Create a service account for the application and for each Google Cloud API used by the application.
  Export and deploy the private keys used by the application. Use the service account with one Google Cloud API to interact with Google Cloud.
• D.Create an API key. Use the API key to interact with Google Cloud.

Comment: *

Name: *

Email: *

Verification: *