Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?

• A.Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each development team's registry.
• B.Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.
• C.Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.
• D.Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
  Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry.

Comment: *

Name: *

Email: *

Verification: *

Your team is developing a new application using a PostgreSQL database and Cloud Run. You are responsible for ensuring that all traffic is kept private on Google Cloud. You want to use managed services and follow Google-recommended best practices. What should you do?

• A.1. Enable Cloud SQL and Cloud Run in the same project.
  2. Configure a private IP address for Cloud SQL. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Configure Cloud Run to use the connector to connect to Cloud SQL.
• B.1. Install PostgreSQL on a Compute Engine virtual machine (VM), and enable Cloud Run in the same project.
  2. Configure a private IP address for the VM. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Configure Cloud Run to use the connector to connect to the VM hosting PostgreSQL.
• C.1. Use Cloud SQL and Cloud Run in different projects.
  2. Configure a private IP address for Cloud SQL. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to connect to Cloud SQL.
• D.1. Install PostgreSQL on a Compute Engine VM, and enable Cloud Run in different projects.
  2. Configure a private IP address for the VM. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to access the VM hosting PostgreSQL

Comment: *

Name: *

Email: *

Verification: *

You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.
What should you do?

• A.Use FTP to upload files.
• B.Use CPanel to upload files.
• C.Use signed URLs to upload files.
• D.Change the API to be a multipart file upload API.

Comment: *

Name: *

Email: *

Verification: *

Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the "separation of duties" principle and Google-recommended best practices. What should you do? (Choose two.)

• A.Provision Cloud KMS in its own project.
• B.Do not assign an owner to the Cloud KMS project.
• C.Provision Cloud KMS in the project where the keys are being used.
• D.Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.
• E.Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.

Comment: *

Name: *

Email: *

Verification: *

Your company has a BigQuery dataset named "Master" that keeps information about employee travel and expenses. This information is organized by employee department. That means employees should only be able to view information for their department. You want to apply a security framework to enforce this requirement with the minimum number of steps.
What should you do?

• A.Create a separate dataset for each department. Create a view with an appropriate WHERE clause to select records from a particular dataset for the specific department. Authorize this view to access records from your Master dataset. Give employees the permission to this department-specific dataset.
• B.Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.
• C.Create a dataset named Master dataset. Create a separate view for each department in the Master dataset. Give employees access to the specific view for their department.
• D.Create a dataset named Master dataset. Create a separate table for each department in the Master dataset. Give employees access to the specific table for their department.

Comment: *

Name: *

Email: *

Verification: *