You want to apply a new Cloud Armor policy to an application that is deployed in Google Kubernetes Engine (GKE). You want to find out which target to use for your Cloud Armor policy.
Which GKE resource should you use?

• A.GKE Node
• B.GKE Pod
• C.GKE Cluster
• D.GKE Ingress

Comment: *

Name: *

Email: *

Verification: *

You created a VPC network named Retail in auto mode. You want to create a VPC network named Distribution and peer it with the Retail VPC.
How should you configure the Distribution VPC?

• A.Create the Distribution VPC in auto mode.
  Peer both the VPCs via network peering.
• B.Create the Distribution VPC in custom mode.
  Use the CIDR range 10.0.0.0/9. Create the necessary subnets, and then peer them via network peering.
• C.Create the Distribution VPC in custom mode.
  Use the CIDR range 10.128.0.0/9.
  Create the necessary subnets, and then peer them via network peering.
• D.Rename the default VPC as "Distribution" and peer it via network peering.

Comment: *

Name: *

Email: *

Verification: *

You need to create a GKE cluster in an existing VPC that is accessible from on-premises. You must meet the following requirements:
* IP ranges for pods and services must be as small as possible.
* The nodes and the master must not be reachable from the internet.
* You must be able to use kubectl commands from on-premises subnets to manage the cluster.
How should you create the GKE cluster?

• A.* Create a private cluster that uses VPC advanced routes.
  * Set the pod and service ranges as /24.
  * Set up a network proxy to access the master.
• B.* Create a VPC-native GKE cluster using GKE-managed IP ranges.
  * Set the pod IP range as /21 and service IP range as /24.
  * Set up a network proxy to access the master.
• C.* Create a VPC-native GKE cluster using user-managed IP ranges.
  * Enable a GKE cluster network policy, set the pod and service ranges as /24.
  * Set up a network proxy to access the master.
  * Enable master authorized networks.
• D.* Create a VPC-native GKE cluster using user-managed IP ranges.
  * Enable privateEndpoint on the cluster master.
  * Set the pod and service ranges as /24.
  * Set up a network proxy to access the master.
  * Enable master authorized networks.

Comment: *

Name: *

Email: *

Verification: *

You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost-efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

• A.Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.
• B.Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.
• C.Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.
• D.Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.

Comment: *

Name: *

Email: *

Verification: *

You are a admin at XYZ organization. Few of your team members need to use BigQuery Data Transfer Service for Amazon S3 . They want to automatically schedule and manage recurring load jobs from Amazon S3 into BigQuery, they want to run the transfer job every week. They have, Amazon S3 URI for the source data, access key ID , secret access key and Read permission on the data source . What necessary permissions are required for the transfer job creators in BigQuery .

• A.bigquery.transfers.update and bigquery.datasets.update
• B.bigquery.transfers.update and bigquery.transfers.get
• C.bigquery.transfer.get and bigquery.data.sets.update
• D.bigquery.jobs.create and bigquery.transfers.get

Comment: *

Name: *

Email: *

Verification: *