You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You cannot meet Google at one of its point-of-presence (POP) locations, and your on-premises router cannot run a Border Gateway Protocol (BGP) configuration.
Which connectivity model should you use?

• A.Direct Peering
• B.Dedicated Interconnect
• C.Partner Interconnect with a layer 2 partner
• D.Partner Interconnect with a layer 3 partner

Comment: *

Name: *

Email: *

Verification: *

You have setup a shared VPC and you have created three projects; Host Project, Service Project-1 and Service Project-2. You have created two subnets, subnet-1 in us-west1 and subnet-
2 in us-central1 in the Host Project. Only subnet-1 has been shared with Service Project -1 but when you go to VPC networks in Service Project-1 you also see subnet-2 which hasn't been shared with Service Project-1. Please select the correct option from below why is subnet-2 available to Service Project-1. Note Host Project is the Host Project in the shared VPC, Service Project-1 and Service project-2 are the Service Projects in the shared VPC.

• A.The current user has Shared VPC Admin role and with Shared VPC Admin role all the networks are available.
• B.It is a bug in Google Cloud, please report it.
• C.By default all subnets are available.
• D.Remove Shared Network admin role to the current user.

Comment: *

Name: *

Email: *

Verification: *

You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization requires using the least privilege possible.
What should you do?

• A.Grant the iam.serviceAccountUser to your user account.
• B.Grant the cloud-platform privilege to the service account for the Cloud Storage bucket.
• C.Grant the compute.instanceAdmin to your user account.
• D.Grant the read-only privilege to the service account for the Cloud Storage bucket.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.
What should you do?

• A.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to disabled, and review necessary logs.
• B.Create a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs.
• C.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to enabled, and review necessary logs.
• D.Create a Cloud Armor Policy rule that denies traffic and review necessary logs.

Comment: *

Name: *

Email: *

Verification: *

You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.
How should you provision your instances?

• A.Create a single managed instance group, specify the desired region, and select Multiple zones for the location.
• B.Create a managed instance group for each region, select Single zone for the location, and manually distribute instances across the zones in that region.
• C.Create an unmanaged instance group in a single zone, and then create an HTTP load balancer for the instance group.
• D.Create an unmanaged instance group for each zone, and manually distribute the instances across the desired zones.

Comment: *

Name: *

Email: *

Verification: *