You create multiple Compute Engine virtual machine instances to be used at TFTP servers.
Which type of load balancer should you use?

• A.HTTP(S) load balancer
• B.TCP proxy load balancer
• C.Network load balancer
• D.SSL proxy load balancer

Comment: *

Name: *

Email: *

Verification: *

You want to implement an IPSec tunnel between your on-premises network and a VPC via Cloud VPN. You need to restrict reachability over the tunnel to specific local subnets, and you do not have a device capable of speaking Border Gateway Protocol (BGP).
Which routing option should you choose?

• A.Dynamic routing using Cloud Router
• B.Route-based routing using default traffic selectors
• C.Policy-based routing using a custom local traffic selector
• D.Policy-based routing using the default local traffic selector

Comment: *

Name: *

Email: *

Verification: *

Your company is working with a partner to provide a solution for a customer. Both your company and the partner organization are using GCP. There are applications in the partner's network that need access to some resources in your company's VPC. There is no CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without compromising the security? (Choose two.)

• A.VPC peering
• B.Shared VPC
• C.Dedicated Interconnect
• D.Cloud NAT
• E.Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

You have an application that is running in a managed instance group. Your development team has released an updated instance template which contains a new feature which was not heavily tested. You want to minimize impact to users if there is a bug in the new template.
How should you update your instances?

• A.Manually patch some of the instances, and then perform a rolling restart on the instance group.
• B.Using the new instance template, perform a rolling update across all instances in the instance group. Verify the new feature once the rollout completes.
• C.Deploy a new instance group and canary the updated template in that group. Verify the new feature in the new canary instance group, and then update the original instance group.
• D.Perform a canary update by starting a rolling update and specifying a target size for your instances to receive the new template. Verify the new feature on the canary instances, and then roll forward to the rest of the instances.

Comment: *

Name: *

Email: *

Verification: *

You have created a firewall with rules that only allow traffic over HTTP, HTTPS, and SSH ports. While testing, you specifically try to reach the server over multiple ports and protocols; however, you do not see any denied connections in the firewall logs. You want to resolve the issue.
What should you do?

• A.Enable logging on the default Deny Any Firewall Rule.
• B.Enable logging on the VM Instances that receive traffic.
• C.Create a logging sink forwarding all firewall logs with no filters.
• D.Create an explicit Deny Any rule and enable logging on the new rule.

Comment: *

Name: *

Email: *

Verification: *