You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

• A.gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE
• B.gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE
• C.gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE
• D.gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Comment: *

Name: *

Email: *

Verification: *

You have configured Cloud CDN using HTTP(S) load balancing as the origin for cacheable content. Compression is configured on the web servers, but responses served by Cloud CDN are not compressed.
What is the most likely cause of the problem?

• A.You have not configured compression in Cloud CDN.
• B.You have configured the web servers and Cloud CDN with different compression types.
• C.The web servers behind the load balancer are configured with different compression types.
• D.You have to configure the web servers to compress responses even if the request has a Via header.

Comment: *

Name: *

Email: *

Verification: *

Your company has just launched a new critical revenue-generating web application. You deployed the application for scalability using managed instance groups, autoscaling, and a network load balancer as frontend. One day, you notice severe bursty traffic that the caused autoscaling to reach the maximum number of instances, and users of your application cannot complete transactions. After an investigation, you think it as a DDOS attack. You want to quickly restore user access to your application and allow successful transactions while minimizing cost.
Which two steps should you take? (Choose two.)

• A.Use Cloud Armor to blacklist the attacker's IP addresses.
• B.Shut down the entire application in GCP for a few hours. The attack will stop when the application is offline.
• C.Increase the maximum autoscaling backend to accommodate the severe bursty traffic.
• D.Create a global HTTP(s) load balancer and move your application backend to this load balancer.
• E.SSH into the backend compute engine instances, and view the auth logs and syslogs to further understand the nature of the attack.

Comment: *

Name: *

Email: *

Verification: *

Your organization is deploying a single project for 3 separate departments. Two of these departments require network connectivity between each other, but the third department should remain in isolation. Your design should create separate network administrative domains between these departments. You want to minimize operational overhead.
How should you design the topology?

• A.Create a Shared VPC Host Project and the respective Service Projects for each of the 3 separate departments.
• B.Create 3 separate VPCs, and use Cloud VPN to establish connectivity between the two appropriate VPCs.
• C.Create 3 separate VPCs, and use VPC peering to establish connectivity between the two appropriate VPCs.
• D.Create a single project, and deploy specific firewall rules. Use network tags to isolate access between the departments.

Comment: *

Name: *

Email: *

Verification: *

You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization requires using the least privilege possible.
What should you do?

• A.Grant the cloud-platform privilege to the service account for the Cloud Storage bucket.
• B.Grant the iam.serviceAccountUser to your user account.
• C.Grant the compute.instanceAdmin to your user account.
• D.Grant the read-only privilege to the service account for the Cloud Storage bucket.

Comment: *

Name: *

Email: *

Verification: *