You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost- efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

• A.Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.
• B.Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.
• C.Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.
• D.Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.

Comment: *

Name: *

Email: *

Verification: *

You are migrating to Cloud DNS and want to import your BIND zone file.
Which command should you use?

• A.gcloud dns record-sets import ZONE_FILE --zone MANAGED_ZONE
• B.gcloud dns record-sets import ZONE_FILE --replace-origin-ns --zone MANAGED_ZONE
• C.gcloud dns record-sets import ZONE_FILE --zone-file-format --zone MANAGED_ZONE
• D.gcloud dns record-sets import ZONE_FILE --delete-all-existing --zone MANAGED ZONE

Comment: *

Name: *

Email: *

Verification: *

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.
How should you set up permissions for the networking team?

• A.Assign members of the networking team the compute.networkUser role.
• B.Assign members of the networking team the compute.networkAdmin role.
• C.Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.
• D.Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.

Comment: *

Name: *

Email: *

Verification: *

You need to restrict access to your Google Cloud load-balanced application so that only specific IP addresses can connect.
What should you do?

• A.Create a secure perimeter using the Access Context Manager feature of VPC Service Controls and restrict access to the source IP range of the allowed clients and Google health check IP ranges.
• B.Create a secure perimeter using VPC Service Controls, and mark the load balancer as a service restricted to the source IP range of the allowed clients and Google health check IP ranges.
• C.Tag the backend instances "application," and create a firewall rule with target tag "application" and the source IP range of the allowed clients and Google health check IP ranges.
• D.Label the backend instances "application," and create a firewall rule with the target label "application" and the source IP range of the allowed clients and Google health check IP ranges.

Comment: *

Name: *

Email: *

Verification: *

You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall.
Which two actions should you take? (Choose two.)

• A.Turn on Private Google Access at the subnet level.
• B.Turn on Private Google Access at the VPC level.
• C.Turn on Private Services Access at the VPC level.
• D.Create a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway.
• E.Create a set of custom static routes to send traffic to the internal IP addresses of Google APIs and services via the default internet gateway.

Comment: *

Name: *

Email: *

Verification: *