You are using the gcloud command line tool to create a new custom role in a project by coping a predefined role. You receive this error message:
INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid What should you do?

• A.Remove the resourcemanager.projects.list permission, and try again.
• B.Add the resourcemanager.projects.get permission, and try again.
• C.Try again with a different role with a new name but the same permissions.
• D.Add the resourcemanager.projects.setIamPolicy permission, and try again.

Comment: *

Name: *

Email: *

Verification: *

Your company's web server administrator is migrating on-premises backend servers for an application to GCP. Libraries and configurations differ significantly across these backend servers. The migration to GCP will be lift-and-shift, and all requests to the servers will be served by a single network load balancer frontend. You want to use a GCP-native solution when possible.
How should you deploy this service in GCP?

• A.Create a target pool, add all backend instances to this target pool, and deploy the target pool behind your load balancer.
• B.Deploy a third-party virtual appliance as frontend to these servers that will accommodate the significant differences between these backend servers.
• C.Create a managed instance group from one of the images of the on-premises servers, and link this instance group to a target pool behind your load balancer.
• D.Use GCP's ECMP capability to load-balance traffic to the backend servers by installing multiple equal-priority static routes to the backend servers.

Comment: *

Name: *

Email: *

Verification: *

You work for a multinational enterprise that is moving to GCP.
These are the cloud requirements:
- An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us- west1 (primary HQ) and us-east4 (backup)
- Multiple regional offices in Europe and APAC
- Regional data processing is required in europe-west1 and australia-
southeast1
- Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
What should you do?

• A.Create 1 VPC in a Shared VPC Service Project.
  Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  Attach NIC0 in us-west1 subnet of the Service Project.
  Attach NIC1 in us-west1 subnet of the Service Project ?Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• B.Create 2 VPCs in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• C.Create 2 VPCs in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• D.Create 1 VPC in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  Attach NIC0 in us-west1 subnet of the Host Project.
  Attach NIC1 in us-west1 subnet of the Host Project
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.

Comment: *

Name: *

Email: *

Verification: *

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.
What should you do?

• A.Assign each user the editor role.
• B.Assign each user the compute.networkAdmin role.
• C.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.
• D.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

Comment: *

Name: *

Email: *

Verification: *

Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

• A.Create a third organization with a new host project, and attach all projects from your company and Altostrat to it using shared VPC
• B.Set up some variant of DNS forwarding and zone transfers in each organization.
• C.Provision Cloud Interconnect to connect both organizations together.
• D.Connect VPCs in both organizations using Cloud VPN together with Cloud Router.
• E.Use Cloud DNS to create A records of all VMs and resources across all projects in both organizations.

Comment: *

Name: *

Email: *

Verification: *