In order to provide subnet level isolation, you want to force instance-A in one subnet to route through a security appliance, called instance-B, in another subnet.
What should you do?

• A.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with no tag.
• B.Create a more specific route than the system-generated subnet route, pointing the next hop to instance-B with a tag applied to instance-A.
• C.Delete the system-generated subnet route and create a specific route to instance-B with a tag applied to instance-A.
• D.Move instance-B to another VPC and, using multi-NIC, connect instance-B's interface to instance-A's network. Configure the appropriate routes to force traffic through to instance-A.

Comment: *

Name: *

Email: *

Verification: *

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.
What should you do?

• A.Assign each user the editor role.
• B.Assign each user the compute.networkAdmin role.
• C.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.
• D.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

Comment: *

Name: *

Email: *

Verification: *

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

• A.Ensure that the object you don't want to be cached anymore is not shared publicly.
• B.Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the privateattribute.
• C.Add an appropriate lifecycle rule on the storage bucket containing the two objects.
• D.Add a Cache-Controlentry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.
What should you do?

• A.Create a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs.
• B.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to disabled, and review necessary logs.
• C.Create a VPC Firewall rule that denies traffic, enable logging and set enforcement to enabled, and review necessary logs.
• D.Create a Cloud Armor Policy rule that denies traffic and review necessary logs.

Comment: *

Name: *

Email: *

Verification: *

You have configured Cloud CDN using HTTP(S) load balancing as the origin for cacheable content. Compression is configured on the web servers, but responses served by Cloud CDN are not compressed.
What is the most likely cause of the problem?

• A.You have not configured compression in Cloud CDN.
• B.You have configured the web servers and Cloud CDN with different compression types.
• C.The web servers behind the load balancer are configured with different compression types.
• D.You have to configure the web servers to compress responses even if the request has a Via header.

Comment: *

Name: *

Email: *

Verification: *