You work for a multinational enterprise that is moving to GCP.
These are the cloud requirements:
- An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us- west1 (primary HQ) and us-east4 (backup)
- Multiple regional offices in Europe and APAC
- Regional data processing is required in europe-west1 and australia-
southeast1
- Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
What should you do?

• A.Create 1 VPC in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  Attach NIC0 in us-west1 subnet of the Host Project.
  Attach NIC1 in us-west1 subnet of the Host Project
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• B.Create 2 VPCs in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• C.Create 1 VPC in a Shared VPC Service Project.
  Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  Attach NIC0 in us-west1 subnet of the Service Project.
  Attach NIC1 in us-west1 subnet of the Service Project ?Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.
• D.Create 2 VPCs in a Shared VPC Host Project.
  Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  Deploy the instance.
  Configure the necessary routes and firewall rules to pass traffic through the instance.

Comment: *

Name: *

Email: *

Verification: *

You work for a university that is migrating to GCP.
These are the cloud requirements:
* On-premises connectivity with 10 Gbps
* Lowest latency access to the cloud
* Centralized Networking Administration Team
New departments are asking for on-premises connectivity to their projects. You want to deploy the most cost-efficient interconnect solution for connecting the campus to Google Cloud.
What should you do?

• A.Use Shared VPC, and deploy the VLAN attachments and Interconnect in the host project.
• B.Use Shared VPC, and deploy the VLAN attachments in the service projects. Connect the VLAN attachment to the Shared VPC's host project.
• C.Use standalone projects, and deploy the VLAN attachments in the individual projects. Connect the VLAN attachment to the standalone projects' Interconnects.
• D.Use standalone projects and deploy the VLAN attachments and Interconnects in each of the individual projects.

Comment: *

Name: *

Email: *

Verification: *

You need to give each member of your network operations team least-privilege access to create, modify, and delete Cloud Interconnect VLAN attachments.
What should you do?

• A.Assign each user the editor role.
• B.Assign each user the compute.networkAdmin role.
• C.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.
• D.Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.

Comment: *

Name: *

Email: *

Verification: *

You have a storage bucket that contains the following objects:
- folder-a/image-a-1.jpg
- folder-a/image-a-2.jpg
- folder-b/image-b-1.jpg
- folder-b/image-b-2.jpg
Cloud CDN is enabled on the storage bucket, and all four objects have been successfully cached.
You want to remove the cached copies of all the objects with the prefix folder-a, using the minimum number of commands.
What should you do?

• A.Disable Cloud CDN on the storage bucket. Wait 90 seconds. Re-enable Cloud CDN on the storage bucket.
• B.Make sure that all the objects with prefix folder-a are not shared publicly.
• C.Add an appropriate lifecycle rule on the storage bucket.
• D.Issue a cache invalidation command with pattern /folder-a/*.

Comment: *

Name: *

Email: *

Verification: *

All the instances in your project are configured with the custom metadata enable-osloginvalue set to FALSE and to block project-wide SSH keys. None of the instances are set with any SSH key, and no project- wide SSH keys have been configured. Firewall rules are set up to allow SSH sessions from any IP address range. You want to SSH into one instance.
What should you do?

• A.Open the Cloud Shell SSH into the instance using gcloud compute ssh.
• B.Set the custom metadata enable-oslogin to TRUE, and SSH into the instance using a third-party tool like putty or ssh.
• C.Generate a new SSH key pair. Verify the format of the private key and add it to the instance. SSH into the instance using a third-party tool like putty or ssh.
• D.Generate a new SSH key pair. Verify the format of the public key and add it to the project. SSH into the instance using a third-party tool like putty or ssh.

Comment: *

Name: *

Email: *

Verification: *