You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

• A.Ensure that the object you don't want to be cached anymore is not shared publicly.
• B.Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the privateattribute.
• C.Add an appropriate lifecycle rule on the storage bucket containing the two objects.
• D.Add a Cache-Controlentry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Comment: *

Name: *

Email: *

Verification: *

You are designing an IP address scheme for new private Google Kubernetes Engine (GKE) clusters, Due to IP address exhaustion of the RFC 1918 address space in your enterprise, you plan to use privately used public IP space for the new dusters. You want to follow Google-recommended practices, What should you do after designing your IP scheme?

• A.Create the minimum usable RFC 1918 primary and secondary subnet IP ranges for the clusters. Re-use the secondary address range for the pods across multiple private GKE clusters.
• B.Create the minimum usable RFC 1918 primary and secondary subnet IP ranges for the clusters Re-use the secondary address range for the services across multiple private GKE clusters.
• C.Create privately used public IP primary and secondary subnet ranges for the clusters. Create a private GKE cluster With the following options selected: --enab1e-ip-a1ias and --enable-private-nodes.
• D.Create privately used public IP primary and secondary subnet ranges for the clusters. Create a private GKE cluster With the following options selected and - siable-default-snat,--enable-ip-alias, and -enable-private-nodes

Comment: *

Name: *

Email: *

Verification: *

You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the least privilege necessary.
Which level of permissions should you request?

• A.Service Project Admin privileges from the Shared VPC Admin.
• B.Security Admin privileges from the Shared VPC Admin.
• C.Organization Admin privileges from the Organization Admin.
• D.Shared VPC Admin privileges from the Organization Admin.

Comment: *

Name: *

Email: *

Verification: *

Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

• A.Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
• B.Configure Stackdriver Monitoring for all Projects with the default retention policies.
• C.Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.
• D.Grant the security team access to the logs in each Project.

Comment: *

Name: *

Email: *

Verification: *

You created a VPC network named Retail in auto mode. You want to create a VPC network named Distribution and peer it with the Retail VPC.
How should you configure the Distribution VPC?

• A.Create the Distribution VPC in auto mode. Peer both the VPCs via network peering.
• B.Create the Distribution VPC in custom mode. Use the CIDR range 10.0.0.0/9. Create the necessary subnets, and then peer them via network peering.
• C.Create the Distribution VPC in custom mode. Use the CIDR range 10.128.0.0/9. Create the necessary subnets, and then peer them via network peering.
• D.Rename the default VPC as "Distribution" and peer it via network peering.

Comment: *

Name: *

Email: *

Verification: *