The security team has disabled external SSH access into production virtual machines in GCP.
The operations team needs to remotely manage the VMs and other resources. What can they do?

• A.Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
• B.Grant the operations team access to use Google Cloud Shell.
• C.Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
• D.Configure a VPN connection to GCP to allow SSH access to the cloud VMs.

Comment: *

Name: *

Email: *

Verification: *

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security team does not lose their ability to monitor traffic to and from Compute Engine instances.
Which two products should you incorporate into the solution? (Choose two.)

• A.VPC flow logs
• B.Firewall logs
• C.Cloud Audit logs
• D.Stackdriver Trace
• E.Compute Engine instance system logs

Comment: *

Name: *

Email: *

Verification: *

You need to create the network infrastructure to deploy a highly available web application in the us-east1 and us-west1 regions. The application runs on Compute Engine instances, and it does not require the use of a database. You want to follow Google-recommended practices. What should you do?

• A.Create one VPC with one subnet in each region.
  Create a regional network load balancer in each region with a static IP address.
  Enable Cloud CDN on the load balancers.
  Create an A record in Cloud DNS with both IP addresses for the load balancers.
• B.Create one VPC with one subnet in each region.
  Create a global load balancer with a static IP address.
  Enable Cloud CDN and Google Cloud Armor on the load balancer.
  Create an A record using the IP address of the load balancer in Cloud DNS.
• C.Create one VPC in each region, and peer both VPCs.
  Create a global load balancer.
  Enable Cloud CDN on the load balancer.
  Create a CNAME for the load balancer in Cloud DNS.
• D.Create one VPC with one subnet in each region.
  Create an HTTP(S) load balancer with a static IP address.
  Choose the standard tier for the network.
  Enable Cloud CDN on the load balancer.

Comment: *

Name: *

Email: *

Verification: *

You work for a multinational enterprise that is moving to GCP.
These are the cloud requirements:
* An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us-west1 (primary HQ) and us-east4 (backup)
* Multiple regional offices in Europe and APAC
* Regional data processing is required in europe-west1 and australia-southeast1
* Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
What should you do?

• A.* Create 1 VPC in a Shared VPC Service Project.
  * Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  * Attach NIC0 in us-west1 subnet of the Service Project.
  * Attach NIC1 in us-west1 subnet of the Service Project
  * Deploy the instance.
  * Configure the necessary routes and firewall rules to pass traffic through the instance.
• B.* Create 2 VPCs in a Shared VPC Host Project.
  * Configure a 2-NIC instance in zone us-west1-a in the Service Project.
  * Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  * Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  * Deploy the instance.
  * Configure the necessary routes and firewall rules to pass traffic through the instance.
• C.* Create 1 VPC in a Shared VPC Host Project.
  * Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  * Attach NIC0 in us-west1 subnet of the Host Project.
  * Attach NIC1 in us-west1 subnet of the Host Project
  * Deploy the instance.
  * Configure the necessary routes and firewall rules to pass traffic through the instance.
• D.* Create 2 VPCs in a Shared VPC Host Project.
  * Configure a 2-NIC instance in zone us-west1-a in the Host Project.
  * Attach NIC0 in VPC #1 us-west1 subnet of the Host Project.
  * Attach NIC1 in VPC #2 us-west1 subnet of the Host Project.
  * Deploy the instance.
  * Configure the necessary routes and firewall rules to pass traffic through the instance.

Comment: *

Name: *

Email: *

Verification: *

You are trying to update firewall rules in a shared VPC for which you have been assigned only Network Admin permissions. You cannot modify the firewall rules. Your organization requires using the least privilege necessary.
Which level of permissions should you request?

• A.Security Admin privileges from the Shared VPC Admin.
• B.Service Project Admin privileges from the Shared VPC Admin.
• C.Shared VPC Admin privileges from the Organization Admin.
• D.Organization Admin privileges from the Organization Admin.

Comment: *

Name: *

Email: *

Verification: *