You are using a third-party next-generation firewall to inspect traffic. You created a custom route of 0.0.0.0/0 to route egress traffic to the firewall. You want to allow your VPC instances without public IP addresses to access the BigQuery and Cloud Pub/Sub APIs, without sending the traffic through the firewall.
Which two actions should you take? (Choose two.)

• A.Turn on Private Services Access at the VPC level.
• B.Create a set of custom static routes to send traffic to the internal IP addresses of Google APIs and services via the default internet gateway.
• C.Create a set of custom static routes to send traffic to the external IP addresses of Google APIs and services via the default internet gateway.
• D.Turn on Private Google Access at the VPC level.
• E.Turn on Private Google Access at the subnet level.

Comment: *

Name: *

Email: *

Verification: *

You need to enable Cloud CDN for all the objects inside a storage bucket. You want to ensure that all the object in the storage bucket can be served by the CDN.
What should you do in the GCP Console?

• A.Create a new cloud storage bucket, and then enable Cloud CDN on it.
• B.Create a new TCP load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• C.Create a new SSL proxy load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• D.Create a new HTTP load balancer, select the storage bucket as a backend, enable Cloud CDN on the backend, and make sure each object inside the storage bucket is shared publicly.

Comment: *

Name: *

Email: *

Verification: *

You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.
Which two actions should you take? (Choose two.)

• A.Activate the Service Networking API in your project.
• B.Activate the Cloud Datastore API in your project.
• C.Create a private connection to a service producer.
• D.Create a custom static route to allow the traffic to reach the Cloud SQL API.
• E.Enable Private Google Access.

Comment: *

Name: *

Email: *

Verification: *

You want to deploy a VPN Gateway to connect your on-premises network to GCP. You are using a non BGP-capable on-premises VPN device. You want to minimize downtime and operational overhead when your network grows. The device supports only IKEv2, and you want to follow Google-recommended practices.
What should you do?

• A.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel per subnet.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Create the appropriate static routes.
• B.* Create a Cloud VPN instance.* Create a policy-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.
• C.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to match your local and remote networks.* Configure the appropriate static routes.
• D.* Create a Cloud VPN instance.* Create a route-based VPN tunnel.* Configure the appropriate local and remote traffic selectors to 0.0.0.0/0.* Configure the appropriate static routes.

Comment: *

Name: *

Email: *

Verification: *

You are designing a Google Kubernetes Engine (GKE) cluster for your organization. The current cluster size is expected to host 10 nodes, with 20 Pods per node and 150 services. Because of the migration of new services over the next 2 years, there is a planned growth for 100 nodes, 200 Pods per node, and 1500 services.
You want to use VPC-native clusters with alias IP ranges, while minimizing address consumption.
How should you design this topology?

• A.Create a subnet of size/25 with 2 secondary ranges of: /17 for Pods and /21 for Services. Create a VPC- native cluster and specify those ranges.
• B.Create a subnet of size/28 with 2 secondary ranges of: /24 for Pods and /24 for Services. Create a VPC- native cluster and specify those ranges. When the services are ready to be deployed, resize the subnets.
• C.Use gcloud container clusters create [CLUSTER NAME]--enable-ip-alias to create a VPC-native cluster.
• D.Use gcloud container clusters create [CLUSTER NAME] to create a VPC-native cluster.

Comment: *

Name: *

Email: *

Verification: *