You have the following private Google Kubernetes Engine (GKE) cluster deployment:

You have a virtual machine (VM) deployed in the same VPC in the subnetwork kubernetes-management with internal IP address 192.168.40 2/24 and no external IP address assigned. You need to communicate with the cluster master using kubectl. What should you do?

• A.Add the network 192.168.38.0/28 to the masterAuthorizedNetworksConfig. Configure kubectl to communicate with the endpoint 192.168.38.2
• B.Add the network 192.168.36.0/24 to the masterAuthorizedNetworksConfig. Configure kubectl to communicate with the endpoint 192.168.38.2
• C.Add the network 192.168.40.0/24 to the masterAuthorizedNetworksConfig. Configure kubectl to communicate with the endpoint 192.168.38.2.
• D.Add an external IP address to the VM, and add this IP address in the masterAuthorizedNetworksConfig. Configure kubectl to communicate with the endpoint 35.224.37.17.

Comment: *

Name: *

Email: *

Verification: *

You are using a 10-Gbps direct peering connection to Google together with the gsutil tool to upload files to Cloud Storage buckets from on-premises servers. The on-premises servers are 100 milliseconds away from the Google peering point. You notice that your uploads are not using the full 10-Gbps bandwidth available to you. You want to optimize the bandwidth utilization of the connection.
What should you do on your on-premises servers?

• A.Tune TCP parameters on the on-premises servers.
• B.Compress files using utilities like tar to reduce the size of data being sent.
• C.Remove the -m flag from the gsutil command to enable single-threaded transfers.
• D.Use the perfdiag parameter in your gsutil command to enable faster performance: gsutil perfdiag gs://
  [BUCKET NAME].

Comment: *

Name: *

Email: *

Verification: *

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.
How should you set up permissions for the networking team?

• A.Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.
• B.Assign members of the networking team the compute.networkUser role.
• C.Assign members of the networking team the compute.networkAdmin role.
• D.Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.

Comment: *

Name: *

Email: *

Verification: *

Your company is working with a partner to provide a solution for a customer. Both your company and the partner organization are using GCP. There are applications in the partner's network that need access to some resources in your company's VPC. There is no CIDR overlap between the VPCs.
Which two solutions can you implement to achieve the desired results without compromising the security? (Choose two.)

• A.Cloud NAT
• B.Cloud VPN
• C.Shared VPC
• D.VPC peering
• E.Dedicated Interconnect

Comment: *

Name: *

Email: *

Verification: *