You have configured a service on Google Cloud that connects to an on-premises service via a Dedicated Interconnect. Users are reporting recent connectivity issues. You need to determine whether the traffic is being dropped because of firewall rules or a routing decision. What should you do?

• A.Use the Network Intelligence Center Connectivity Tests to test the connectivity between the VPC and the on-premises network.
• B.Use Network Intelligence Center Network Topology to check the traffic flow, and replay the traffic from the time period when the connectivity issue occurred.
• C.Configure a Compute Engine instance on the same VPC as the service running on Google Cloud to run a traceroute targeted at the on-premises service.
• D.Configure VPC Flow Logs. Review the logs by filtering on the source and destination.

Comment: *

Name: *

Email: *

Verification: *

Your team is developing an application that will be used by consumers all over the world. Currently, the application sits behind a global external application load balancer You need to protect the application from potential application-level attacks. What should you do?

• A.Enable Cloud CDN on the backend service.
• B.Create multiple firewall deny rules to block malicious users, and apply them to the global external application load balancer
• C.Create a Google Cloud Armor security policy with web application firewall rules, and apply the security policy to the backend service.
• D.Create a VPC Service Controls perimeter with the global external application load balancer as the protected service, and apply it to the backend service

Comment: *

Name: *

Email: *

Verification: *

You want to establish a dedicated connection to Google that can access Cloud SQL via a public IP address and that does not require a third-party service provider.
Which connection type should you choose?

• A.Carrier Peering
• B.Direct Peering
• C.Dedicated Interconnect
• D.Partner Interconnect

Comment: *

Name: *

Email: *

Verification: *

You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.
Which two methods can you use to accomplish this? (Choose two.)
GetIamPolicy() via REST API

• A.setIamPolicy() via REST API
• B.gcloud pubsub add-iam-policy-binding Sprojectname --member user:Susername --
• C.role roles/editor
  gcloud projects add-iam-policy-binding Sprojectname --member user:Susername --
• D.role roles/editor
• E.Enter an email address in the Add members field, and select the desired role from the drop-down menu in the GCP Console.

Comment: *

Name: *

Email: *

Verification: *

You want to set up two Cloud Routers so that one has an active Border Gateway Protocol (BGP) session, and the other one acts as a standby.
Which BGP attribute should you use on your on-premises router?

• A.AS-Path
• B.Community
• C.Local Preference
• D.Multi-exit Discriminator

Comment: *

Name: *

Email: *

Verification: *