An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.
Which solution meets the organization's requirements?

• A.Google Cloud Directory Sync (GCDS)
• B.Cloud Identity
• C.Security Assertion Markup Language (SAML)
• D.Pub/Sub

Comment: *

Name: *

Email: *

Verification: *

How should a customer reliably deliver Stackdriver logs from GCP to their on-premises SIEM system?

• A.Build a connector for the SIEM to query for all logs in real time from the GCP RESTful JSON APIs.
• B.Configure Organizational Log Sinks to export logs to a Cloud Pub/Sub Topic, which will be sent to the SIEM via Dataflow.
• C.Configure every project to export all their logs to a common BigQuery DataSet, which will be queried by the SIEM system.
• D.Send all logs to the SIEM system via an existing protocol such as syslog.

Comment: *

Name: *

Email: *

Verification: *

Which international compliance standard provides guidelines for information security controls applicable to the provision and use of cloud services?

• A.ISO 27001
• B.ISO 27002
• C.ISO 27017
• D.ISO 27018

Comment: *

Name: *

Email: *

Verification: *

A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container.
What should they do?

• A.Build small containers using small base images.
• B.Delete non-used versions from Container Registry.
• C.Use a Continuous Delivery tool to deploy the application.
• D.Use Cloud Build to build the container images.

Comment: *

Name: *

Email: *

Verification: *

An organization's typical network and security review consists of analyzing application transit routes, request handling, and firewall rules. They want to enable their developer teams to deploy new applications without the overhead of this full review.
How should you advise this organization?

• A.Use Forseti with Firewall filters to catch any unwanted configurations in production.
• B.Mandate use of infrastructure as code and provide static analysis in the CI/CD pipelines to enforce policies.
• C.Route all VPC traffic through customer-managed routers to detect malicious patterns in production.
• D.All production applications will run on-premises. Allow developers free rein in GCP as their dev and QA platforms.

Comment: *

Name: *

Email: *

Verification: *