Which two implied firewall rules are defined on a VPC network? (Choose two.)

• A.A rule that allows all outbound connections
• B.A rule that blocks all inbound port 25 connections
• C.A rule that blocks all outbound connections
• D.A rule that denies all inbound connections
• E.A rule that allows all inbound port 80 connections

Comment: *

Name: *

Email: *

Verification: *

Your team uses a service account to authenticate data transfers from a given Compute Engine virtual machine instance of to a specified Cloud Storage bucket. An engineer accidentally deletes the service account, which breaks application functionality. You want to recover the application as quickly as possible without compromising security.
What should you do?

• A.Temporarily disable authentication on the Cloud Storage bucket.
• B.Use the undelete command to recover the deleted service account.
• C.Create a new service account with the same name as the deleted service account.
• D.Update the permissions of another existing service account and supply those credentials to the applications.

Comment: *

Name: *

Email: *

Verification: *

A customer is collaborating with another company to build an application on Compute Engine. The customer is building the application tier in their GCP Organization, and the other company is building the storage tier in a different GCP Organization. This is a 3-tier web application. Communication between portions of the application must not traverse the public internet by any means.
Which connectivity option should be implemented?

• A.Cloud Interconnect
• B.Cloud VPN
• C.VPC peering
• D.Shared VPC

Comment: *

Name: *

Email: *

Verification: *

You are the security admin of your company. You have 3,000 objects in your Cloud Storage bucket. You do not want to manage access to each object individually. You also do not want the uploader of an object to always have full control of the object. However, you want to use Cloud Audit Logs to manage access to your bucket.
What should you do?

• A.Set up an ACL with OWNER permission to a scope of allUsers.
• B.Set up an ACL with READER permission to a scope of allUsers.
• C.Set up a default bucket ACL and manage access for users using IAM.
• D.Set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.

Comment: *

Name: *

Email: *

Verification: *

Your company is using GSuite and has developed an application meant for internal usage on Google App Engine. You need to make sure that an external user cannot gain access to the application even when an employee's password has been compromised.
What should you do?

• A.Configure Cloud VPN between your private network and GCP.
• B.Enforce 2-factor authentication in GSuite for all users.
• C.Configure Cloud Identity-Aware Proxy for the App Engine Application.
• D.Provision user passwords using GSuite Password Sync.

Comment: *

Name: *

Email: *

Verification: *