A customer wants to make it convenient for their mobile workforce to access a CRM web interface that is hosted on Google Cloud Platform (GCP). The CRM can only be accessed by someone on the corporate network. The customer wants to make it available over the internet. Your team requires an authentication layer in front of the application that supports two-factor authentication Which GCP product should the customer implement to meet these requirements?

• A.Cloud Endpoints
• B.Cloud Identity-Aware Proxy
• C.Cloud Armor
• D.Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

A company is deploying their application on Google Cloud Platform. Company policy requires long-term data to be stored using a solution that can automatically replicate data over at least two geographic places.
Which Storage solution are they allowed to use?

• A.Cloud Bigtable
• B.Cloud BigQuery
• C.Compute Engine SSD Disk
• D.Compute Engine Persistent Disk

Comment: *

Name: *

Email: *

Verification: *

A company is deploying their application on Google Cloud Platform. Company policy requires long-term data to be stored using a solution that can automatically replicate data over at least two geographic places.
Which Storage solution are they allowed to use?

• A.Cloud Bigtable
• B.Cloud BigQuery
• C.Compute Engine SSD Disk
• D.Compute Engine Persistent Disk

Comment: *

Name: *

Email: *

Verification: *

An application running on a Compute Engine instance needs to read data from a Cloud Storage bucket. Your team does not allow Cloud Storage buckets to be globally readable and wants to ensure the principle of least privilege.
Which option meets the requirement of your team?

• A.Use a service account with read-only access to the Cloud Storage bucket to retrieve the credentials from the instance metadata.
• B.Use a service account with read-only access to the Cloud Storage bucket, and store the credentials to the service account in the config of the application on the Compute Engine instance.
• C.Encrypt the data in the Cloud Storage bucket using Cloud KMS, and allow the application to decrypt the data with the KMS key.
• D.Create a Cloud Storage ACL that allows read-only access from the Compute Engine instance's IP address and allows the application to read from the bucket without credentials.

Comment: *

Name: *

Email: *

Verification: *

An application log's data, including customer identifiers such as email addresses, needs to be redacted. However, these logs also include the email addresses of internal developers from company.com, and these should NOT be redacted. Which solution should you use to meet these requirements?

• A.Create a regular custom dictionary detector that lists a subset of the developers' email addresses.
• B.Create a regular expression (regex) custom infoType detector to match on @company.com.
• C.Create a regular custom dictionary detector to match all email addresses listed in Cloud Identity.
• D.Create a custom infoType called COMPANY_EMAIL to match @company.com.

Comment: *

Name: *

Email: *

Verification: *