A customer wants to deploy a large number of 3-tier web applications on Compute Engine.
How should the customer ensure authenticated network separation between the different tiers of the application?

• A.Run each tier with its own VM tags, and use tag-based firewall rules.
• B.Run each tier with a different Service Account (SA), and use SA-based firewall rules.
• C.Run each tier in its own subnet, and use subnet-based firewall rules.
• D.Run each tier in its own Project, and segregate using Project labels.

Comment: *

Name: *

Email: *

Verification: *

Your team wants to make sure Compute Engine instances running in your production project do not have public IP addresses. The frontend application Compute Engine instances will require public IPs. The product engineers have the Editor role to modify resources. Your team wants to enforce this requirement.
How should your team meet these requirements?

• A.Enable Private Access on the VPC network in the production project.
• B.Remove the Editor role and grant the Compute Admin IAM role to the engineers.
• C.Set up an organization policy to only permit public IPs for the front-end Compute Engine instances.
• D.Set up a VPC network with two subnets: one with public IPs and one without public IPs.

Comment: *

Name: *

Email: *

Verification: *

How should a customer reliably deliver Stackdriver logs from GCP to their on-premises SIEM system?

• A.Send all logs to the SIEM system via an existing protocol such as syslog.
• B.Build a connector for the SIEM to query for all logs in real time from the GCP RESTful JSON APIs.
• C.Configure every project to export all their logs to a common BigQuery DataSet, which will be queried by the SIEM system.
• D.Configure Organizational Log Sinks to export logs to a Cloud Pub/Sub Topic, which will be sent to the SIEM via Dataflow.

Comment: *

Name: *

Email: *

Verification: *

Your company has deployed an application on Compute Engine. The application is accessible by clients on port 587. You need to balance the load between the different instances running the application. The connection should be secured using TLS, and terminated by the Load Balancer.
What type of Load Balancing should you use?

• A.Network Load Balancing
• B.HTTP(S) Load Balancing
• C.TCP Proxy Load Balancing
• D.SSL Proxy Load Balancing

Comment: *

Name: *

Email: *

Verification: *

A customer deploys an application to App Engine and needs to check for Open Web Application Security Project (OWASP) vulnerabilities.
Which service should be used to accomplish this?

• A.Cloud Armor
• B.Google Cloud Audit Logs
• C.Cloud Security Scanner
• D.Forseti Security

Comment: *

Name: *

Email: *

Verification: *