Your team wants to make sure Compute Engine instances running in your production project do not have public IP addresses. The frontend application Compute Engine instances will require public IPs. The product engineers have the Editor role to modify resources. Your team wants to enforce this requirement.
How should your team meet these requirements?

• A.Enable Private Access on the VPC network in the production project.
• B.Remove the Editor role and grant the Compute Admin IAM role to the engineers.
• C.Set up an organization policy to only permit public IPs for the front-end Compute Engine instances.
• D.Set up a VPC network with two subnets: one with public IPs and one without public IPs.

Comment: *

Name: *

Email: *

Verification: *

You have defined subnets in a VPC within Google Cloud Platform. You need multiple projects to create Compute Engine instances with IP addresses from these subnets. What should you do?

• A.Configure Cloud VPN between the projects.
• B.Set up VPC peering between all related projects.
• C.Change the VPC subnets to enable private Google access.
• D.Use Shared VPC to share the subnets with the other projects.

Comment: *

Name: *

Email: *

Verification: *

You want data on Compute Engine disks to be encrypted at rest with keys managed by Cloud Key Management Service (KMS). Cloud Identity and Access Management (IAM) permissions to these keys must be managed in a grouped way because the permissions should be the same for all keys.
What should you do?

• A.Create a KeyRing per persistent disk, with each KeyRing containing a single Key. Manage the IAM permissions at the KeyRing level.
• B.Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the KeyRing level.
• C.Create a KeyRing per persistent disk, with each Keying containing a single Key. Manage the IAM permissions at the Key level.
• D.Create a single KeyRing for all persistent disks and all Keys in this KeyRing. Manage the IAM permissions at the Key level.

Comment: *

Name: *

Email: *

Verification: *

A DevOps team will create a new container to run on Google Kubernetes Engine. As the application will be internet-facing, they want to minimize the attack surface of the container.
What should they do?

• A.Build small containers using small base images.
• B.Use a Continuous Delivery tool to deploy the application.
• C.Use Cloud Build to build the container images.
• D.Delete non-used versions from Container Registry.

Comment: *

Name: *

Email: *

Verification: *

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?

• A.Compute Engine guest attributes
• B.Secret Manager
• C.Compute Engine custom metadata
• D.Cloud Key Management Service

Comment: *

Name: *

Email: *

Verification: *