How should a customer reliably deliver Stackdriver logs from GCP to their on-premises SIEM system?

• A.Send all logs to the SIEM system via an existing protocol such as syslog.
• B.Configure every project to export all their logs to a common BigQuery DataSet, which will be queried by the SIEM system.
• C.Configure Organizational Log Sinks to export logs to a Cloud Pub/Sub Topic, which will be sent to the SIEM via Dataflow.
• D.Build a connector for the SIEM to query for all logs in real time from the GCP RESTful JSON APIs.

Comment: *

Name: *

Email: *

Verification: *

Your team sets up a Shared VPC Network where project co-vpc-prod is the host project. Your team has configured the firewall rules, subnets, and VPN gateway on the host project. They need to enable Engineering Group A to attach a Compute Engine instance to only the 10.1.1.0/24 subnet.
What should your team grant to Engineering Group A to meet this requirement?

• A.Compute Network User Role at the host project level.
• B.Compute Network User Role at the subnet level.
• C.Compute Shared VPC Admin Role at the host project level.
• D.Compute Shared VPC Admin Role at the service project level.

Comment: *

Name: *

Email: *

Verification: *

When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for review by internal or external analysts for customer service trend analysis.
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?

• A.Use Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.
• B.Use Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.
• C.Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.
• D.Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Comment: *

Name: *

Email: *

Verification: *

You have noticed an increased number of phishing attacks across your enterprise user accounts. You want to implement the Google 2-Step Verification (2SV) option that uses a cryptographic signature to authenticate a user and verify the URL of the login page. Which Google 2SV option should you use?

• A.Titan Security Keys
• B.Google prompt
• C.Google Authenticator app
• D.Cloud HSM keys

Comment: *

Name: *

Email: *

Verification: *

A customer implements Cloud Identity-Aware Proxy for their ERP system hosted on Compute Engine. Their security team wants to add a security layer so that the ERP systems only accept traffic from Cloud Identity- Aware Proxy.
What should the customer do to meet these requirements?

• A.Make sure that the ERP system can validate the JWT assertion in the HTTP requests.
• B.Make sure that the ERP system can validate the identity headers in the HTTP requests.
• C.Make sure that the ERP system can validate the x-forwarded-for headers in the HTTP requests.
• D.Make sure that the ERP system can validate the user's unique identifier headers in the HTTP requests.

Comment: *

Name: *

Email: *

Verification: *