You are the security admin of your company. You have 3,000 objects in your Cloud Storage bucket. You do not want to manage access to each object individually. You also do not want the uploader of an object to always have full control of the object. However, you want to use Cloud Audit Logs to manage access to your bucket.
What should you do?

• A.Set up an ACL with OWNER permission to a scope of allUsers.
• B.Set up an ACL with READER permission to a scope of allUsers.
• C.Set up a default bucket ACL and manage access for users using IAM.
• D.Set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.

Comment: *

Name: *

Email: *

Verification: *

Your team needs to obtain a unified log view of all development cloud projects in your SIEM. The development projects are under the NONPROD organization folder with the test and pre-production projects.
The development projects share the ABC-BILLING billing account with the rest of the organization.
Which logging export strategy should you use to meet the requirements?

• A.1. Export logs to a Cloud Pub/Sub topic with folders/NONPROD parent and includeChildren property set to True in a dedicated SIEM project.
  2.Subscribe SIEM to the topic.
• B.1. Create a Cloud Storage sink with billingAccounts/ABC-BILLING parent and includeChildren property set to False in a dedicated SIEM project.
  2.Process Cloud Storage objects in SIEM.
• C.1. Export logs in each dev project to a Cloud Pub/Sub topic in a dedicated SIEM project.
  2.Subscribe SIEM to the topic.
• D.1. Create a Cloud Storage sink with a publicly shared Cloud Storage bucket in each project.
  2.Process Cloud Storage objects in SIEM.

Comment: *

Name: *

Email: *

Verification: *

Your company is using GSuite and has developed an application meant for internal usage on Google App Engine. You need to make sure that an external user cannot gain access to the application even when an employee's password has been compromised.
What should you do?

• A.Enforce 2-factor authentication in GSuite for all users.
• B.Configure Cloud Identity-Aware Proxy for the App Engine Application.
• C.Provision user passwords using GSuite Password Sync.
• D.Configure Cloud VPN between your private network and GCP.

Comment: *

Name: *

Email: *

Verification: *

An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its ongoing data backup and disaster recovery solutions to GCP. The organization's on-premises production environment is going to be the next phase for migration to GCP. Stable networking connectivity between the on-premises environment and GCP is also being implemented.
Which GCP solution should the organization use?

• A.BigQuery using a data pipeline job with continuous updates via Cloud VPN
• B.Cloud Storage using a scheduled task and gsutil via Cloud Interconnect
• C.Compute Engines Virtual Machines using Persistent Disk via Cloud Interconnect
• D.Cloud Datastore using regularly scheduled batch upload jobs via Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.
Which solution meets the organization's requirements?

• A.Google Cloud Directory Sync (GCDS)
• B.Cloud Identity
• C.Security Assertion Markup Language (SAML)
• D.Pub/Sub

Comment: *

Name: *

Email: *

Verification: *