Your team wants to make sure Compute Engine instances running in your production project do not have public IP addresses. The frontend application Compute Engine instances will require public IPs. The product engineers have the Editor role to modify resources. Your team wants to enforce this requirement.
How should your team meet these requirements?

• A.Enable Private Access on the VPC network in the production project.
• B.Set up a VPC network with two subnets: one with public IPs and one without public IPs.
• C.Remove the Editor role and grant the Compute Admin IAM role to the engineers.
• D.Set up an organization policy to only permit public IPs for the front-end Compute Engine instances.

Comment: *

Name: *

Email: *

Verification: *

A patch for a vulnerability has been released, and a DevOps team needs to update their running containers in Google Kubernetes Engine (GKE).
How should the DevOps team accomplish this?

• A.Use Puppet or Chef to push out the patch to the running container.
• B.Verify that auto upgrade is enabled; if so, Google will upgrade the nodes in a GKE cluster.
• C.Update the application code or apply a patch, build a new image, and redeploy it.
• D.Configure containers to automatically upgrade when the base image is available in Container Registry.

Comment: *

Name: *

Email: *

Verification: *

A company is deploying their application on Google Cloud Platform. Company policy requires long-term data to be stored using a solution that can automatically replicate data over at least two geographic places.
Which Storage solution are they allowed to use?

• A.Cloud BigQuery
• B.Cloud Bigtable
• C.Compute Engine SSD Disk
• D.Compute Engine Persistent Disk

Comment: *

Name: *

Email: *

Verification: *

A customer wants to make it convenient for their mobile workforce to access a CRM web interface that is hosted on Google Cloud Platform (GCP). The CRM can only be accessed by someone on the corporate network. The customer wants to make it available over the internet. Your team requires an authentication layer in front of the application that supports two-factor authentication Which GCP product should the customer implement to meet these requirements?

• A.Cloud VPN
• B.Cloud Endpoints
• C.Cloud Armor
• D.Cloud Identity-Aware Proxy

Comment: *

Name: *

Email: *

Verification: *

A company allows every employee to use Google Cloud Platform. Each department has a Google Group, with all department members as group members. If a department member creates a new project, all members of that department should automatically have read-only access to all new project resources. Members of any other department should not have access to the project. You need to configure this behavior.
What should you do to meet these requirements?

• A.Create a Folder per department under the Organization. For each department's Folder, assign the Project Browser role to the Google Group related to that department.
• B.Create a Folder per department under the Organization. For each department's Folder, assign the Project Viewer role to the Google Group related to that department.
• C.Create a Project per department under the Organization. For each department's Project, assign the Project Browser role to the Google Group related to that department.
• D.Create a Project per department under the Organization. For each department's Project, assign the Project Viewer role to the Google Group related to that department.

Comment: *

Name: *

Email: *

Verification: *