A customer has 300 engineers. The company wants to grant different levels of access and efficiently manage IAM permissions between users in the development and production environment projects.
Which two steps should the company take to meet these requirements? (Choose two.)

• A.Create projects for each environment, and grant IAM rights to each engineering user.
• B.Create a project with multiple VPC networks for each environment.
• C.Create a folder for each development and production environment.
• D.Create an Organizational Policy constraint for each folder environment.
• E.Create a Google Group for the Engineering team, and assign permissions at the folder level.

Comment: *

Name: *

Email: *

Verification: *

You need to connect your organization's on-premises network with an existing Google Cloud environment that includes one Shared VPC with two subnets named Production and Non-Production. You are required to:
Use a private transport link.
Configure access to Google Cloud APIs through private API endpoints originating from on-premises environments.
Ensure that Google Cloud APIs are only consumed via VPC Service Controls.
What should you do?

• A.1. Set up a Cloud VPN link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted googleapis.com domains in on-premises DNS configurations.
• B.1. Set up a Partner Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the private.googleapis.com domains in on-premises DNS configurations.
• C.1. Set up a Dedicated Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted.googleapis.com domains in on-premises DNS configurations.
• D.1. Set up a Direct Peering link between the on-premises environment and Google Cloud.
  2. Configure private access for both VPC subnets.

Comment: *

Name: *

Email: *

Verification: *

You are in charge of migrating a legacy application from your company datacenters to GCP before the current maintenance contract expires. You do not know what ports the application is using and no documentation is available for you to check. You want to complete the migration without putting your environment at risk.
What should you do?

• A.Migrate the application into an isolated project using a "Lift & Shift" approach. Enable all internal TCP traffic using VPC Firewall rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.
• B.Refactor the application into a micro-services architecture hosted in Cloud Functions in an isolated project.
  Disable all traffic from outside your project using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.
• C.Migrate the application into an isolated project using a "Lift & Shift" approach in a custom network. Disable all traffic within the VPC and look at the Firewall logs to determine what traffic should be allowed for the application to work properly.
• D.Refactor the application into a micro-services architecture in a GKE cluster. Disable all traffic from outside the cluster using Firewall Rules. Use VPC Flow logs to determine what traffic should be allowed for the application to work properly.

Comment: *

Name: *

Email: *

Verification: *

An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its current data backup and disaster recovery solutions to GCP for later analysis. The organization's production environment will remain on-premises for an indefinite time. The organization wants a scalable and cost-efficient solution.
Which GCP solution should the organization use?

• A.Cloud Datastore using regularly scheduled batch upload jobs
• B.Compute Engine Virtual Machines using Persistent Disk
• C.BigQuery using a data pipeline job with continuous updates
• D.Cloud Storage using a scheduled task and gsutil

Comment: *

Name: *

Email: *

Verification: *

An organization's security and risk management teams are concerned about where their responsibility lies for certain production workloads they are running in Google Cloud Platform (GCP), and where Google's responsibility lies. They are mostly running workloads using Google Cloud's Platform-as-a-Service (PaaS) offerings, including App Engine primarily.
Which one of these areas in the technology stack would they need to focus on as their primary responsibility when using App Engine?

• A.Defending against XSS and SQLi attacks
• B.Configuring and monitoring VPC Flow Logs
• C.Manage the latest updates and security patches for the Guest OS
• D.Encrypting all stored data

Comment: *

Name: *

Email: *

Verification: *