You are creating a new infrastructure CI/CD pipeline to deploy hundreds of ephemeral projects in your Google Cloud organization to enable your users to interact with Google Cloud. You want to restrict theuse of the default networks in your organization while following Google-recommended best practices. What should you do?

• A.Enable theconstraints/compute.skipDefaultNetworkCreationorganization policy constraint at the organization level.
• B.Create a cron job to trigger a daily Cloud Function to automatically delete all default networks for each project.
• C.Grant your users the 1AM Owner role at the organization level. Create a VPC Service Controls perimeter around the project that restricts thecompute.googleapis.comAPI.
• D.Only allow your users to use your CI/CD pipeline with a predefined set of infrastructure templates they can deploy to skip the creation of the default networks.

Comment: *

Name: *

Email: *

Verification: *

An organization's security and risk management teams are concerned about where their responsibility lies for certain production workloads they are running in Google Cloud Platform (GCP), and where Google's responsibility lies. They are mostly running workloads using Google Cloud's Platform-as-a-Service (PaaS) offerings, including App Engine primarily.
Which one of these areas in the technology stack would they need to focus on as their primary responsibility when using App Engine?

• A.Configuring and monitoring VPC Flow Logs
• B.Defending against XSS and SQLi attacks
• C.Manage the latest updates and security patches for the Guest OS
• D.Encrypting all stored data

Comment: *

Name: *

Email: *

Verification: *

You want to limit the images that can be used as the source for boot disks. These images will be stored in a dedicated project.
What should you do?

• A.Use the Organization Policy Service to create a compute.trustedimageProjects constraint on the organization level. List the trusted project as the whitelist in an allow operation.
• B.Use the Organization Policy Service to create a compute.trustedimageProjects constraint on the organization level. List the trusted projects as the exceptions in a deny operation.
• C.In Resource Manager, edit the project permissions for the trusted project. Add the organization as member with the role: Compute Image User.
• D.In Resource Manager, edit the organization permissions. Add the project ID as member with the role:
  Compute Image User.

Comment: *

Name: *

Email: *

Verification: *

You need to connect your organization's on-premises network with an existing Google Cloud environment that includes one Shared VPC with two subnets named Production and Non-Production. You are required to:
Use a private transport link.
Configure access to Google Cloud APIs through private API endpoints originating from on-premises environments.
Ensure that Google Cloud APIs are only consumed via VPC Service Controls.
What should you do?

• A.1. Set up a Cloud VPN link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted googleapis.com domains in on-premises DNS configurations.
• B.1. Set up a Partner Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the private.googleapis.com domains in on-premises DNS configurations.
• C.1. Set up a Direct Peering link between the on-premises environment and Google Cloud.
  2. Configure private access for both VPC subnets.
• D.1. Set up a Dedicated Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted.googleapis.com domains in on-premises DNS configurations.

Comment: *

Name: *

Email: *

Verification: *

You are a consultant for an organization that is considering migrating their data from its private cloud to Google Cloud. The organization's compliance team is not familiar with Google Cloud and needs guidance on how compliance requirements will be met on Google Cloud. One specific compliance requirement is for customer data at rest to reside within specific geographic boundaries. Which option should you recommend for the organization to meet their data residency requirements on Google Cloud?

• A.Organization Policy Service constraints
• B.Shielded VM instances
• C.Access control lists
• D.Geolocation access controls
• E.Google Cloud Armor

Comment: *

Name: *

Email: *

Verification: *