An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its ongoing data backup and disaster recovery solutions to GCP. The organization's on-premises production environment is going to be the next phase for migration to GCP. Stable networking connectivity between the on-premises environment and GCP is also being implemented.
Which GCP solution should the organization use?

• A.Cloud Storage using a scheduled task and gsutil via Cloud Interconnect
• B.BigQuery using a data pipeline job with continuous updates via Cloud VPN
• C.Compute Engines Virtual Machines using Persistent Disk via Cloud Interconnect
• D.Cloud Datastore using regularly scheduled batch upload jobs via Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

Your team wants to centrally manage GCP IAM permissions from their on-premises Active Directory Service. Your team wants to manage permissions by AD group membership.
What should your team do to meet these requirements?

• A.Set up Cloud Directory Sync to sync groups, and set IAM permissions on the groups.
• B.Use the Admin SDK to create groups and assign IAM permissions from Active Directory.
• C.Use the Cloud Identity and Access Management API to create groups and IAM permissions from Active Directory.
• D.Set up SAML 2.0 Single Sign-On (SSO), and assign IAM permissions to the groups.

Comment: *

Name: *

Email: *

Verification: *

You are a security engineer at a finance company. Your organization plans to store data on Google Cloud, but your leadership team is worried about the security of their highly sensitive data Specifically, your company is concerned about internal Google employees' ability to access your company's data on Google Cloud. What solution should you propose?

• A.Use customer-managed encryption keys.
• B.Use Google's Identity and Access Management (IAM) service to manage access controls on Google Cloud.
• C.Enable Admin activity logs to monitor access to resources.
• D.Enable Access Transparency logs with Access Approval requests for Google employees.

Comment: *

Name: *

Email: *

Verification: *

Your company's cloud security policy dictates that VM instances should not have an external IP address. You need to identify the Google Cloud service that will allow VM instances without external IP addresses to connect to the internet to update the VMs. Which service should you use?

• A.Identity Aware-Proxy
• B.Cloud NAT
• C.TCP/UDP Load Balancing
• D.Cloud DNS

Comment: *

Name: *

Email: *

Verification: *

Your company is storing files on Cloud Storage. To comply with local regulations, you want to ensure that uploaded files cannot be deleted within the first 5 years. It should not be possible to lower the retention period after it has been set. What should you do?

• A.Apply a retention period of 5 years to the bucket, and lock the bucket.
• B.Enable Temporary hold and apply a retention period of 5 years to the bucket.
• C.Use Cloud IAM to ensure that nobody has an IAM role that has the permissions to delete files from Cloud Storage.
• D.Create an object lifecycle rule using the Age condition and the Delete action. Set the Age condition to 5 years.

Comment: *

Name: *

Email: *

Verification: *