When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

• A.Use many container image layers to hide sensitive information.
• B.Use public container images as a base image for the app.
• C.Ensure that the app does not run as PID 1.
• D.Package a single app as a container.
• E.Remove any unnecessary tools not needed by the app.

Comment: *

Name: *

Email: *

Verification: *

Your privacy team uses crypto-shredding (deleting encryption keys) as a strategy to delete personally identifiable information (PII). You need to implement this practice on Google Cloud while still utilizing the majority of the platform's services and minimizing operational overhead. What should you do?

• A.Use client-side encryption before sending data to Google Cloud, and delete encryption keys on-premises
• B.Use Cloud External Key Manager to delete specific encryption keys.
• C.Use customer-managed encryption keys to delete specific encryption keys.
• D.Use Google default encryption to delete specific encryption keys.

Comment: *

Name: *

Email: *

Verification: *

In order to meet PCI DSS requirements, a customer wants to ensure that all outbound traffic is authorized.
Which two cloud offerings meet this requirement without additional compensating controls?
(Choose two.)

• A.App Engine
• B.Cloud Functions
• C.Compute Engine
• D.Google Kubernetes Engine
• E.Cloud Storage

Comment: *

Name: *

Email: *

Verification: *

You are routing all your internet facing traffic from Google Cloud through your on-premises internet connection. You want to accomplish this goal securely and with the highest bandwidth possible.
What should you do?

• A.Create a routing VM in Compute Engine Configure the default route with the VM as the next hop.
• B.Configure Cloud Interconnect with HA VPN Replace the default 0 0 0 0/0 route to an on-premises destination.
• C.Create an HA VPN connection to Google Cloud Replace the default 0 0 0 0/0 route.
• D.Configure Cloud Interconnect and route traffic through an on-premises firewall.

Comment: *

Name: *

Email: *

Verification: *

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

• A.Ensure that the app does not run as PID 1.
• B.Package a single app as a container.
• C.Remove any unnecessary tools not needed by the app.
• D.Use public container images as a base image for the app.
• E.Use many container image layers to hide sensitive information.

Comment: *

Name: *

Email: *

Verification: *