A customer is collaborating with another company to build an application on Compute Engine. The customer is building the application tier in their GCP Organization, and the other company is building the storage tier in a different GCP Organization. This is a 3-tier web application. Communication between portions of the application must not traverse the public internet by any means.
Which connectivity option should be implemented?

• A.VPC peering
• B.Cloud VPN
• C.Cloud Interconnect
• D.Shared VPC

Comment: *

Name: *

Email: *

Verification: *

A customer has an analytics workload running on Compute Engine that should have limited internet access.
Your team created an egress firewall rule to deny (priority 1000) all traffic to the internet.
The Compute Engine instances now need to reach out to the public repository to get security updates.
What should your team do?

• A.Create an egress firewall rule to allow traffic to the hostname of the repository with a priority greater than 1000.
• B.Create an egress firewall rule to allow traffic to the hostname of the repository with a priority less than 1000.
• C.Create an egress firewall rule to allow traffic to the CIDR range of the repository with a priority greater than 1000.
• D.Create an egress firewall rule to allow traffic to the CIDR range of the repository with a priority less than 1000.

Comment: *

Name: *

Email: *

Verification: *

You are part of a security team investigating a compromised service account key. You need to audit which new resources were created by the service account.
What should you do?

• A.Query Data Access logs.
• B.Query Admin Activity logs.
• C.Query Access Transparency logs.
• D.Query Stackdriver Monitoring Workspace.

Comment: *

Name: *

Email: *

Verification: *

You need to enable VPC Service Controls and allow changes to perimeters in existing environments without preventing access to resources. Which VPC Service Controls mode should you use?

• A.Cloud Run
• B.Native
• C.Enforced
• D.Dry run

Comment: *

Name: *

Email: *

Verification: *

Your company conducts clinical trials and needs to analyze the results of a recent study that are stored in BigQuery. The interval when the medicine was taken contains start and stop dates The interval data is critical to the analysis, but specific dates may identify a particular batch and introduce bias You need to obfuscate the start and end dates for each row and preserve the interval data.
What should you do?

• A.Use bucketing to shift values to a predetermined date based on the initial value.
• B.Extract the date using TimePartConfig from each date field and append a random month and year
• C.Use date shifting with the context set to the unique ID of the test subject
• D.Use the FFX mode of format preserving encryption (FPE) and maintain data consistency

Comment: *

Name: *

Email: *

Verification: *