A company allows every employee to use Google Cloud Platform. Each department has a Google Group, with all department members as group members. If a department member creates a new project, all members of that department should automatically have read-only access to all new project resources. Members of any other department should not have access to the project. You need to configure this behavior.
What should you do to meet these requirements?

• A.Create a Project per department under the Organization. For each department's Project, assign the Project Browser role to the Google Group related to that department.
• B.Create a Project per department under the Organization. For each department's Project, assign the Project Viewer role to the Google Group related to that department.
• C.Create a Folder per department under the Organization. For each department's Folder, assign the Project Viewer role to the Google Group related to that department.
• D.Create a Folder per department under the Organization. For each department's Folder, assign the Project Browser role to the Google Group related to that department.

Comment: *

Name: *

Email: *

Verification: *

You are the security admin of your company. Your development team creates multiple GCP projects under the "implementation" folder for several dev, staging, and production workloads. You want to prevent data exfiltration by malicious insiders or compromised code by setting up a security perimeter. However, you do not want to restrict communication between the projects.
What should you do?

• A.Use a Shared VPC to enable communication between all projects, and use firewall rules to prevent data exfiltration.
• B.Create access levels in Access Context Manager to prevent data exfiltration, and use a shared VPC for communication between projects.
• C.Use an infrastructure-as-code software tool to set up a single service perimeter and to deploy a Cloud Function that monitors the "implementation" folder via Stackdriver and Cloud Pub/Sub. When the function notices that a new project is added to the folder, it executes Terraform to add the new project to the associated perimeter.
• D.Use an infrastructure-as-code software tool to set up three different service perimeters for dev, staging, and prod and to deploy a Cloud Function that monitors the "implementation" folder via Stackdriver and Cloud Pub/Sub. When the function notices that a new project is added to the folder, it executes Terraform to add the new project to the respective perimeter.

Comment: *

Name: *

Email: *

Verification: *

When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for review by internal or external analysts for customer service trend analysis.
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?

• A.Use Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.
• B.Use Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.
• C.Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.
• D.Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Comment: *

Name: *

Email: *

Verification: *

An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.
Which solution meets the organization's requirements?

• A.Google Cloud Directory Sync (GCDS)
• B.Cloud Identity
• C.Security Assertion Markup Language (SAML)
• D.Pub/Sub

Comment: *

Name: *

Email: *

Verification: *

A customer deploys an application to App Engine and needs to check for Open Web Application Security Project (OWASP) vulnerabilities.
Which service should be used to accomplish this?

• A.Cloud Armor
• B.Google Cloud Audit Logs
• C.Cloud Security Scanner
• D.Forseti Security

Comment: *

Name: *

Email: *

Verification: *