You are a consultant for an organization that is considering migrating their data from its private cloud to Google Cloud. The organization's compliance team is not familiar with Google Cloud and needs guidance on how compliance requirements will be met on Google Cloud. One specific compliance requirement is for customer data at rest to reside within specific geographic boundaries. Which option should you recommend for the organization to meet their data residency requirements on Google Cloud?

• A.Organization Policy Service constraints
• B.Shielded VM instances
• C.Access control lists
• D.Geolocation access controls
• E.Google Cloud Armor

Comment: *

Name: *

Email: *

Verification: *

An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its ongoing data backup and disaster recovery solutions to GCP. The organization's on-premises production environment is going to be the next phase for migration to GCP. Stable networking connectivity between the on-premises environment and GCP is also being implemented.
Which GCP solution should the organization use?

• A.BigQuery using a data pipeline job with continuous updates via Cloud VPN
• B.Cloud Storage using a scheduled task and gsutil via Cloud Interconnect
• C.Compute Engines Virtual Machines using Persistent Disk via Cloud Interconnect
• D.Cloud Datastore using regularly scheduled batch upload jobs via Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

Last week, a company deployed a new App Engine application that writes logs to BigQuery. No other workloads are running in the project. You need to validate that all data written to BigQuery was done using the App Engine Default Service Account.
What should you do?

• A.1. In BigQuery, select the related dataset.
  2. Make sure the App Engine Default Service Account is the only account that can write to the dataset.
• B.1. Use StackDriver Logging and filter on BigQuery Insert Jobs.
  2. Click on the email address in line with the App Engine Default Service Account in the authentication field.
  3. Click Show Matching Entries.
  4. Make sure the resulting list is empty.
• C.1. Go to the IAM section on the project.
  2. Validate that the App Engine Default Service Account is the only account that has a role that can write to BigQuery.
  Section: (none)
  Explanation
• D.1. Use StackDriver Logging and filter on BigQuery Insert Jobs.
  2. Click on the email address in line with the App Engine Default Service Account in the authentication field.
  3. Click Hide Matching Entries.
  4. Make sure the resulting list is empty.

Comment: *

Name: *

Email: *

Verification: *

You are the Security Admin in your company. You want to synchronize all security groups that have an email address from your LDAP directory in Cloud IAM.
What should you do?

• A.Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have
  "user email address" as the attribute to facilitate one-way sync.
• B.Configure Google Cloud Directory Sync to sync security groups using LDAP search rules that have
  "user email address" as the attribute to facilitate bidirectional sync.
• C.Use a management tool to sync the subset based on the email address attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.
• D.Use a management tool to sync the subset based on group object class attribute. Create a group in the Google domain. A group created in a Google domain will automatically have an explicit Google Cloud Identity and Access Management (IAM) role.

Comment: *

Name: *

Email: *

Verification: *

An organization is migrating from their current on-premises productivity software systems to G Suite. Some network security controls were in place that were mandated by a regulatory body in their region for their previous on-premises system. The organization's risk team wants to ensure that network security controls are maintained and effective in G Suite. A security architect supporting this migration has been asked to ensure that network security controls are in place as part of the new shared responsibility model between the organization and Google Cloud.
What solution would help meet the requirements?

• A.Ensure that firewall rules are in place to meet the required controls.
• B.Set up Cloud Armor to ensure that network security controls can be managed for G Suite.
• C.Network security is a built-in solution and Google's Cloud responsibility for SaaS products like G Suite.
• D.Set up an array of Virtual Private Cloud (VPC) networks to control network security as mandated by the relevant regulation.

Comment: *

Name: *

Email: *

Verification: *