You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization. Which solution should you implement proactively to achieve this goal with the least operational overhead?

• A.Create an hourly cron job to run a Cloud Function that finds public buckets and makes them private.
• B.Enable the constraints/storage.publicAccessPrevention constraint at the organization level.
• C.Enable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.
• D.Create a VPC Service Controls perimeter that protects the storage.googleapis.com service in your projects that contains buckets. Add any new project that contains a bucket to the perimeter.

Comment: *

Name: *

Email: *

Verification: *

A database administrator notices malicious activities within their Cloud SQL instance. The database administrator wants to monitor the API calls that read the configuration or metadata of resources. Which logs should the database administrator review?

• A.Admin Activity
• B.System Event
• C.Access Transparency
• D.Data Access

Comment: *

Name: *

Email: *

Verification: *

A company is deploying their application on Google Cloud Platform. Company policy requires long-term data to be stored using a solution that can automatically replicate data over at least two geographic places.
Which Storage solution are they allowed to use?

• A.Cloud Bigtable
• B.Cloud BigQuery
• C.Compute Engine SSD Disk
• D.Compute Engine Persistent Disk

Comment: *

Name: *

Email: *

Verification: *

A large e-retailer is moving to Google Cloud Platform with its ecommerce website. The company wants to ensure payment information is encrypted between the customer's browser and GCP when the customers checkout online.
What should they do?

• A.Configure an SSL Certificate on an L7 Load Balancer and require encryption.
• B.Configure an SSL Certificate on a Network TCP Load Balancer and require encryption.
• C.Configure the firewall to allow inbound traffic on port 443, and block all other inbound traffic.
• D.Configure the firewall to allow outbound traffic on port 443, and block all other outbound traffic.

Comment: *

Name: *

Email: *

Verification: *

A database administrator notices malicious activities within their Cloud SQL instance. The database administrator wants to monitor the API calls that read the configuration or metadata of resources. Which logs should the database administrator review?

• A.Admin Activity
• B.Data Access
• C.System Event
• D.Access Transparency

Comment: *

Name: *

Email: *

Verification: *