You have numerous private virtual machines on Google Cloud. You occasionally need to manage the servers through Secure Socket Shell (SSH) from a remote location. You want to configure remote access to the servers in a manner that optimizes security and cost efficiency.
What should you do?

• A.Create a firewall rule to allow access from the Identity-Aware Proxy (IAP) IP range Grant the role of an IAP- secured Tunnel User to the administrators.
• B.Create a jump host instance with public IP Manage the instances by connecting through the jump host.
• C.Configure server instances with public IP addresses Create a firewall rule to only allow traffic from your corporate IPs.
• D.Create a site-to-site VPN from your corporate network to Google Cloud.

Comment: *

Name: *

Email: *

Verification: *

A customer deployed an application on Compute Engine that takes advantage of the elastic nature of cloud computing.
How can you work with Infrastructure Operations Engineers to best ensure that Windows Compute Engine VMs are up to date with all the latest OS patches?

• A.Federate a Domain Controller into Compute Engine, and roll out weekly patches via Group Policy Object.
• B.Reboot all VMs during the weekly maintenance window and allow the StartUp Script to download the latest patches from the internet.
• C.Use Deployment Manager to provision updated VMs into new serving Instance Groups (IGs).
• D.Build new base images when patches are available, and use a CI/CD pipeline to rebuild VMs, deploying incrementally.

Comment: *

Name: *

Email: *

Verification: *

Your company's Chief Information Security Officer (CISO) creates a requirement that business data must be stored in specific locations due to regulatory requirements that affect the company's global expansion plans.
After working on the details to implement this requirement, you determine the following:
The services in scope are included in the Google Cloud Data Residency Terms.
The business data remains within specific locations under the same organization.
The folder structure can contain multiple data residency locations.
You plan to use the Resource Location Restriction organization policy constraint. At which level in the resource hierarchy should you set the constraint?

• A.Folder
• B.Resource
• C.Project
• D.Organization

Comment: *

Name: *

Email: *

Verification: *

You are asked to recommend a solution to store and retrieve sensitive configuration data from an application that runs on Compute Engine. Which option should you recommend?

• A.Cloud Key Management Service
• B.Compute Engine guest attributes
• C.Compute Engine custom metadata
• D.Secret Manager

Comment: *

Name: *

Email: *

Verification: *

Users are reporting an outage on your public-facing application that is hosted on Compute Engine. You suspect that a recent change to your firewall rules is responsible. You need to test whether your firewall rules are working properly. What should you do?

• A.Enable Firewall Rules Logging on the latest rules that were changed. Use Logs Explorer to analyze whether the rules are working correctly.
• B.Enable VPC Flow Logs in your VPC. Use Logs Explorer to analyze whether the rules are working correctly.
• C.Connect to a bastion host in your VPC. Use a network traffic analyzer to determine at which point your requests are being blocked.
• D.In a pre-production environment, disable all firewall rules individually to determine which one is blocking user traffic.

Comment: *

Name: *

Email: *

Verification: *