You have designed a solution on Google Cloud Platform (GCP) that uses multiple GCP products.
Your company has asked you to estimate the costs of the solution.
You need to provide estimates for the monthly total cost. What should you do?

• A.Provision the solution on GCP. Leave the solution provisioned for 1 week.
  Use Stackdriver to determine the provisioned and used resource amounts.
  Multiply the 1 week cost to determine the monthly costs.
• B.Provision the solution on GCP. Leave the solution provisioned for 1 week.
  Navigate to the Billing Report page in the Google Cloud Platform Console.
  Multiply the 1 week cost to determine the monthly costs.
• C.For each GCP product in the solution, review the pricing details on the products pricing page.
  Create a Google Sheet that summarizes the expected monthly costs for each product.
• D.For each GCP product in the solution, review the pricing details on the products pricing page.
  Use the pricing calculator to total the monthly costs for each GCP product.

Comment: *

Name: *

Email: *

Verification: *

You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

• A.In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
• B.Create a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
• C.Create a custom log-based metric for the specific error to be used in an Alerting Policy.
• D.Grant Project Owner access to the Service Account.

Comment: *

Name: *

Email: *

Verification: *

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices.
What should you do?

• A.Create a service account with an access scope.
  Use the access scope `https://www.googleapis.com/ auth/devstorage.write_only'.
• B.Create a service account and add it to the IAM role `storage.objectCreator' for that bucket.
• C.Create a service account with an access scope.
  Use the access scope `https://www.googleapis.com/ auth/cloud-platform'.
• D.Create a service account and add it to the IAM role `storage.objectAdmin' for that bucket.

Comment: *

Name: *

Email: *

Verification: *

Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?

• A.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #2 service account
  * Source filter: all instances with tier #1 service account
  * Protocols: allow TCP:8080
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #3 service account
  * Source filter: all instances with tier #2 service account
  * Protocols: allow TCP: 8080
• B.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #2 service account
  * Source filter: all instances with tier #1 service account
  * Protocols: allow all
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #3 service account
  * Source filter: all instances with tier #2 service account
  * Protocols: allow all
• C.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.2.0/24)
  * Protocols: allow all
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.1.0/24)
  * Protocols: allow all
• D.1. Create an egress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.2.0/24)
  * Protocols: allow TCP: 8080
  2. Create an egress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.1.0/24)
  * Protocols: allow TCP: 8080

Comment: *

Name: *

Email: *

Verification: *

You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google's recommended practices and avoid conflicting accounts. What should you do?

• A.Tell the user to remove all personal email from the existing account
• B.Tell the user that they must delete their existing account
• C.Invite the user to use an email alias to resolve the conflict
• D.Invite the user to transfer their existing account

Comment: *

Name: *

Email: *

Verification: *