You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

• A.Download a JSON Private Key for the service account.
  On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine- service-account.
• B.When creating the VM via the web console, specify the service account under the `Identity and API Access' section.
• C.Download a JSON Private Key for the service account.
  After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine- service-account.json.
• D.Download a JSON Private Key for the service account.
  On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.

Comment: *

Name: *

Email: *

Verification: *

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

• A.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
• B.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
• C.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
• D.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.

Comment: *

Name: *

Email: *

Verification: *

You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

• A.Run gcloud projects describe <project ID> to verify the project value, and then run gcloud services list --available.
• B.Run gcloud info to view the account value, and then run gcloud services list --account <Account>.
• C.Run gcloud projects list to get the project ID, and then run gcloud services list --project <project ID>.
• D.Run gcloud init to set the current project to my-project, and then run gcloud services list --available.

Comment: *

Name: *

Email: *

Verification: *

Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

• A.Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
• B.Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
• C.Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
• D.Create an export to the sink that saves logs from Cloud Audit to BigQuery.

Comment: *

Name: *

Email: *

Verification: *

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

• A.Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
• B.Add the auditors group to two new custom IAM roles.
• C.Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
• D.Add the auditor user accounts to two new custom IAM roles.

Comment: *

Name: *

Email: *

Verification: *