Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

• A.Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
• B.Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
• C.Ask the auditor for their Google account, and give them the Viewer role on the project.
• D.Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.

Comment: *

Name: *

Email: *

Verification: *

You have an application that uses Cloud Spanner as a backend database. The application has a very predictable traffic pattern. You want to automatically scale up or down the number of Spanner nodes depending on traffic. What should you do?

• A.Create a cron job that runs on a scheduled basis to review stackdriver monitoring metrics, and then resize the Spanner instance accordingly.
• B.Create a Stackdriver alerting policy to send an alert to oncall SRE emails when Cloud Spanner CPU exceeds the threshold. SREs would scale resources up or down accordingly.
• C.Create a Stackdriver alerting policy to send an alert to Google Cloud Support email when Cloud Spanner CPU exceeds your threshold. Google support would scale resources up or down accordingly.
• D.Create a Stackdriver alerting policy to send an alert to webhook when Cloud Spanner CPU is over or under your threshold. Create a Cloud Function that listens to HTTP and resizes Spanner resources accordingly.

Comment: *

Name: *

Email: *

Verification: *

Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?

• A.Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
• B.Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
• C.Use gcloud container clusters upgrade. Deploy the new services.
• D.Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.

Comment: *

Name: *

Email: *

Verification: *

You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?

• A.Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches
  45% Use database query statistics to
  identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage
• B.Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
• C.Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
• D.Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.

Comment: *

Name: *

Email: *

Verification: *

You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

• A.Review details of the myapp-service Service object and check for error messages.
• B.Review details of the myapp-deployment Deployment object and check for error messages.
• C.Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
• D.View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

Comment: *

Name: *

Email: *

Verification: *