You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A.Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• B.Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• C.Store the database password inside the Docker image of the container, not in the YAML file.
• D.Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Comment: *

Name: *

Email: *

Verification: *

Your development team has asked you to set up an external TCP load balancer with SSL offload. Which load balancer should you use?

• A.TCP proxy
• B.SSL proxy
• C.HTTPS load balancer
• D.HTTP load balancer

Comment: *

Name: *

Email: *

Verification: *

You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region.
This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

• A.1. Create a VPC and a subnetwork in europe-west1.
  2. Peer the 2 VPCs.
  3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• B.1. Create a subnetwork in the same VPC, in europe-west1.
  2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• C.1. Create a subnetwork in the same VPC, in europe-west1.
  2. Use Cloud VPN to connect the two subnetworks.
  3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• D.1. Create a VPC and a subnetwork in europe-west1.
  2. Expose the application with an internal load balancer.
  3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.

Comment: *

Name: *

Email: *

Verification: *

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination.
What should you do?

• A.View System Event Logs in Stackdriver. Search for the service account associated with the user.
• B.View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
• C.View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
• D.View System Event Logs in Stackdriver. Search for the user's email as the principal.

Comment: *

Name: *

Email: *

Verification: *

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

• A.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
• B.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
• C.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
• D.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.

Comment: *

Name: *

Email: *

Verification: *