A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *

Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which two methods should you use? (Choose two.)

• A.Split your BigQuery data warehouse into multiple data warehouses for each business unit.
• B.Split the users from business units to multiple projects.
• C.Create separate copies of your BigQuery data warehouse for each business unit.
• D.Apply a user- or project-level custom query quota for BigQuery data warehouse.
• E.Change your BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.

Comment: *

Name: *

Email: *

Verification: *

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?

• A.Use Binary Authorization and whitelist only the container images used by your customers' Pods.
• B.Use the Container Analysis API to detect vulnerabilities in the containers used by your customers' Pods.
• C.Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers' Pods.
• D.Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods.

Comment: *

Name: *

Email: *

Verification: *

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.
What should you do?

• A.Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.
• B.Use gcloud to create the new project, and then deploy your application to the new project.
• C.Use gcloud to create the new project and to copy the deployed application to the new project.
• D.Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.

Comment: *

Name: *

Email: *

Verification: *

You need to create a new development Kubernetes cluster with 4 nodes. The cluster will be named linux- academy-dev-cluster. Which of the following truncated commands will create a cluster?

• A.gcloud container clusters create linux-academy-dev-cluster 4
• B.kubectl clusters create linux-academy-dev-cluster 4
• C.kubectl clusters create linux-academy-dev-cluster --num-nodes 4
• D.gcloud container clusters create linux-academy-dev- cluster --num-nodes 4

Comment: *

Name: *

Email: *

Verification: *