You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

• A.Configure an HTTP(S) load balancer.
• B.Configure an internal TCP load balancer.
• C.Configure an external SSL proxy load balancer.
• D.Configure an external TCP proxy load balancer.

Comment: *

Name: *

Email: *

Verification: *

Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

• A.Ask the auditor for their Google account, and give them the Viewer role on the project.
• B.Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
• C.Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
• D.Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.

Comment: *

Name: *

Email: *

Verification: *

You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

• A.Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
• B.Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
• C.Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
• D.Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

Comment: *

Name: *

Email: *

Verification: *

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?

• A.10.0.0.0/8
• B..00.0.0/0
• C.172.16.0.0/12
• D.192.168.0.0/16
  https://cloud.google.com/vpc/docs/vpc#manually_created_subnet_ip_ranges

Comment: *

Name: *

Email: *

Verification: *

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *