Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

• A.Add your SREs to a group and then add this group to roles/iam roleAdmin role.
• B.Add your SREs to a group and then add this group to roles/accessapproval approver role.
• C.Add your SREs to roles/iam.roleAdmin role.
• D.Add your SREs to roles/accessapproval approver role.

Comment: *

Name: *

Email: *

Verification: *

You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

• A.Navigate to Stackdriver Logging and select resource.labels.project_id="*"
• B.Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset.
  Configure the table expiration to 60 days.
• C.Create a Stackdriver Logging Export with a Sink destination to Cloud Storage.
  Create a lifecycle rule to delete objects after 60 days.
• D.Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery.
  Configure the table expiration to 60 days.

Comment: *

Name: *

Email: *

Verification: *

You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

• A.Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.
• B.Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.
• C.Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.
• D.Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.

Comment: *

Name: *

Email: *

Verification: *

You've created a bucket to store some data archives for compliance. The data isn't likely to need to be viewed. However, you need to store it for at least 7 years. What is the best default storage class?

• A.Coldline
• B.Nearline
• C.Regional
• D.Multi-regional

Comment: *

Name: *

Email: *

Verification: *

Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?

• A.1. Create an egress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.2.0/24)
  * Protocols: allow TCP: 8080
  2. Create an egress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.1.0/24)
  * Protocols: allow TCP: 8080
• B.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #2 service account
  * Source filter: all instances with tier #1 service account
  * Protocols: allow all
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #3 service account
  * Source filter: all instances with tier #2 service account
  * Protocols: allow all
• C.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.2.0/24)
  * Protocols: allow all
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances
  * Source filter: IP ranges (with the range set to 10.0.1.0/24)
  * Protocols: allow all
• D.1. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #2 service account
  * Source filter: all instances with tier #1 service account
  * Protocols: allow TCP:8080
  2. Create an ingress firewall rule with the following settings:
  * Targets: all instances with tier #3 service account
  * Source filter: all instances with tier #2 service account
  * Protocols: allow TCP: 8080

Comment: *

Name: *

Email: *

Verification: *