A legacy application running in premises requires a Solutions Architect to be able to open a firewall to allow access to several Amazon S3 buckets. The Architect has a VPN connection to AWS in place.
How should the Architect meet this requirement?

• A.Create an IAM role that allows access from the corporate network to Amazon S3.
• B.Configure IP whitelisting on the customer's gateway.
• C.Configure a proxy on Amazon EC2 and use an Amazon S3 VPC endpoint.
• D.Use Amazon API Gateway to do IP whitelisting.

Comment: *

Name: *

Email: *

Verification: *

A customer has a legacy application with a large amount of data. The files accessed by the application are approximately 10 GB each, but are rarely accessed. However, when files are accessed, they are retrieved sequentially. The customer is migrating the application to AWS and would like to use Amazon EC2 and Amazon EBS.
What is the Least expensive EBS volume type for this use case?

• A.Cold HDD (sc1)
• B.Provisioned IOPS SSD (io1)
• C.General Purpose SSD (gp2)
• D.Throughput Optimized HDD (st1)

Comment: *

Name: *

Email: *

Verification: *

Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects.
What should you do?

• A.Add the user to roles/iam.roleAdmin role.
• B.Add the user to roles/iam.securityAdmin role.
• C.Add the user to roles/iam.serviceAccountUser role.
• D.Add the user to roles/iam.serviceAccountAdmin role.

Comment: *

Name: *

Email: *

Verification: *

Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

• A.1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.
• B.1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.
• C.1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.
• D.1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.

Comment: *

Name: *

Email: *

Verification: *

You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?

• A.Navigate to Stackdriver Logging and select resource.labels.project_id="*"
• B.Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
• C.Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
• D.Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.

Comment: *

Name: *

Email: *

Verification: *