An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

• A.View System Event Logs in Stackdriver. Search for the user's email as the principal.
• B.View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
• C.View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
• D.View System Event Logs in Stackdriver. Search for the service account associated with the user.

Comment: *

Name: *

Email: *

Verification: *

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?

• A.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
  2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
  3. Peer the two VPCs together.
  4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• B.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
  2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
  3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• C.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
  2. Set the service's externalTrafficPolicy to Cluster.
  3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• D.1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
  2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
  3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
  4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

Comment: *

Name: *

Email: *

Verification: *

You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible.
You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?

• A.1. Create a configuration for each project you need to manage.
  2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• B.1. Create a configuration for each project you need to manage.
  2. Use gcloud init to update the configuration values when you need to work with a non-default project
• C.1. Use the default configuration for one project you need to manage.
  2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• D.1. Use the default configuration for one project you need to manage.
  2. Use gcloud init to update the configuration values when you need to work with a non-default project.

Comment: *

Name: *

Email: *

Verification: *

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

• A.Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
• B.Add the auditors group to two new custom IAM roles.
• C.Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
• D.Add the auditor user accounts to two new custom IAM roles.

Comment: *

Name: *

Email: *

Verification: *

You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?

• A.Use kubectl app deploy <dockerfilename>.
• B.Use gcloud app deploy <dockerfilename>.
• C.Create a docker image from the Dockerfile and upload it to Container Registry.
  Create a Deployment YAML file to point to that image.
  Use kubectl to create the deployment with that file.
• D.Create a docker image from the Dockerfile and upload it to Cloud Storage.
  Create a Deployment YAML file to point to that image.
  Use kubectl to create the deployment with that file.

Comment: *

Name: *

Email: *

Verification: *