Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?

• A.Create an export to the sink that saves logs from Cloud Audit to BigQuery.
• B.Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
• C.Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
• D.Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.

Comment: *

Name: *

Email: *

Verification: *

You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

• A.Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs
• B.Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs
• C.Review the Compute Engine activity logs Select and review the Admin Event logs
• D.Review the Compute Engine activity logs Select and review the System Event logs

Comment: *

Name: *

Email: *

Verification: *

You're deploying an application to a Compute Engine instance, and it's going to need to make calls to read from Cloud Storage and Bigtable. You want to make sure you're following the principle of least privilege. What's the easiest way to ensure the code can authenticate to the required Google Cloud APIs?

• A.Use the default Compute Engine service account and set its scopes. Let the code find the default service account using "Application Default Credentials".
• B.Create a new user account with the required roles. Store the credentials in Cloud Key Management Service and download them to the instance in code.
• C.Register the application with the Binary Registration Service and apply the required roles.
• D.Create a new service account and key with the required limited permissions. Set the instance to use the new service account. Edit the code to use the service account key.

Comment: *

Name: *

Email: *

Verification: *

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?

• A.0.0.0.0/0
• B.192.168.0.0/16
• C.172.16.0.0/12
• D.10.0.0.0/8

Comment: *

Name: *

Email: *

Verification: *

You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?

• A.Check the app.yaml file for your application and check project settings.
• B.Check the web-application.xml file for your application and check project settings.
• C.Go to Deployment Manager and review settings for deployment of applications.
• D.Go to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.

Comment: *

Name: *

Email: *

Verification: *