You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

• A.Run gcloud init to set the current project to my-project, and then run gcloud services list --available.
• B.Run gcloud projects list to get the project ID, and then run gcloud services list --project <project ID>.
• C.Run gcloud projects describe <project ID> to verify the project value, and then run gcloud services list --available.
• D.Run gcloud info to view the account value, and then run gcloud services list --account <Account>.

Comment: *

Name: *

Email: *

Verification: *

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

• A.Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
• B.Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
• C.Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
• D.Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

Comment: *

Name: *

Email: *

Verification: *

You have an App Engine application running in us-east1. You've noticed 90% of your traffic comes from the West Coast. You'd like to change the region. What's the best way to change the App Engine region?

• A.Contact Google Cloud Support and request the change.
• B.From the console, under the App Engine page, click edit, and change the region drop-down.
• C.Use the gcloud app region set command and supply the name of the new region.
• D.Create a new project and create an App Engine instance in us-west2.

Comment: *

Name: *

Email: *

Verification: *

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

• A.Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
• B.Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
• C.Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
• D.Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.

Comment: *

Name: *

Email: *

Verification: *

For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost. What should you do?

• A.1. Give the BigQuery Data Editor role on the platform-logsdataset to the service accounts used by your instances.
  2. Update your instances' metadata to add the following value: logs-destination:
  bq://platform-logs.
• B.1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logsas a sink.
  2. Create a Cloud Function that is triggered by messages in the logstopic.
  3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logsdataset.
• C.1. In Stackdriver Logging, create a filter to view only Compute Engine logs.
  2. Click Create Export.
  3. Choose BigQuery as Sink Service, and the platform-logsdataset as Sink Destination.
• D.1. Create a Cloud Function that has the BigQuery User role on the platform-logsdataset.
  2. Configure this Cloud Function to create a BigQuery Job that executes this query:
  INSERT INTO dataset.platform-logs (timestamp, log)
  SELECT timestamp, log FROM compute.logs
  WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)
  3. Use Cloud Scheduler to trigger this Cloud Function once a day.

Comment: *

Name: *

Email: *

Verification: *