You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application.
The security team has forbidden the existence of network routes between these 2 environments, and asks you to follow Google-recommended practices. What should you do?

• A.Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.
• B.Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.
• C.Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.
• D.Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources.

Comment: *

Name: *

Email: *

Verification: *

You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?

• A.Run gcloud iam roles list. Review the output section.
• B.Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
• C.Run gcloud iam service-accounts list. Review the output section.
• D.Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.

Comment: *

Name: *

Email: *

Verification: *

A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

• A.Enable node auto-provisioning on the GKE cluster.
• B.Create a VerticalPodAutscaler for those workloads.
• C.Create a node pool with preemptible VMs and GPUs attached to those VMs.
• D.Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

Comment: *

Name: *

Email: *

Verification: *

You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?

• A.1. Create a consumer Gmail account.
  2. Write a script that monitors the CPU usage.
  3. When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.comon port 25 as SMTP server.
• B.1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.
  2. Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.
  3. Configure your email address in the notification channel.
• C.1. Create a Stackdriver Workspace, and associate your GCP project with it.
  2. Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.
  3. Create an uptime check for the instance in Stackdriver.
• D.1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})%
  2. In Stackdriver Monitoring, create an Alerting Policy based on this metric.
  3. Configure your email address in the notification channel.

Comment: *

Name: *

Email: *

Verification: *

You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

• A.Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
• B.Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
• C.Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
• D.Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.

Comment: *

Name: *

Email: *

Verification: *