Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

• A.Create an export to the sink that saves logs from Cloud Audit to BigQuery.
• B.Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
• C.Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
• D.Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.

Comment: *

Name: *

Email: *

Verification: *

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A.In the console, validate which SSH keys have been stored as project-wide keys.
• B.Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Comment: *

Name: *

Email: *

Verification: *

You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

• A.Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
• B.Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
• C.Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
• D.Open the Cloud Spanner console to review configurations.

Comment: *

Name: *

Email: *

Verification: *

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

• A.Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
• B.Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
• C.Create a custom role by removing delete permissions, and add users to that role only.
• D.Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

Comment: *

Name: *

Email: *

Verification: *

You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

• A.Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
• B.Use Cloud Functions and configure the bucket as a trigger resource.
• C.Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
• D.Use Dataflow as a batch job, and configure the bucket as a data source.

Comment: *

Name: *

Email: *

Verification: *