Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

• A.Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
• B.Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
• C.Ask the auditor for their Google account, and give them the Viewer role on the project.
• D.Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.

Comment: *

Name: *

Email: *

Verification: *

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.
Which range should you use?

• A.0.0.0.0/0
• B.10.0.0.0/8
• C.172.16.0.0/12
• D.192.168.0.0/16

Comment: *

Name: *

Email: *

Verification: *

You recently deployed a new version of an application to App Engine and then discovered a bug in the release. You need to immediately revert to the prior version of the application. What should you do?

• A.Run gcloud app restore.
• B.On the App Engine page of the GCP Console, select the application that needs to be reverted and click Revert.
• C.On the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.
• D.Deploy the original version as a separate application.
  Then go to App Engine settings and split traffic between applications so that the original version serves 100% of the requests.

Comment: *

Name: *

Email: *

Verification: *

You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

• A.Use granular logging statements within a Deployment Manager template authored in Python.
• B.Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
• C.Execute the Deployment Manager template using the --preview option in the same project, and observe the state of interdependent resources.
• D.Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.

Comment: *

Name: *

Email: *

Verification: *

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

• A.Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
• B.Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
• C.Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.
• D.Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

Comment: *

Name: *

Email: *

Verification: *