You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

• A.1. Create a subnetwork in the same VPC, in europe-west1.
  2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• B.1. Create a VPC and a subnetwork in europe-west1.
  2. Peer the 2 VPCs.
  3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• C.1. Create a VPC and a subnetwork in europe-west1.
  2. Expose the application with an internal load balancer.
  3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
• D.1. Create a subnetwork in the same VPC, in europe-west1.
  2. Use Cloud VPN to connect the two subnetworks.
  3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

Comment: *

Name: *

Email: *

Verification: *

You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

• A.Review details of the myapp-service Service object and check for error messages.
• B.Review details of the myapp-deployment Deployment object and check for error messages.
• C.Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
• D.View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

Comment: *

Name: *

Email: *

Verification: *

You work in a small company where everyone should be able to view all resources of a specific project. You want to grant them access following Google's recommended practices. What should you do?

• A.Create a script that uses "gcloud projects add-iam-policy-binding" for all users' email addresses and the Project Viewer role.
• B.Create a script that uses "gcloud iam roles create" for all users' email addresses and the Project Viewer role.
• C.Create a new Google Group and add all users to the group. Use "gcloud projects add-iam-policy- binding" with the Project Viewer role and Group email address.
• D.Create a new Google Group and add all members to the group. Use "gcloud iam roles create" with the Project Viewer role and Group email address.

Comment: *

Name: *

Email: *

Verification: *

Your engineers need to pass database credentials to a Kubernetes Pod. The YAML they're using looks similar to the following:
apiVersion: "extensions/v1beta1"
kind: "Deployment"
metadata:
name: "products-service"
namespace: "default"
labels:
app: "products-service"
spec:
replicas: 3
selector:
matchLabels:
app: "products-service"
template:
metadata:
labels:
app: "products-service"
spec:
containers:
- name: "products"
image: "gcr.io/find-seller-app-dev/products:latest"
env:
- name: "database_user"
value: "admin"
- name: "database_password"
value: "TheB3stP@ssW0rd"
What is Google's recommended best practice for working with sensitive information inside of Kubernetes?

• A.Store the credentials in a ConfigMap.
• B.Store the credentials in a Secret.
• C.Mount the credentials in a volume.
• D.Use an environment variable.

Comment: *

Name: *

Email: *

Verification: *

A Solutions Architect is designing the architecture for a new three-tier web-based e-commerce site that must be available 24/7. Requests are expected to range from 100 to 10,000 each minute. Usage can vary depending on time of day, holidays, and promotions. The design should be able to handle these volumes, with the ability to handle higher volumes if necessary.
How should the Architect design the architecture to ensure the web tier is cost-optimized and can handle the expected traffic? (Choose two.)

• A.Use Amazon S3 multi-part uploads to improve upload times.
• B.Use Amazon Route 53 to route traffic to the correct region.
• C.Create an CloudFront distribution pointing to static content in Amazon S3.
• D.Store all static files in a multi-AZ Amazon Aurora database.
• E.Launch Amazon EC2 instances in an Auto Scaling group behind an ELB.

Comment: *

Name: *

Email: *

Verification: *