Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

• A.Create the instance without a public IP address.
• B.Create the instance with Private Google Access enabled.
• C.Create a deny-all egress firewall rule on the VPC network.
• D.Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
  Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address.

Comment: *

Name: *

Email: *

Verification: *

A member of the finance team informed you that one of the projects is using the old billing account. What steps should you take to resolve the problem?

• A.Go to the Billing page; view the list of projects; find the project in question and select Change billing account; select the correct billing account and save.
• B.Go to the Project page; expand the Billing tile; select the Billing Account option; select the correct billing account and save.
• C.Submit a support ticket requesting the change.
• D.Delete the project and recreate it with the correct billing account.

Comment: *

Name: *

Email: *

Verification: *

You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?

• A.Use kubectl app deploy <dockerfilename>.
• B.Use gcloud app deploy <dockerfilename>.
• C.Create a docker image from the Dockerfile and upload it to Container Registry. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.
• D.Create a docker image from the Dockerfile and upload it to Cloud Storage. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.

Comment: *

Name: *

Email: *

Verification: *

You are creating a Kubernetes Engine cluster to deploy multiple pods inside the cluster. All container logs must be stored in BigQuery for later analysis. You want to follow Google- recommended practices. Which two approaches can you take?

• A.Turn on Stackdriver Logging during the Kubernetes Engine cluster creation.
• B.Turn on Stackdriver Monitoring during the Kubernetes Engine cluster creation.
• C.Develop a custom add-on that uses Cloud Logging API and BigQuery API. Deploy the add-on to your Kubernetes Engine cluster.
• D.Use the Stackdriver Logging export feature to create a sink to Cloud Storage. Create a Cloud Dataflow job that imports log files from Cloud Storage to BigQuery.
• E.Use the Stackdriver Logging export feature to create a sink to BigQuery. Specify a filter expression to export log records related to your Kubernetes Engine cluster only.

Comment: *

Name: *

Email: *

Verification: *

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices.
What should you do?

• A.Create a service account with an access scope.
  Use the access scope `https://www.googleapis.com/ auth/devstorage.write_only'.
• B.Create a service account with an access scope.
  Use the access scope `https://www.googleapis.com/ auth/cloud-platform'.
• C.Create a service account and add it to the IAM role `storage.objectCreator' for that bucket.
• D.Create a service account and add it to the IAM role `storage.objectAdmin' for that bucket.

Comment: *

Name: *

Email: *

Verification: *