A VM instance is trying to read from a Cloud Storage bucket. IAM roles assigned to the VM service account allows the VM instance to read from the bucket. But the scopes assigned to the VM deny the reading bucket. What will happen when VM tries to read from the bucket?

• A.The read will succeed because the most permissive permission is allowed
• B.The read will not execute as IAM roles and scopes both determine what operations will be performed
• C.The read operation will execute, but a message will be sent to the Stackdriver Logging
• D.The application performing the read will drop the read operation

Comment: *

Name: *

Email: *

Verification: *

Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?

• A.1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all
• B.1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080
• C.1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all
• D.1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
  10.0.1.0/24)* Protocols: allow TCP: 8080

Comment: *

Name: *

Email: *

Verification: *

You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

• A.Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
• B.Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
• C.Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
• D.Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.

Comment: *

Name: *

Email: *

Verification: *

You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling. What should you do?

• A.Set the maximum number of instances to 1.
• B.Decrease the maximum number of instances to 3.
• C.Use a TCP health check instead of an HTTP health check.
• D.Increase the initial delay of the HTTP health check to 200 seconds.

Comment: *

Name: *

Email: *

Verification: *

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A.Cloud SQL
• B.Cloud Spanner
• C.Cloud Firestore
• D.Cloud Datastore

Correct Answer: B

Cloud Spanner is a relational database and is highly scalable. Cloud Spanner is a highly scalable, enterprise- grade, globally-distributed, and strongly consistent database service built for the cloud specifically to combine the benefits of relational database structure with a non-relational horizontal scale. This combination delivers high-performance transactions and strong consistency across rows, regions, and continents with an industry- leading 99.999% availability SLA, no planned downtime, and enterprise-grade security Ref: https://cloud.google.com/spanner Graphical user interface, application, Teams Description automatically generated

Comment: *

Name: *

Email: *

Verification: *