You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

• A.In the source code
• B.In an environment variable
• C.In a secret management system
• D.In a config file that has restricted access through ACLs

Comment: *

Name: *

Email: *

Verification: *

You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

• A.Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet
• B.Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet
• C.Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)
• D.Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the TerramEarth case study. A new architecture that writes all incoming data to BigQuery has been introduced. You notice that the data is dirty, and want to ensure data quality on an automated daily basis while managing cost.
What should you do?

• A.Set up a streaming Cloud Dataflow job, receiving data by the ingestion process. Clean the data in a Cloud Dataflow pipeline.
• B.Create a Cloud Function that reads data from BigQuery and cleans it. Trigger it. Trigger the Cloud Function from a Compute Engine instance.
• C.Create a SQL statement on the data in BigQuery, and save it as a view. Run the view daily, and save the result to a new table.
• D.Use Cloud Dataprep and configure the BigQuery tables as the source. Schedule a daily job to clean the data.

Comment: *

Name: *

Email: *

Verification: *

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

• A.Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.
• B.Generate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each VM.
• C.Create a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.
• D.Ensure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles.

Comment: *

Name: *

Email: *

Verification: *

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

• A.Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.
• B.Use VPC Network Peering between the VPC and the on-premises network.
• C.Expose the VPC to the on-premises network using IAM and VPC Sharing.
• D.Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.

Comment: *

Name: *

Email: *

Verification: *