You are working at an institution that processes medical data. You are migrating several workloads onto Google Cloud. Company policies require all workloads to run on physically separated hardware, and workloads from different clients must also be separated. You created a sole-tenant node group and added a node for each client. You need to deploy the workloads on these dedicated hosts. What should you do?

• A.Add the node group name as a network tag when creating Compute Engine instances in order to host each workload on the correct node group.
• B.Add the node name as a network tag when creating Compute Engine instances in order to host each workload on the correct node.
• C.Use node affinity labels based on the node group name when creating Compute Engine instances in order to host each workload on the correct node group.
• D.Use node affinity labels based on the node name when creating Compute Engine instances in order to host each workload on the correct node.

Comment: *

Name: *

Email: *

Verification: *

JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application
servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need
access to Datastore to upload the data.
What service account key-management strategy should you recommend?

• A.Provision service account keys for the on-premises infrastructure and for the GCE virtual machines
  (VMs)
• B.Authenticate the on-premises infrastructure with a user account and provision service account keys for
  the VMs
• C.Provision service account keys for the on-premises infrastructure and use Google Cloud Platform
  (GCP) managed keys for the VMs
• D.Deploy a custom authentication service on GCE/Google Kubernetes Engine (GKE) for the on-premises
  infrastructure and use GCP managed keys for the VMs

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to design their
solution for the future in order to take advantage of cloud and technology improvements as they become
available. Which two steps should they take? (Choose two.)

• A.Implement a weekly rolling maintenance process for the Linux virtual machines so they can apply
  critical kernel patches and package updates and reduce the risk of 0-day vulnerabilities.
• B.Begin packaging their game backend artifacts in container images and running them on Kubernetes
  Engine to improve the availability to scale up or down based on game activity.
• C.Store as much analytics and game activity data as financially feasible today so it can be used to train
  machine learning models to predict user behavior in the future.
• D.Set up a CI/CD pipeline using Jenkins and Spinnaker to automate canary deployments and improve
  development velocity.
• E.Adopt a schema versioning tool to reduce downtime when adding new game features that require
  storing additional player data in the database.

Comment: *

Name: *

Email: *

Verification: *

You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?

• A.Configure a Cloud SQL instance with high availability enabled.
• B.Configure a Cloud Spanner instance with a regional instance configuration.
• C.Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
• D.Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.

Comment: *

Name: *

Email: *

Verification: *

The operations team in your company wants to save Cloud VPN log events for one year. You need to configure the cloud infrastructure to save the logs. What should you do?

• A.Set up a filter in Cloud Logging and a Cloud Storage bucket as an export target for the logs you want to save.
• B.Enable the Compute Engine API, and then enable logging on the firewall rules that match the traffic you want to save.
• C.Set up a Cloud Logging Dashboard titled Cloud VPN Logs, and then add a chart that queries for the VPN metrics over a one-year time period.
• D.Set up a filter in Cloud Logging and a topic in Pub/Sub to publish the logs.

Comment: *

Name: *

Email: *

Verification: *