Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis. What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?

• A.Encrypt all data using elliptic curve cryptography
• B.Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers
• C.Hash all data using SHA256
• D.De-identify the data with the Cloud Data Loss Prevention API

Comment: *

Name: *

Email: *

Verification: *

Your company has developed a monolithic, 3-tier application to allow external users to upload and share files. The solution cannot be easily enhanced and lacks reliability. The development team would like to re-architect the application to adopt microservices and a fully managed service approach, but they need to convince their leadership that the effort is worthwhile. Which advantage(s) should they highlight to leadership?

• A.The new approach will make it easier to decouple infrastructure from application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.
• B.The monolithic solution can be converted to a container with Docker. The generated container can then be deployed into a Kubernetes cluster.
• C.The new approach will be significantly less costly, make it easier to manage the underlying infrastructure, and automatically manage the CI/CD pipelines.
• D.The process can be automated with Migrate for Compute Engine.

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR's use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

• A.Verify EHR's product usage against the list of compliant products on the Google Cloud compliance page.
• B.Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.
• C.Use Firebase Authentication for EHR's user facing applications.
• D.Implement Prometheus to detect and prevent security breaches on EHR's web-based applications.
• E.Use GKE private clusters for all Kubernetes workloads.

Comment: *

Name: *

Email: *

Verification: *

Your company is using Google Cloud. You have two folders under the Organization: Finance and Shopping.
The members of the development team are in a Google Group. The development team group has been assigned the Project Owner role on the Organization. You want to prevent the development team from creating resources in projects in the Finance folder. What should you do?

• A.Assign the development team group the Project Viewer role on the Finance folder, and assign the development team group the Project Owner role on the Shopping folder.
• B.Assign the development team group only the Project Viewer role on the Finance folder.
• C.Assign the development team group the Project Owner role on the Shopping folder, and remove the development team group Project Owner role from the Organization.
• D.Assign the development team group only the Project Owner role on the Shopping folder.

Comment: *

Name: *

Email: *

Verification: *

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

• A.Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the onpremises peer gateway.
• B.Use VPC Network Peering between the VPC and the on-premises network.
• C.Expose the VPC to the on-premises network using IAM and VPC Sharing.
• D.Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.

Comment: *

Name: *

Email: *

Verification: *