Your company has a stateless web API that performs scientific calculations. The web API runs on a single Google Kubernetes Engine (GKE) cluster. The cluster is currently deployed in us-central1. Your company has expanded to offer your API to customers in Asia. You want to reduce the latency for the users in Asia.
What should you do?

• A.Use a global HTTP(s) load balancer with Cloud CDN enabled
• B.Create a second GKE cluster in asia-southeast1, and expose both API's using a Service of type Load Balancer. Add the public Ips to the Cloud DNS zone
• C.Increase the memory and CPU allocated to the application in the cluster
• D.Create a second GKE cluster in asia-southeast1, and use kubemci to create a global HTTP(s) load balancer

Comment: *

Name: *

Email: *

Verification: *

Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?

• A.Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.
• B.Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.
• C.Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.
• D.Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.

Comment: *

Name: *

Email: *

Verification: *

Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security errors being accidentally introduced. Which two actions can you take? Choose 2 answers

• A.Enable code signing and a trusted binary repository integrated with your CI/CD pipeline.
• B.Ensure you have stubs to unit test all interfaces between components.
• C.Ensure every code check-in is peer reviewed by a security SME.
• D.Run a vulnerability security scanner as part of your continuous-integration /continuous- delivery (CI/CD) pipeline.
• E.Use source code security analyzers as part of the CI/CD pipeline.

Comment: *

Name: *

Email: *

Verification: *

Your company wants you to build a highly reliable web application with a few public APIs as the backend.
You don't expect a lot of user traffic, but traffic could spike occasionally. You want to leverage Cloud Load Balancing, and the solution must be cost-effective for users. What should you do?

• A.Store static content such as HTML and images in Cloud CDN. Host the APIs on App Engine and store the user data in Cloud SQL.
• B.Store static content such as HTML and images in a Cloud Storage bucket. Host the APIs on a zonal Google Kubernetes Engine cluster with worker nodes in multiple zones, and save the user data in Cloud Spanner.
• C.Store static content such as HTML and images in Cloud CDN. Use Cloud Run to host the APIs and save the user data in Cloud SQL.
• D.Store static content such as HTML and images in a Cloud Storage bucket. Use Cloud Functions to host the APIs and save the user data in Firestore.

Comment: *

Name: *

Email: *

Verification: *

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization.
They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?

• A.Configure an organization policy to restrict identities by domain
• B.Configure an organization policy to block creation of service accounts
• C.Configure Cloud Scheduler to trigger a Cloud Function every hour that removes all users that don't belong to the Cloud identity domain from all projects.

Comment: *

Name: *

Email: *

Verification: *