Your organization has stored sensitive data in a Cloud Storage bucket. For regulatory reasons, your company must be able to rotate the encryption key used to encrypt the data in the bucket.
The data will be processed in Dataproc. You want to follow Google-recommended practices for security. What should you do?

• A.Create a key with Cloud Key Management Service (KMS). Encrypt the data using the encrypt method of Cloud KMS.
• B.Create a key with Cloud Key Management Service (KMS). Set the encryption key on the bucket to the Cloud KMS key.
• C.Generate a GPG key pair. Encrypt the data using the GPG key. Upload the encrypted data to the bucket.
• D.Generate an AES-256 encryption key. Encrypt the data in the bucket using the customer-supplied encryption keys feature.

Comment: *

Name: *

Email: *

Verification: *

You are helping the QA team to roll out a new load-testing tool to test the scalability of your primary cloud services that run on Google Compute Engine with Cloud Bigtable. Which three requirements should they include? Choose 3 answers

• A.Ensure all third-party systems your services use are capable of handling high load.
• B.Schedule the load-testing tool to regularly run against the production environment.
• C.Ensure that the load tests validate the performance of Cloud Bigtable.
• D.Create a separate Google Cloud project to use for the load-testing environment.
• E.Instrument the load-testing tool and the target services with detailed logging and metrics collection.
• F.Instrument the production services to record every transaction for replay by the load- testing tool.

Comment: *

Name: *

Email: *

Verification: *

For this question, refer to the Helicopter Racing League (HRL) case study. Recently HRL started a new regional racing league in Cape Town, South Africa. In an effort to give customers in Cape Town a better user experience, HRL has partnered with the Content Delivery Network provider, Fastly. HRL needs to allow traffic coming from all of the Fastly IP address ranges into their Virtual Private Cloud network (VPC network). You are a member of the HRL security team and you need to configure the update that will allow only the Fastly IP address ranges through the External HTTP(S) load balancer. Which command should you use?

• A.Apply a Cloud Armor security policy to external load balancers using a named IP list for Fastly.
• B.Apply a Cloud Armor security policy to external load balancers using the IP addresses that Fastly has published. C. Apply a VPC firewall rule on port 443 for Fastly IP address ranges.
• C.Apply a VPC firewall rule on port 443 for network resources tagged with scurceiplisr-fasrly.

Comment: *

Name: *

Email: *

Verification: *

You are using a GitHub repository for your application's source code. You want to set up an efficient and secure continuous deployment process to automatically build and deploy the application to Cloud Run whenever a pull request is merged. What should you do?

• A.Create a GitHub webhook trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build a container image and save it in Artifact Registry. Use Config Sync to deploy the application to Cloud Run.
• B.Create a workflow using GitHub Actions to build and deploy the application to Cloud Run once a pull request is merged. The workflow will use a service account key checked in with your source code for deployment permission.
• C.Create a GitHub Enterprise trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build and deploy the application to Cloud Run. Save the deployment credential to Secret Manager.
• D.Connect your repository using the Cloud Build GitHub app. Create a trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build and deploy the application to Cloud Run.

Comment: *

Name: *

Email: *

Verification: *

You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability. What should you do?

• A.Create a read replica instance in a different region
• B.Create a failover replica instance in a different region
• C.Create a read replica instance in the same region, but in a different zone
• D.Create a failover replica instance in the same region, but in a different zone

Comment: *

Name: *

Email: *

Verification: *