You are helping the QA team to roll out a new load-testing tool to test the scalability of your primary cloud services that run on Google Compute Engine with Cloud Bigtable. Which three requirements should they include? Choose 3 answers

• A.Instrument the load-testing tool and the target services with detailed logging and metrics collection.
• B.Instrument the production services to record every transaction for replay by the load- testing tool.
• C.Schedule the load-testing tool to regularly run against the production environment.
• D.Create a separate Google Cloud project to use for the load-testing environment.
• E.Ensure that the load tests validate the performance of Cloud Bigtable.
• F.Ensure all third-party systems your services use are capable of handling high load.

Comment: *

Name: *

Email: *

Verification: *

Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC
1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?

• A.Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.
• B.Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.
• C.Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.
• D.Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.

Comment: *

Name: *

Email: *

Verification: *

You want to store critical business information in Cloud Storage buckets. The information is regularly changed but previous versions need to be referenced on a regular basis. You want to ensure that there is a record of all changes to any information in these buckets. You want to ensure that accidental edits or deletions can be easily roiled back. Which feature should you enable?

• A.Bucket Lock
• B.Object change notification
• C.Object Lifecycle Management
• D.Object Versioning

Comment: *

Name: *

Email: *

Verification: *

The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a
least privilege model with separation of duties for administration between production and development
resources.
What Google domain and project structure should you recommend?

• A.Create two G Suite accounts to manage users: one for development/test/staging and one for
  production. Each account should contain one project for every application
• B.Create two G Suite accounts to manage users: one with a single project for all development
  applications and one with a single project for all production applications
• C.Create a single G Suite account to manage users with each stage of each application in its own project
• D.Create a single G Suite account to manage users with one project for the development/test/staging
  environment and one project for the production environment

Correct Answer: D

Explanation/Reference:
Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically
different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people
from having higher privilege levels than they actually need
Principle of Least Privilege: Users should only have the least amount of privileges required to perform

their job and no more. This reduces authorization exploitation by limiting access to resources such as
targets, jobs, or monitoring templates for which they are not authorized.
Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs

they can perform. No user should be given responsibility for more than one related function. This limits
the ability of a user to perform a malicious action and then cover up that action.
References: https://cloud.google.com/kms/docs/separation-of-duties

Comment: *

Name: *

Email: *

Verification: *

Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

• A.The effective policy is determined only by the policy set at the node
• B.The effective policy is the policy set at the node and restricted by the policies of its ancestors
• C.The effective policy is the union of the policy set at the node and policies inherited from its ancestors
• D.The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

Comment: *

Name: *

Email: *

Verification: *