Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team'?

• A.Org viewer, project owner
• B.Org viewer, project viewer
• C.Org admin, project browser
• D.Project owner, network admin

Comment: *

Name: *

Email: *

Verification: *

Your company runs a critical, revenue-generating ecommerce application that is served by a regional managed instance group (MIG) behind an external HTTP(S) Load Balancer. The operations team is currently overwhelmed with low-priority notifications. Your team ' s service level objective (SLO) is to maintain 99.9% availability. You want to minimize noise from non-critical events and ensure that the team is only notified of issues that are actionable and threaten the SLO. What should you do?

• A.Focus on cause-based alerts, creating alerting policies with thresholds for the Compute Engine instances, including CPU utilization, memory usage, disk I/O, and network traffic.
• B.Configure alerts based on predictive metrics. Use the instance count of the MIG as the primary metric to trigger an alert.
• C.Implement an error budget policy based on the availability of the SLO. Create a " page " alert that triggers only when the rate of burn of the error budget predicts a full exhaustion within the next 24 hours.
• D.Create log-based alerts for only the WARN and ERROR log entries generated by the application to ensure that no potential issue is missed.

Comment: *

Name: *

Email: *

Verification: *

You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group.
What should you do?

• A.Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.
• B.Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.
• C.Use Puppet to create the managed instance group and install the OS package dependencies.
• D.Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

Comment: *

Name: *

Email: *

Verification: *

One of your primary business objectives is being able to trust the data stored in your application.
You want to log all changes to the application data. How can you design your logging system to verify authenticity of your logs?

• A.Write the log concurrently in the cloud and on premises.
• B.Use a SQL database and limit who can modify the log table.
• C.Digitally sign each timestamp and log entry and store the signature.
• D.Create a JSON dump of each log entry and store it in Google Cloud Storage.

Comment: *

Name: *

Email: *

Verification: *

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

• A.Use VPC Network Peering between the VPC and the on-premises network.
• B.Expose the VPC to the on-premises network using IAM and VPC Sharing.
• C.Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.
• D.Deploy Cloud VPN Gateway in each region.
  Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.

Comment: *

Name: *

Email: *

Verification: *