You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn't have a public IP address. What should you do?

• A.Use Carrier Peering
• B.Use VPC Network Peering
• C.Use Shared VPC networks
• D.Use Private Google Access

Comment: *

Name: *

Email: *

Verification: *

Your application requires service accounts to be authenticated to GCP products via credentials stored on its host Compute Engine virtual machine instances. You want to distribute these credentials to the host instances as securely as possible. What should you do?

• A.Generate a P12 file from the GCP Console after the instance is deployed, and copy the credentials to the host instance before starting the application.
• B.Commit the credential JSON file into your application's source repository, and have your CI/CD process package it with the software that is deployed to the instance.
• C.Use the instance's service account Application Default Credentials to authenticate to the required resources.
• D.Use HTTP signed URLs to securely provide access to the required resources.

Comment: *

Name: *

Email: *

Verification: *

You are a developer at a social media company. The company runs their social media website on-premises and uses MySQL as a backend to store user profiles and user posts. Your company plans to migrate to Google Cloud, and your learn will migrate user profile information to Firestore.
You are tasked with designing the Firestore collections. What should you do?

• A.Create one root collection for user posts, and create one subcollection for each user's profile.
• B.Create one root collection for user profiles, and create one root collection for user posts.
• C.Create one root collection for user profiles, and create one subcollection for each user's posts.
• D.Create one root collection for user profiles, and store each user's post as a nested list in the user profile document.

Comment: *

Name: *

Email: *

Verification: *

Your development team has built several Cloud Functions using Java along with corresponding integration and service tests. You are building and deploying the functions and launching the tests using Cloud Build. Your Cloud Build job is reporting deployment failures immediately after successfully validating the code. What should you do?

• A.Check the maximum number of Cloud Function instances.
• B.Verify that your Cloud Build trigger has the correct build parameters.
• C.Retry the tests using the truncated exponential backoff polling strategy.
• D.Verify that the Cloud Build service account is assigned the Cloud Functions Developer role.

Comment: *

Name: *

Email: *

Verification: *

You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

• A.Use the service account attached to the GKE node.
• B.Enable Workload Identity in the cluster via the gcloud command-line tool.
• C.Access the Google service account keys from a secret management service.
• D.Store the Google service account keys in a central secret management service.
• E.Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

Comment: *

Name: *

Email: *

Verification: *