You are using the gcloud command line tool to create a new custom role in a project by coping a predefined role. You receive this error message:
INVALID_ARGUMENT: Permission resourcemanager.projects.list is not valid What should you do?

• A.Add the resourcemanager.projects.get permission, and try again.
• B.Add the resourcemanager.projects.setIamPolicy permission, and try again.
• C.Try again with a different role with a new name but the same permissions.
• D.Remove the resourcemanager.projects.list permission, and try again.

Comment: *

Name: *

Email: *

Verification: *

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
What should you do?

• A.Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service.
• B.Create a VPC Firewall rule that blocks all traffic except for the traffic-scrubbing service.
• C.Create a VPC Service Control Perimeter that blocks all traffic except for the traffic-scrubbing service.
• D.Create IPTables firewall rules that block all traffic except for the traffic-scrubbing service.

Comment: *

Name: *

Email: *

Verification: *

You are designing a Google Kubernetes Engine (GKE) cluster for your organization. The current cluster size is expected to host 10 nodes, with 20 Pods per node and 150 services. Because of the migration of new services over the next 2 years, there is a planned growth for 100 nodes, 200 Pods per node, and 1500 services. You want to use VPC-native clusters with alias IP ranges, while minimizing address consumption.
How should you design this topology?

• A.Use gcloud container clusters create [CLUSTER NAME] to create a VPC-native cluster.
• B.Create a subnet of size/25 with 2 secondary ranges of: /17 for Pods and /21 for Services. Create a VPC-native cluster and specify those ranges.
• C.Create a subnet of size/28 with 2 secondary ranges of: /24 for Pods and /24 for Services. Create a VPC-native cluster and specify those ranges. When the services are ready to be deployed, resize the subnets.
• D.Use gcloud container clusters create [CLUSTER NAME]--enable-ip-alias to create a VPC-native cluster.

Comment: *

Name: *

Email: *

Verification: *

You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization requires using the least privilege possible.
What should you do?

• A.Grant the iam.serviceAccountUser to your user account.
• B.Grant the compute.instanceAdmin to your user account.
• C.Grant the read-only privilege to the service account for the Cloud Storage bucket.
• D.Grant the cloud-platform privilege to the service account for the Cloud Storage bucket.

Comment: *

Name: *

Email: *

Verification: *

You have configured Cloud CDN using HTTP(S) load balancing as the origin for cacheable content. Compression is configured on the web servers, but responses served by Cloud CDN are not compressed.
What is the most likely cause of the problem?

• A.You have not configured compression in Cloud CDN.
• B.You have configured the web servers and Cloud CDN with different compression types.
• C.The web servers behind the load balancer are configured with different compression types.
• D.You have to configure the web servers to compress responses even if the request has a Via header.

Comment: *

Name: *

Email: *

Verification: *