You want to apply a new Cloud Armor policy to an application that is deployed in Google Kubernetes Engine (GKE). You want to find out which target to use for your Cloud Armor policy.
Which GKE resource should you use?

• A.GKE Node
• B.GKE Pod
• C.GKE Cluster
• D.GKE Ingress

Comment: *

Name: *

Email: *

Verification: *

You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You cannot meet Google at one of its point-of-presence (POP) locations, and your on-premises router cannot run a Border Gateway Protocol (BGP) configuration.
Which connectivity model should you use?

• A.Direct Peering
• B.Dedicated Interconnect
• C.Partner Interconnect with a layer 2 partner
• D.Partner Interconnect with a layer 3 partner

Comment: *

Name: *

Email: *

Verification: *

Your company has just launched a new critical revenue-generating web application. You deployed the application for scalability using managed instance groups, autoscaling, and a network load balancer as frontend. One day, you notice severe bursty traffic that caused autoscaling to reach the maximum number of instances, and users of your application cannot complete transactions. After an investigation, you think it is a DDOS attack. You want to quickly restore user access to your application and allow successful transactions while minimizing cost.
Which two steps should you take? (Choose two.)

• A.Use Cloud Armor to blacklist the attacker's IP addresses.
• B.Shut down the entire application in GCP for a few hours. The attack will stop when the application is offline.
• C.Create a global HTTP(s) load balancer and move your application backend to this load balancer.
• D.Increase the maximum autoscaling backend to accommodate the severe bursty traffic.
• E.SSH into the backend compute engine instances, and view the auth logs and syslogs to further understand the nature of the attack.

Comment: *

Name: *

Email: *

Verification: *

You converted an auto mode VPC network to custom mode. Since the conversion, some of your Cloud Deployment Manager templates are no longer working. You want to resolve the problem.
What should you do?

• A.Apply an additional IAM role to the Google API's service account to allow custom mode networks.
• B.Explicitly reference the custom mode networks in the Deployment Manager templates.
• C.Explicitly reference the custom mode networks in the Cloud Armor whitelist.
• D.Update the VPC firewall to allow the Cloud Deployment Manager to access the custom mode networks.

Comment: *

Name: *

Email: *

Verification: *

You need to define an address plan for a future new GKE cluster in your VPC. This will be a VPC native cluster, and the default Pod IP range allocation will be used. You must pre-provision all the needed VPC subnets and their respective IP address ranges before cluster creation. The cluster will initially have a single node, but it will be scaled to a maximum of three nodes if necessary. You want to allocate the minimum number of Pod IP addresses.
Which subnet mask should you use for the Pod IP address range?

• A./21
• B./22
• C./23
• D./25

Comment: *

Name: *

Email: *

Verification: *