You created a new VPC network named Dev with a single subnet. You added a firewall rule for the network Dev to allow HTTP traffic only and enabled logging. When you try to log in to an instance in the subnet via Remote Desktop Protocol, the login fails. You look for the Firewall rules logs in Stackdriver Logging, but you do not see any entries for blocked traffic. You want to see the logs for blocked traffic.
What should you do?

• A.Check the VPC flow logs for the instance.
• B.Try connecting to the instance via SSH, and check the logs.
• C.Create a new firewall rule to allow traffic from port 22, and enable logs.
• D.Create a new firewall rule with priority 65500 to deny all traffic, and enable logs.

Comment: *

Name: *

Email: *

Verification: *

You are in the early stages of planning a migration to GCP. You want to test the functionality of your hybrid cloud design before you start to implement it in production. The design includes services running on a Compute Engine Virtual Machine instance that need to communicate to on-premises servers using private IP addresses. The on-premises servers have connectivity to the internet, but you have not yet established any Cloud Interconnect connections. You want to choose the lowest cost method of enabling connectivity between your instance and on-premises servers and complete the test in 24 hours.
Which connectivity method should you choose?

• A.Cloud VPN
• B.Dedicated Interconnect, but don't provision any VLAN attachments
• C.Dedicated Interconnect with a single VLAN attachment
• D.50-Mbps Partner VLAN attachment

Comment: *

Name: *

Email: *

Verification: *

You have deployed a proof-of-concept application by manually placing instances in a single Compute Engine zone. You are now moving the application to production, so you need to increase your application availability and ensure it can autoscale.
How should you provision your instances?

• A.Create a single managed instance group, specify the desired region, and select Multiple zones for the location.
• B.Create a managed instance group for each region, select Single zone for the location, and manually distribute instances across the zones in that region.
• C.Create an unmanaged instance group in a single zone, and then create an HTTP load balancer for the instance group.
• D.Create an unmanaged instance group for each zone, and manually distribute the instances across the desired zones.

Comment: *

Name: *

Email: *

Verification: *

You have a storage bucket that contains two objects. Cloud CDN is enabled on the bucket, and both objects have been successfully cached. Now you want to make sure that one of the two objects will not be cached anymore, and will always be served to the internet directly from the origin.
What should you do?

• A.Ensure that the object you don't want to be cached anymore is not shared publicly.
• B.Create a new storage bucket, and move the object you don't want to be checked anymore inside it. Then edit the bucket setting and enable the private attribute.
• C.Add an appropriate lifecycle rule on the storage bucket containing the two objects.
• D.Add a Cache-Control entry with value private to the metadata of the object you don't want to be cached anymore. Invalidate all the previously cached copies.

Comment: *

Name: *

Email: *

Verification: *

You need to configure a static route to an on-premises resource behind a Cloud VPN gateway that is configured for policy-based routing using the gcloud command.
Which next hop should you choose?

• A.The default internet gateway
• B.The IP address of the Cloud VPN gateway
• C.The name and region of the Cloud VPN tunnel
• D.The IP address of the instance on the remote side of the VPN tunnel

Comment: *

Name: *

Email: *

Verification: *