Which two implied firewall rules are defined on a VPC network? (Choose two.)

• A.A rule that allows all outbound connections
• B.A rule that denies all inbound connections
• C.A rule that blocks all inbound port 25 connections
• D.A rule that blocks all outbound connections
• E.A rule that allows all inbound port 80 connections

Comment: *

Name: *

Email: *

Verification: *

An engineering team is launching a web application that will be public on the internet. The web application is hosted in multiple GCP regions and will be directed to the respective backend based on the URL request.
Your team wants to avoid exposing the application directly on the internet and wants to deny traffic from a specific list of malicious IP addresses Which solution should your team implement to meet these requirements?

• A.Cloud Armor
• B.Network Load Balancing
• C.SSL Proxy Load Balancing
• D.NAT Gateway

Comment: *

Name: *

Email: *

Verification: *

You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices.
What should you do?

• A.Create a custom role with the permission compute.instances.list and grant the Service Account this role.
• B.Give the Service Account the role of Project Viewer, and use the new Service Account for all instances.
• C.Give the Service Account the role of Compute Viewer, and use the new Service Account for all instances.
• D.Create an Instance Template, and allow the Service Account Read Only access for the Compute Engine Access Scope.

Comment: *

Name: *

Email: *

Verification: *

An application log's data, including customer identifiers such as email addresses, needs to be redacted. However, these logs also include the email addresses of internal developers from company.com, and these should NOT be redacted. Which solution should you use to meet these requirements?

• A.Create a regular custom dictionary detector that lists a subset of the developers' email addresses.
• B.Create a regular expression (regex) custom infoType detector to match on @company.com.
• C.Create a regular custom dictionary detector to match all email addresses listed in Cloud Identity.
• D.Create a custom infoType called COMPANY_EMAIL to match @company.com.

Comment: *

Name: *

Email: *

Verification: *

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

• A.Ensure that the app does not run as PID 1.
• B.Use many container image layers to hide sensitive information.
• C.Package a single app as a container.
• D.Use public container images as a base image for the app.
• E.Remove any unnecessary tools not needed by the app.

Comment: *

Name: *

Email: *

Verification: *