You need to connect your organization's on-premises network with an existing Google Cloud environment that includes one Shared VPC with two subnets named Production and Non-Production. You are required to:
Use a private transport link.
Configure access to Google Cloud APIs through private API endpoints originating from on-premises environments.
Ensure that Google Cloud APIs are only consumed via VPC Service Controls.
What should you do?

• A.1. Set up a Partner Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the private.googleapis.com domains in on-premises DNS configurations.
• B.1. Set up a Cloud VPN link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted googleapis.com domains in on-premises DNS configurations.
• C.1. Set up a Dedicated Interconnect link between the on-premises environment and Google Cloud.
  2. Configure private access using the restricted.googleapis.com domains in on-premises DNS configurations.
• D.1. Set up a Direct Peering link between the on-premises environment and Google Cloud.
  2. Configure private access for both VPC subnets.

Comment: *

Name: *

Email: *

Verification: *

A customer has an analytics workload running on Compute Engine that should have limited internet access.
Your team created an egress firewall rule to deny (priority 1000) all traffic to the internet.
The Compute Engine instances now need to reach out to the public repository to get security updates. What should your team do?

• A.Create an egress firewall rule to allow traffic to the hostname of the repository with a priority greater than 1000.
• B.Create an egress firewall rule to allow traffic to the hostname of the repository with a priority less than 1000.
• C.Create an egress firewall rule to allow traffic to the CIDR range of the repository with a priority less than 1000.
• D.Create an egress firewall rule to allow traffic to the CIDR range of the repository with a priority greater than 1000.

Comment: *

Name: *

Email: *

Verification: *

Your team uses a service account to authenticate data transfers from a given Compute Engine virtual machine instance of to a specified Cloud Storage bucket. An engineer accidentally deletes the service account, which breaks application functionality. You want to recover the application as quickly as possible without compromising security.
What should you do?

• A.Update the permissions of another existing service account and supply those credentials to the applications.
• B.Create a new service account with the same name as the deleted service account.
• C.Use the undelete command to recover the deleted service account.
• D.Temporarily disable authentication on the Cloud Storage bucket.

Comment: *

Name: *

Email: *

Verification: *

Your team uses a service account to authenticate data transfers from a given Compute Engine virtual machine instance of to a specified Cloud Storage bucket. An engineer accidentally deletes the service account, which breaks application functionality. You want to recover the application as quickly as possible without compromising security.
What should you do?

• A.Temporarily disable authentication on the Cloud Storage bucket.
• B.Use the undelete command to recover the deleted service account.
• C.Create a new service account with the same name as the deleted service account.
• D.Update the permissions of another existing service account and supply those credentials to the applications.

Comment: *

Name: *

Email: *

Verification: *