Your team sets up a Shared VPC Network where project co-vpc-prod is the host project. Your team has configured the firewall rules, subnets, and VPN gateway on the host project. They need to enable Engineering Group A to attach a Compute Engine instance to only the 10.1.1.0/24 subnet.
What should your team grant to Engineering Group A to meet this requirement?

• A.Compute Network User Role at the host project level.
• B.Compute Network User Role at the subnet level.
• C.Compute Shared VPC Admin Role at the host project level.
• D.Compute Shared VPC Admin Role at the service project level.

Comment: *

Name: *

Email: *

Verification: *

Your team needs to make sure that a Compute Engine instance does not have access to the internet or to any Google APIs or services.
Which two settings must remain disabled to meet these requirements? (Choose two.)

• A.Public IP
• B.IP Forwarding
• C.Private Google Access
• D.Static routes
• E.IAM Network User Role

Comment: *

Name: *

Email: *

Verification: *

An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its ongoing data backup and disaster recovery solutions to GCP. The organization's on-premises production environment is going to be the next phase for migration to GCP. Stable networking connectivity between the on-premises environment and GCP is also being implemented.
Which GCP solution should the organization use?

• A.BigQuery using a data pipeline job with continuous updates via Cloud VPN
• B.Cloud Storage using a scheduled task and gsutil via Cloud Interconnect
• C.Compute Engines Virtual Machines using Persistent Disk via Cloud Interconnect
• D.Cloud Datastore using regularly scheduled batch upload jobs via Cloud VPN

Comment: *

Name: *

Email: *

Verification: *

Your team needs to make sure that a Compute Engine instance does not have access to the internet or to any Google APIs or services.
Which two settings must remain disabled to meet these requirements? (Choose two.)

• A.Public IP
• B.IP Forwarding
• C.Private Google Access
• D.Static routes
• E.IAM Network User Role

Comment: *

Name: *

Email: *

Verification: *

What are the steps to encrypt data using envelope encryption?

• A.Generate a data encryption key (DEK) locally.
  Use a key encryption key (KEK) to wrap the DEK. Encrypt data with the KEK.
  Store the encrypted data and the wrapped KEK.
• B.Generate a key encryption key (KEK) locally.
  Use the KEK to generate a data encryption key (DEK). Encrypt data with the DEK.
  Store the encrypted data and the wrapped DEK.
• C.Generate a data encryption key (DEK) locally.
  Encrypt data with the DEK.
  Use a key encryption key (KEK) to wrap the DEK. Store the encrypted data and the wrapped DEK.
• D.Generate a key encryption key (KEK) locally.
  Generate a data encryption key (DEK) locally. Encrypt data with the KEK.
  Store the encrypted data and the wrapped DEK.

Comment: *

Name: *

Email: *

Verification: *