Your team needs to configure their Google Cloud Platform (GCP) environment so they can centralize the control over networking resources like firewall rules, subnets, and routes. They also have an on-premises environment where resources need access back to the GCP resources through a private VPN connection. The networking resources will need to be controlled by the network security team.
Which type of networking design should your team use to meet these requirements?

• A.Shared VPC Network with a host project and service projects
• B.Grant Compute Admin role to the networking team for each engineering project
• C.VPC peering between all engineering projects using a hub and spoke model
• D.Cloud VPN Gateway between all engineering projects using a hub and spoke model

Comment: *

Name: *

Email: *

Verification: *

A customer needs to launch a 3-tier internal web application on Google Cloud Platform (GCP). The customer's internal compliance requirements dictate that end-user access may only be allowed if the traffic seems to originate from a specific known good CIDR. The customer accepts the risk that their application will only have SYN flood DDoS protection. They want to use GCP's native SYN flood protection.
Which product should be used to meet these requirements?

• A.Cloud Armor
• B.VPC Firewall Rules
• C.Cloud Identity and Access Management
• D.Cloud CDN

Comment: *

Name: *

Email: *

Verification: *

When working with agents in a support center via online chat, an organization's customers often share pictures of their documents with personally identifiable information (PII). The organization that owns the support center is concerned that the PII is being stored in their databases as part of the regular chat logs they retain for review by internal or external analysts for customer service trend analysis.
Which Google Cloud solution should the organization use to help resolve this concern for the customer while still maintaining data utility?

• A.Use Cloud Key Management Service (KMS) to encrypt the PII data shared by customers before storing it for analysis.
• B.Use Object Lifecycle Management to make sure that all chat records with PII in them are discarded and not saved for analysis.
• C.Use the image inspection and redaction actions of the DLP API to redact PII from the images before storing them for analysis.
• D.Use the generalization and bucketing actions of the DLP API solution to redact PII from the texts before storing them for analysis.

Comment: *

Name: *

Email: *

Verification: *

Your team wants to centrally manage GCP IAM permissions from their on-premises Active Directory Service. Your team wants to manage permissions by AD group membership.
What should your team do to meet these requirements?

• A.Set up Cloud Directory Sync to sync groups, and set IAM permissions on the groups.
• B.Set up SAML 2.0 Single Sign-On (SSO), and assign IAM permissions to the groups.
• C.Use the Cloud Identity and Access Management API to create groups and IAM permissions from Active Directory.
• D.Use the Admin SDK to create groups and assign IAM permissions from Active Directory.

Comment: *

Name: *

Email: *

Verification: *

A company is running workloads in a dedicated server room. They must only be accessed from within the private company network. You need to connect to these workloads from Compute Engine instances within a Google Cloud Platform project.
Which two approaches can you take to meet the requirements? (Choose two.)

• A.Configure the project with Cloud VPN.
• B.Configure the project with Shared VPC.
• C.Configure the project with Cloud Interconnect.
• D.Configure the project with VPC peering.
• E.Configure all Compute Engine instances with Private Access.

Comment: *

Name: *

Email: *

Verification: *