Your team wants to limit users with administrative privileges at the organization level Which two roles should your team restrict? (Choose two.)

• A.Organization Administrator
• B.Super Admin
• C.GKE Cluster Admin
• D.Compute Admin
• E.Organization Role Viewer

Comment: *

Name: *

Email: *

Verification: *

A cloud customer has an on-premises key management system and wants to generate, protect, rotate, and audit encryption keys with it. How can the customer use Cloud Storage with their own encryption keys?

• A.Declare usage of default encryption at rest in the audit report on compliance
• B.Upload encryption keys to the same Cloud Storage bucket
• C.Use Customer Managed Encryption Keys (CMEK)
• D.Use Customer-Supplied Encryption Keys (CSEK)

Comment: *

Name: *

Email: *

Verification: *

A customer has 300 engineers. The company wants to grant different levels of access and efficiently manage IAM permissions between users in the development and production environment projects.
Which two steps should the company take to meet these requirements? (Choose two.)

• A.Create a project with multiple VPC networks for each environment.
• B.Create a folder for each development and production environment.
• C.Create an Organizational Policy constraint for each folder environment.
• D.Create a Google Group for the Engineering team, and assign permissions at the folder level.
• E.Create projects for each environment, and grant IAM rights to each engineering user.

Comment: *

Name: *

Email: *

Verification: *

Which international compliance standard provides guidelines for information security controls applicable to the provision and use of cloud services?

• A.ISO 27001
• B.ISO 27002
• C.ISO 27017
• D.ISO 27018

Comment: *

Name: *

Email: *

Verification: *

You work for a large organization where each business unit has thousands of users. You need to delegate management of access control permissions to each business unit. You have the following requirements:
Each business unit manages access controls for their own projects.
Each business unit manages access control permissions at scale.
Business units cannot access other business units' projects.
Users lose their access if they move to a different business unit or leave the company.
Users and access control permissions are managed by the on-premises directory service.
What should you do? (Choose two.)

• A.Use Google Cloud Directory Sync to synchronize users and group memberships in Cloud Identity.
• B.Organize projects in folders, and assign permissions to Google groups at the folder level.
• C.Use VPC Service Controls to create perimeters around each business unit's project.
• D.Group business units based on Organization Units (OUs) and manage permissions based on OUs.
• E.Create a project naming convention, and use Google's IAM Conditions to manage access based on the prefix of project names.

Comment: *

Name: *

Email: *

Verification: *