An organization is evaluating the use of Google Cloud Platform (GCP) for certain IT workloads. A well- established directory service is used to manage user identities and lifecycle management. This directory service must continue for the organization to use as the "source of truth" directory for identities.
Which solution meets the organization's requirements?

• A.Google Cloud Directory Sync (GCDS)
• B.Cloud Identity
• C.Security Assertion Markup Language (SAML)
• D.Pub/Sub

Comment: *

Name: *

Email: *

Verification: *

In order to meet PCI DSS requirements, a customer wants to ensure that all outbound traffic is authorized.
Which two cloud offerings meet this requirement without additional compensating controls? (Choose two.)

• A.App Engine
• B.Cloud Functions
• C.Compute Engine
• D.Google Kubernetes Engine
• E.Cloud Storage

Comment: *

Name: *

Email: *

Verification: *

You want to prevent users from accidentally deleting a Shared VPC host project. Which organization-level policy constraint should you enable?

• A.compute.restrictSharedVpcHostProjects
• B.compute.restrictSharedVpcSubnetworks
• C.compute.restrictXpnProjectLienRemoval
• D.compute.sharedReservationsOwnerProjects

Comment: *

Name: *

Email: *

Verification: *

You are creating an internal App Engine application that needs to access a user's Google Drive on the user's behalf. Your company does not want to rely on the current user's credentials. It also wants to follow Google- recommended practices.
What should you do?

• A.Create a new Service account, and give all application users the role of Service Account User.
• B.Create a new Service account, and add all application users to a Google Group. Give this group the role of Service Account User.
• C.Use a dedicated G Suite Admin account, and authenticate the application's operations with these G Suite credentials.
• D.Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.

Comment: *

Name: *

Email: *

Verification: *

A large financial institution is moving its Big Data analytics to Google Cloud Platform. They want to have maximum control over the encryption process of data stored at rest in BigQuery.
What technique should the institution use?

• A.Customer-supplied encryption keys (CSEK).
• B.Customer-managed encryption keys (CMEK).
• C.Use Cloud Storage as a federated Data Source.
• D.Use a Cloud Hardware Security Module (Cloud HSM).

Comment: *

Name: *

Email: *

Verification: *