Question 1

You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

Options :

A :

Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP).

B :

Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.

C : Create a managed instance group. Set the Autohealing health check to healthy (HTTP).

D : Create a managed instance group. Verify that the autoscaling setting is on.

Answer: C

Question 2

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

Options :

A :

Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.

B :

Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy

C :

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.

D :

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy

Answer: B

Question 3

You have successfully created a development environment in a project for an application. This application

uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application.

The security team has forbidden the existence of network routes between these 2 environments, and asks you

to follow Google-recommended practices. What should you do?

Options :

A :

Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.

B :

Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources

C :

Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.

D :

Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.

Answer: A

Question 4

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

Options :

A : View System Event Logs in Stackdriver. Search for the user’s email as the principal.

B : View System Event Logs in Stackdriver. Search for the service account associated with the user.

C : View Data Access audit logs in Stackdriver. Search for the user’s email as the principal.

D : View the Admin Activity log in Stackdriver. Search for the service account associated with the user.

Answer: C

Question 5

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

Options :

A : Create a health check on port 443 and use that when creating the Managed Instance Group.

B : Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.

C : In the Instance Template, add the label ‘health-check’.

D : In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: A