Question 1

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

Options :

A : Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.

B : Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.

C : Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.

D :

Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password

Answer: A

Question 2

Your application development team has created Docker images for an application that will be deployed on Google Cloud. Your team does not want to manage the infrastructure associated with this application. You need to ensure that the application can scale automatically as it gains popularity. What should you do?

Options :

A : Create an Instance template with the container image, and deploy a Managed Instance Group with Autoscaling.

B : Upload Docker images to Artifact Registry, and deploy the application on Google Kubernetes Engine using Standard mode.

C : Upload Docker images to the Cloud Storage, and deploy the application on Google Kubernetes Engine using Standard mode.

D : Upload Docker images to Artifact Registry, and deploy the application on Cloud Run

Answer: D

Question 3

Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

Options :

A : Download and deploy the Jenkins Java WAR to App Engine Standard.

B : Create a new Compute Engine instance and install Jenkins through the command line interface.

C :

Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.

D : Use GCP Marketplace to launch the Jenkins solution.

Answer: D

Question 4

You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Googlerecommended practices and minimal changes. What should you do?

Options :

A : Assign appropriate access for Google services to the service account used by the Compute Engine VM.

B :

Create a service account with appropriate access for Google services, and configure the application to use this account.

C :

Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.

D :

Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.

Answer: B

Question 5

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

Options :

A : Modify the existing subnet range to 172.16.20.0/24.

B : Create a new Secondary IP Range in the VPC and configure the VMs to use that range.

C :

Create a new VPC network for the VMs. Enable VPC Peering between the VMs’ VPC network and the Dataproc cluster VPC network.

D :

Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.

Answer: A