Question 1

You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

Options :

A : Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.

B : Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.

C : Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.

D :

Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.

Answer: A

Question 2

You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

Options :

A : Verify that both projects are in a GCP Organization. Create a new VPC and add all instances.

B :

Verify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.

C :

Verify that you are the Project Administrator of both projects. Create two new VPCs and add all instances

D : Verify that you are the Project Administrator of both projects. Create a new VPC and add all instances.

Answer: B

Question 3

Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

Options :

A : Add the users to roles/browser role.

B : Add the users to roles/iam.roleViewer role.

C : Add the users to a group, and add this group to roles/browser role.

D : Add the users to a group, and add this group to roles/iam.roleViewer role.

Answer: C

Question 4

You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to comply with your company's security policies. The security policies are different for each company department Each company department has a user with the Project Owner role assigned to their projects. What should you do?

Options :

A :

Organize projects under folders for each department. Configure both organization policies and log sinks on the folders

B :

Organize projects under folders for each department. Configure organization policies on the organization and log sinks on the folders.

C :

Use a standard naming convention for projects that includes the department name. Configure organization policies on the organization and log sinks on the projects.

D :

Use a standard naming convention for projects that includes the department name. Configure both organization policies and log sinks on the projects.

Answer: A

Question 5

You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?

Options :

A : Create a Cloud Function to create an instance template.

B : Create a snapshot schedule for the disk using the desired interval.

C : Create a cron job to create a new disk from the disk using gcloud.

D : Create a Cloud Task to create an image and export it to Cloud Storage.

Answer: B