NEW QUESTION 1
You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

• A. Verify that you are the project billing administrato
• B. Select the associated billing account and create a budget and alert for the appropriate project.
• C. Verify that you are the project billing administrato
• D. Select the associated billing account and create a budget and a custom alert.
• E. Verify that you are the project administrato
• F. Select the associated billing account and create a budget for the appropriate project.
• G. Verify that you are project administrato
• H. Select the associated billing account and create a budget and a custom alert.

Answer: B

NEW QUESTION 2
You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google-recommended practices. Which IAM roles should you grant your colleagues?

• A. Project Editor
• B. Storage Admin
• C. Storage Object Admin
• D. Storage Object Creator

Answer: B

NEW QUESTION 3
You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

• A. Change the default region property setting in the existing GCP project to asia-northeast1.
• B. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
• C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
• D. Create a new GCP project and create an App Engine application inside this new projec
• E. Specify asia-northeast1 as the region to serve your application.

Answer: C

NEW QUESTION 4
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

• A. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• B. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
• C. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• D. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

Answer: B

NEW QUESTION 5
You are assigned to maintain a Google Kubernetes Engine (GKE) cluster named dev that was deployed on Google Cloud. You want to manage the GKE configuration using the command line interface (CLI). You have just downloaded and installed the Cloud SDK. You want to ensure that future CLI commands by default address this specific cluster. What should you do?

• A. Use the command gcloud config sot container/cluster dev
• B. Use the command gcloud container clusters update dev
• C. Create a file called gk
• D. default in the -/ .gcloud folder that contains the cluster name
• E. Create a file called default
• F. j son in the -/.gcioud folder that contains the cluster name

Answer: B

NEW QUESTION 6
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

• A. Create a Cloud Bigtable cluster and use the HBase API
• B. Deploy MongoDB Alias from the Google Cloud Marketplace
• C. Download a MongoDB installation package and run it on Compute Engine instances
• D. Download a MongoDB installation package, and run it on a Managed Instance Group

Answer: D

NEW QUESTION 7
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

• A. Enable node auto-provisioning on the GKE cluster.
• B. Create a VerticalPodAutscaler for those workloads.
• C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
• D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

Answer: C

NEW QUESTION 8
A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

• A. In the console, validate which SSH keys have been stored as project-wide keys.
• B. Navigate to Identity-Aware Proxy and check the permissions for these resources.
• C. Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
• D. Use the command gcloud projects get–iam–policy to view the current role assignments.

Answer: B

NEW QUESTION 9
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

• A. When creating the VM, use machine type n1-standard-96.
• B. When creating the VM, use Intel Skylake as the CPU platform.
• C. Create the VM using Compute Engine default setting
• D. Use gcloud to modify the running instance to have 96 vCPUs.
• E. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

Answer: C

NEW QUESTION 10
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?

• A. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
• B. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
• C. Create a new managed instance group with an updated instance templat
• D. Add the group to the backend service for the load balance
• E. When all instances in the new managed instance group are healthy, delete the old managed instance group.
• F. Create a new instance template with the new application versio
• G. Update the existing managed instance group with the new instance templat
• H. Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.

Answer: B

NEW QUESTION 11
You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

• A. Deploy the monitoring pod in a StatefulSet object.
• B. Deploy the monitoring pod in a DaemonSet object.
• C. Reference the monitoring pod in a Deployment object.
• D. Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.

Answer: B

NEW QUESTION 12
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company’s SSO provider. What should you do?

• A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
• B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
• C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
• D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

Answer: C

NEW QUESTION 13
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?

• A. Configure regional storage for the region closest to the users Configure a Nearline storage class
• B. Configure regional storage for the region closest to the users Configure a Standard storage class
• C. Configure dual-regional storage for the dual region closest to the users Configure a Nearline storage class
• D. Configure dual-regional storage for the dual region closest to the users Configure a Standard storage class

Answer: B

NEW QUESTION 14
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

• A. Move both projects under the same folder.
• B. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
• C. Create a Shared VPC network between both project
• D. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
• E. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.

Answer: D

NEW QUESTION 15
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

• A. Create the instance without a public IP address.
• B. Create the instance with Private Google Access enabled.
• C. Create a deny-all egress firewall rule on the VPC network.
• D. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Answer: B

Explanation:
Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address. Reference: https://cloud.google.com/vpc

NEW QUESTION 16
You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

• A. Use a Shielded VM.
• B. Use a Preemptible VM.
• C. Use a sole-tenant node.
• D. Enable deletion protection on the instance.

Answer: D

NEW QUESTION 17
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

• A. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.
• B. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.
• C. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.
• D. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.

Answer: D

NEW QUESTION 18
You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

• A. Open the Cloud Spanner console to review configurations.
• B. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
• C. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
• D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.

Answer: B

NEW QUESTION 19
......