NEW QUESTION 1
You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?

• A. Add the cluster’s API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
• B. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
• C. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectl to create the DaemonSet.
• D. In the cluster’s definition in Deployment Manager, add a metadata that has kube-system as key and the DaemonSet manifest as value.

Answer: C

NEW QUESTION 2
You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?

• A. Check the app.yaml file for your application and check project settings.
• B. Check the web-application.xml file for your application and check project settings.
• C. Go to Deployment Manager and review settings for deployment of applications.
• D. Go to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.

Answer: A

NEW QUESTION 3
Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google’s recommended best practices. What should you do?

• A. Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
• B. Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
• C. Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
• D. Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.

Answer: B

NEW QUESTION 4
Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

• A. Use gcloud to expand the IP range of the current subnet.
• B. Delete the subnet, and recreate it using a wider range of IP addresses.
• C. Create a new projec
• D. Use Shared VPC to share the current network with the new project.
• E. Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.

Answer: C

NEW QUESTION 5
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

• A. Use granular logging statements within a Deployment Manager template authored in Python.
• B. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
• C. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
• D. Execute the Deployment Manager template using the –-preview option in the same project, and observe the state of interdependent resources.

Answer: D

NEW QUESTION 6
You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory. What should you do?

• A. Rely on live migration to move the workload to a machine with more memory.
• B. Use gcloud to add metadata to the V
• C. Set the key to required-memory-size and the value to 8 GB.
• D. Stop the VM, change the machine type to n1-standard-8, and start the VM.
• E. Stop the VM, increase the memory to 8 GB, and start the VM.

Answer: D

NEW QUESTION 7
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

• A. Manual Scaling with 3 instances.
• B. Basic Scaling with min_instances set to 3.
• C. Basic Scaling with max_instances set to 3.
• D. Automatic Scaling with min_idle_instances set to 3.

Answer: D

NEW QUESTION 8
You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

• A. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
• B. Create a Kubernetes Service of type ClusterIP for your applicatio
• C. Configure the public DNS name of your application using the IP of this Service.
• D. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluste
• E. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
• F. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application.Forward the public traffic to HAProxy with an iptable rul
• G. Configure the DNS name of your application using the public IP of the node HAProxy is running on.

Answer: A

NEW QUESTION 9
You need to immediately change the storage class of an existing Google Cloud bucket. You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?

• A. Use the gsutil to rewrite the storage class for the bucket Change the default storage class for the bucket
• B. Use the gsutil to rewrite the storage class for the bucket Set up Object Lifecycle management on the bucket
• C. Create a new bucket and change the default storage class for the bucket Set up Object Lifecycle management on lite bucket
• D. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket

Answer: B

NEW QUESTION 10
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?

• A. * 1. Create a configuration for each project you need to manage.* 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• B. * 1. Create a configuration for each project you need to manage.* 2. Use gcloud init to update the configuration values when you need to work with a non-default project
• C. * 1. Use the default configuration for one project you need to manage.* 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• D. * 1. Use the default configuration for one project you need to manage.* 2. Use gcloud init to update the configuration values when you need to work with a non-default project.

Answer: D

NEW QUESTION 11
You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?

• A. Create a signed URL with a four-hour expiration and share the URL with the company.
• B. Set object access to ‘public’ and use object lifecycle management to remove the object after four hours.
• C. Configure the storage bucket as a static website and furnish the object’s URL to the compan
• D. Delete the object from the storage bucket after four hours.
• E. Create a new Cloud Storage bucket specifically for the external company to acces
• F. Copy the object to that bucke
• G. Delete the bucket after four hours have passed.

Answer: A

NEW QUESTION 12
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

• A. Export Cloud Datastore data using gcloud datastore export.
• B. Create a Cloud Datastore index using gcloud datastore indexes create.
• C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
• D. Install the cloud-datastore-emulator component using the gcloud components install command.

Answer: D

NEW QUESTION 13
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

• A. Enable Cloud Identity in the GCP Console for your domain.
• B. Grant them the required IAM roles using their G Suite email address.
• C. Create a CSV sheet with all users’ email addresse
• D. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
• E. In the G Suite console, add the users to a special group called cloud-console-users@yourdomain.com.Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

Answer: B

NEW QUESTION 14
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Repair feature for your GKE cluster.
• B. Enable the Node Auto-Upgrades feature for your GKE cluster.
• C. Select the latest available cluster version for your GKE cluster.
• D. Select “Container-Optimized OS (cos)” as a node image for your GKE cluster.

Answer: B

NEW QUESTION 15
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

• A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• B. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
• C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Answer: A

NEW QUESTION 16
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?

• A. Create a Cloud Function to create an instance template.
• B. Create a snapshot schedule for the disk using the desired interval.
• C. Create a cron job to create a new disk from the disk using gcloud.
• D. Create a Cloud Task to create an image and export it to Cloud Storage.

Answer: B

NEW QUESTION 17
Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

• A. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics
• B. Use the export logs API to provide the Admin Activity Audit Logs in the format they want
• C. Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage
• D. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs

Answer: A

NEW QUESTION 18
You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:

What is the most likely cause?

• A. The pending Pod's resource requests are too large to fit on a single node of the cluster.
• B. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.
• C. The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.
• D. The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods’ statu
• E. It is currently being rescheduled on a new node.

Answer: B

NEW QUESTION 19
......