You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

1. A. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
2. B. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
3. C. Use Deployment Manager to deploy your applicatio
4. D. Rely on the automatic enablement of all APIs used by the application being deployed.
5. E. Grant the App Engine Default service account the role of Cloud Pub/Sub Admi
6. F. Have your application enable the API on the first connection to Cloud Pub/Sub.

Correct Answer: A
Quickstart: using the Google Cloud Console
This page shows you how to perform basic tasks in Pub/Sub using the Google Cloud Console. Note: If you are new to Pub/Sub, we recommend that you start with the interactive tutorial. Before you begin
Set up a Cloud Console project. Set up a project
Click to:
Create or select a project.
Enable the Pub/Sub API for that project.
You can view and manage these resources at any time in the Cloud Console. Install and initialize the Cloud SDK.
Note: You can run the gcloud tool in the Cloud Console without installing the Cloud SDK. To run the gcloud tool in the Cloud Console, use Cloud Shell .
https://cloud.google.com/pubsub/docs/quickstart-console

For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost. What should you do?

1. A. 1. Give the BigQuery Data Editor role on the platform-logs dataset to the service accounts used by your instances.2. Update your instances’ metadata to add the following value: logs-destination:bq://platform-logs.
2. B. 1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logs as a sink.2.Create a Cloud Function that is triggered by messages in the logs topic.3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logs dataset.
3. C. 1. In Stackdriver Logging, create a filter to view only Compute Engine logs.2. Click Create Export.3.Choose BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.
4. D. 1. Create a Cloud Function that has the BigQuery User role on the platform-logs dataset.2. Configure this Cloud Function to create a BigQuery Job that executes this query:INSERT INTOdataset.platform-logs (timestamp, log)SELECT timestamp, log FROM compute.logsWHERE timestamp> DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)3. Use Cloud Scheduler to trigger this Cloud Function once a day.

Correct Answer: C
* 1. In Stackdriver Logging, create a filter to view only Compute Engine logs. 2. Click Create Export. 3. Choose BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.

You’ve deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

1. A. Store the database password inside the Docker image of the container, not in the YAML file.
2. B. Store the database password inside a Secret objec
3. C. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
4. D. Store the database password inside a ConfigMap objec
5. E. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
6. F. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Correct Answer: B
https://cloud.google.com/config-connector/docs/how-to/secrets#gcloud

Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?

1. A. Upload the data to BigQuery using the bq command line tool.
2. B. Upload the data to Cloud Storage using the gsutil command line tool.
3. C. Upload the data into Cloud SQL using the import function in the console.
4. D. Upload the data into Cloud Spanner using the import function in the console.

Correct Answer: B
"large quantity" : Cloud Storage or BigQuery "files" a file is nothing but an Object

You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over me Internet without having to configure specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What should you do?

1. A. Configure Cloud Identity-Aware Proxy (or HTTPS resources
2. B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources.
3. C. Create an SSH keypair and store the public key as a project-wide SSH Key
4. D. Create an SSH keypair and store the private key as a project-wide SSH Key

Correct Answer: B
https://cloud.google.com/iap/docs/using-tcp-forwarding