- (Exam Topic 2)
Firebase Hosting provides the following services

1. A. Dynamic content
2. B. Static content.
3. C. Microservices.
4. D. All of the Above.

Correct Answer: D
Firebase Hosting- Firebase Hosting provides fast and secure hosting for your web app, static and dynamic content, and microservices.
Firebase Hosting is production-grade web content hosting for developers. With a single command, you can quickly deploy web apps and serve both static and dynamic content to a global CDN (content delivery network). You can also pair Firebase Hosting with Cloud Functions or Cloud Run to build and host microservices on Firebase.
Key capabilities of Firebase Hosting:
Serve content over a secure connection:- The modern web is secure. Zero-configuration SSL is built into Firebase Hosting, so content is always delivered securely.
Host static and dynamic content plus microservices:- Firebase Hosting supports all kinds of content for hosting, from your CSS and HTML files to your Express.js microservices or APIs.
Deliver content fast: Each file that you upload is cached on SSDs at CDN edges around the world and served as gzip or Brotli. We auto-select the best compression method for your content. No matter where your users are, the content is delivered fast.

- (Exam Topic 1)
Your organization uses Active Directory to authenticate users. Users’ Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?

1. A. Configure two-factor authentication in the Google domain
2. B. Remove the Google account from all IAM policies
3. C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
4. D. Configure single sign-on in the Google domain

Correct Answer: D
Configure single sign-on in the Google domain
Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.

https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction
Reference Link- https://cloud.google.com/architecture/identity/single-sign-on

- (Exam Topic 1)
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.
Which Google Cloud product or feature should your organization use?

1. A. Identity-Aware Proxy
2. B. Cloud NAT (network address translation)
3. C. VPC internal load balancers
4. D. Private Google Access

Correct Answer: D
VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. The source IP address of the packet can be the primary internal IP address of the network interface or an address in an alias IP range that is assigned to the interface. If you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network.

https://cloud.google.com/vpc/docs/configure-private-google-access

- (Exam Topic 1)
Your organization needs to plan its cloud infrastructure expenditures. Which should your organization do?

1. A. Review cloud resource costs frequently, because costs change often based on use
2. B. Review cloud resource costs annually as part of planning your organization’s overall budget
3. C. If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget
4. D. Involve fewer people in cloud resource planning than your organization did for on-premises resource planning

Correct Answer: A
Review cloud resource costs frequently, because costs change often based on use because One need to know current usage/ trend for planning; While public cloud eliminates capex, and gets into pay as you go model, the usage pattern determines the cloud cost and hence needs to be measured frequently to enable better forecast

- (Exam Topic 1)
You are leading projects in an IT services company. Your customer's project requires analyzing im-ages. They have many 10s of 1000s of raw images that they have made available to you. Your small technology team needs to build a machine learning model. The images are unlabeled. You don't have the people or the capacity to label the images. What is your approach?

1. A. Look for open-source labeled images that closely resemble the given images.
2. B. Request data labeling service from Google.
3. C. Tell the customer it is their duty to label the images.
4. D. Hire temporary workers who can quickly label the images.

Correct Answer: C
Google's Data Labeling Service lets you work with human labelers to generate highly accurate labels for a collection of data that you can use in machine learning models.
References:
-> https://cloud.google.com/vertex-ai/docs/datasets/data-labeling-job
-> https://cloud.google.com/ai-platform/data-labeling/docs