- (Topic 5)
You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don’t run out of storage, maintain 75% CPU usage cores, and keep replication lag below 60 seconds. What are the correct steps to meet your requirements?

1. A. 1) Enable automatic storage increase for the instance.2) Create a Stackdriver alert when CPU usage exceeds 75%, and change the instance type to reduceCPU usage.3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.
2. B. 1) Enable automatic storage increase for the instance.2) Change the instance type to a 32-core machine type to keep CPU usage below 75%.3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.
3. C. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on theinstance to create more space.2) Deploy memcached to reduce CPU load.3) Change the instance type to a 32-core machine type to reduce replication lag.
4. D. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on theinstance to create more space.2) Deploy memcached to reduce CPU load.3) Create a Stackdriver alert for replication lag, and change the instance type to a 32-core machine type to reduce replication lag.

Correct Answer: A

- (Topic 4)
For this question, refer to the Dress4Win case study.
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services. The Stackdriver dashboard is not reporting the services as healthy. What should they do?

1. A. Install the Stackdriver agent on all of the legacy web servers.
2. B. In the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule
3. C. Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
4. D. Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring— UptimeChecks (https://cloud.google.com/monitoring)

Correct Answer: B

- (Topic 5)
Your company has an application running on a deployment in a GKE cluster. You have a separate cluster for development, staging and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort. What should you do?

1. A. Create a Kubernetes admission controller to prevent the container from starting if it is not approved for usage in the given environment
2. B. Configure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment
3. C. Implement a corporate policy to prevent teams from deploying Docker image to an environment unless the Docker image was tested in an earlier environment
4. D. Configure the binary authorization policies for the development, staging and production cluster
5. E. Create attestations as part of the continuous integration pipeline”

Correct Answer: D
https://cloud.google.com/architecture/prep-kubernetes-engine-for- prod#binary-authorization
The most common Binary Authorization use cases involve attestations. An attestation certifies that a specific image has completed a previous stage, as described previously. You configure the Binary Authorization policy to verify the attestation before allowing the image to be deployed. At deploy time, instead of redoing activities that were completed in earlier stages, Binary Authorization only needs to verify the attestation. https://cloud.google.com/binary-authorization/docs/overview

- (Topic 5)
You have created several preemptible Linux virtual machine instances using Google Compute Engine. You want to properly shut down your application before the virtual machines are preempted. What should you do?

1. A. Create a shutdown script named k99.shutdown in the /etc/rc.6.d/ directory.
2. B. Create a shutdown script registered as a xinetd service in Linux and configure a Stackdnver endpoint check to call the service.
3. C. Create a shutdown script and use it as the value for a new metadata entry with the key shutdown-script in the Cloud Platform Console when you create the new virtual machine instance.
4. D. Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

Correct Answer: C

- (Topic 5)
You are working at a sports association whose members range in age from 8 to 30. The association collects a large amount of health data, such as sustained injuries. You are storing this data in BigQuery. Current legislation requires you to delete such information upon request of the subject. You want to design a solution that can accommodate such a request. What should you do?

1. A. Use a unique identifier for each individua
2. B. Upon a deletion request, delete all rows from BigQuery with this identifier.
3. C. When ingesting new data in BigQuery, run the data through the Data Loss Prevention (DLP) API to identify any personal informatio
4. D. As part of the DLP scan, save the result to Data Catalo
5. E. Upon a deletion request, query Data Catalog to find the column with personal information.
6. F. Create a BigQuery view over the table that contains all dat
7. G. Upon a deletion request, exclude the rows that affect the subject’s data from this vie
8. H. Use this view instead of the source table for all analysis tasks.
9. I. Use a unique identifier for each individua
10. J. Upon a deletion request, overwrite the column with the unique identifier with a salted SHA256 of its value.

Correct Answer: B
Current legislation requires you to delete "SUCH" information upon request of the subject. " So from that point of view the question is not to delete the entire user records but specific data related to personal health data. With DLP you can use InfoTypes and InfoType detectors to specifically scan for those entries and how to act upon them (link https://cloud.google.com/dlp/docs/concepts-infotypes)
https://cloud.google.com/dlp#section-6