- (Topic 5)
A recent audit that a new network was created in Your GCP project. In this network, a GCE instance has an SSH port open the world. You want to discover this network's origin. What should you do?

1. A. Search for Create VM entry in the Stackdriver alerting console.
2. B. Navigate to the Activity page in the Home sectio
3. C. Set category to Data Access and search for Create VM entry.
4. D. In the logging section of the console, specify GCE Network as the logging sectio
5. E. Search for the Create Insert entry.
6. F. Connect to the GCE instance using project SSH Key
7. G. Identify previous logins in system logs, and match these with the project owners list.

Correct Answer: C

- (Topic 7)
You have broken down a legacy monolithic application into a few containerized RESTful microservices. You want to run those microservices on Cloud Run. You also want to make sure the services are highly available with low latency to your customers. What should you do?

1. A. Deploy Cloud Run services to multiple availability zone
2. B. Create Cloud Endpoints that point to the service
3. C. Create a global HTIP(S) Load Balancing instance and attach the Cloud Endpoints to its backend.
4. D. Deploy Cloud Run services to multiple regions Create serverless network endpoint groups pointing to the service
5. E. Add the serverless NE Gs to a backend service that is used by a global HTIP(S) Load Balancing instance.
6. F. Cloud Run services to multiple region
7. G. In Cloud DNS, create a latency-based DNS name that points to the services.
8. H. Deploy Cloud Run services to multiple availability zone
9. I. Create a TCP/IP global load balance
10. J. Add the Cloud Run Endpoints to its backend service.

Correct Answer: B
https://cloud.google.com/run/docs/multiple-regions

- (Topic 5)
Your company is running its application workloads on Compute Engine. The applications have been deployed in production, acceptance, and development environments. The production environment is business-critical and is used 24/7, while the acceptance and development environments are only critical during office hours. Your CFO has asked you to optimize these environments to achieve cost savings during idle times. What should you do?

1. A. Create a shell script that uses the gcloud command to change the machine type of the development and acceptance instances to a smaller machine type outside of office hour
2. B. Schedule the shell script on one of the production instances to automate the task.
3. C. Use Cloud Scheduler to trigger a Cloud Function that will stop the development and acceptance environments after office hours and start them just before office hours.
4. D. Deploy the development and acceptance applications on a managed instance group and enable autoscaling.
5. E. Use regular Compute Engine instances for the production environment, and usepreemptible VMs for the acceptance and development environments.

Correct Answer: B
Reference: https://cloud.google.com/blog/products/it-ops/best-practices-for-optimizing- your-cloud-costs

- (Topic 5)
Your company recently acquired a company that has infrastructure in Google Cloud. Each company has its own Google Cloud organization Each company is using a Shared Virtual Private Cloud (VPC) to provide network connectivity tor its applications Some of the subnets used by both companies overlap In order for both businesses to integrate, the applications need to have private network connectivity. These applications are not on overlapping subnets. You want to provide connectivity with minimal re-engineering. What should you do?

1. A. Set up VPC peering and peer each Shared VPC together
2. B. Configure SSH port forwarding on each application to provide connectivity between applications i the different Shared VPCs
3. C. Migrate the protects from the acquired company into your company's Google Cloud organization Re launch the instances in your companies Shared VPC
4. D. Set up a Cloud VPN gateway in each Shared VPC and peer Cloud VPNs

Correct Answer: B

- (Topic 5)
You need to upload files from your on-premises environment to Cloud Storage. You want the files to be
encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?

1. A. Supply the encryption key in a .boto configuration fil
2. B. Use gsutil to upload the files.
3. C. Supply the encryption key using gcloud confi
4. D. Use gsutil to upload the files to that bucket.
5. E. Use gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
6. F. Use gsutil to create a bucket, and use the flag --encryption-key to supply the encryption ke
7. G. Use gsutil to upload the files to that bucket.

Correct Answer: A
https://cloud.google.com/storage/docs/encryption/customer-supplied- keys#gsutil