You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

1. A. Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
2. B. Inject the secret at the time of instance creation via an encrypted configuration management system.
3. C. Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
4. D. Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.

Correct Answer: A
https://cloud.google.com/security-key-management

You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (Pll) is leaking into certain log entry fields. All Pll entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging. What should you do?

1. A. Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
2. B. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
3. C. Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a tog exclusion with userinfo as a filter.
4. D. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.

Correct Answer: B
https://medium.com/google-cloud/fluentd-filter-plugin-for-google-cloud-data-loss-prevention-api-42bbb1308e7

You support a trading application written in Python and hosted on App Engine flexible environment. You want to customize the error information being sent to Stackdriver Error Reporting. What should you do?

1. A. Install the Stackdriver Error Reporting library for Python, and then run your code on a Compute Engine VM.
2. B. Install the Stackdriver Error Reporting library for Python, and then run your code on Google Kubernetes Engine.
3. C. Install the Stackdriver Error Reporting library for Python, and then run your code on App Engine flexible environment.
4. D. Use the Stackdriver Error Reporting API to write errors from your application to ReportedErrorEvent, and then generate log entries with properly formatted error messages in Stackdriver Logging.

Correct Answer: D
https://cloud.google.com/error-reporting/docs/formatting-error-messages https://cloud.google.com/error-reporting/docs/reference/libraries#client-libraries-install-python no need to install error reporting library on App Engine Flex.

You support a service with a well-defined Service Level Objective (SLO). Over the previous 6 months, your service has consistently met its SLO and customer satisfaction has been consistently high. Most of your service’s operations tasks are automated and few repetitive tasks occur frequently. You want to optimize the balance between reliability and deployment velocity while following site reliability engineering best practices. What should you do? (Choose two.)

1. A. Make the service’s SLO more strict.
2. B. Increase the service’s deployment velocity and/or risk.
3. C. Shift engineering time to other services that need more reliability.
4. D. Get the product team to prioritize reliability work over new features.
5. E. Change the implementation of your Service Level Indicators (SLIs) to increase coverage.

Correct Answer: BC
(https://sre.google/workbook/implementing-slos/#slo-decision-matrix)

You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?

1. A. File a bug with the development team so they can find the root cause of the crashing instance.
2. B. Create a Managed Instance Group with a single instance and use health checks to determine the system status.
3. C. Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.
4. D. Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.

Correct Answer: B