- (Exam Topic 2)
You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?

1. A. Cloud Amor
2. B. Stackdriver Debugger
3. C. Cloud Security Scanner
4. D. Stackdriver Error Reporting

Correct Answer: C
Reference: https://cloud.google.com/security-scanner

- (Exam Topic 2)
You are developing a new application that has the following design requirements: Creation and changes to the application infrastructure are versioned and auditable.
The application and deployment infrastructure uses Google-managed services as much as possible. The application runs on a serverless compute platform.
How should you design the application’s architecture?

1. A. * 1. Store the application and infrastructure source code in a Git repository.* 2. Use Cloud Build to deploy the application infrastructure with Terraform.* 3. Deploy the application to a Cloud Function as a pipeline step.
2. B. * 1. Deploy Jenkins from the Google Cloud Marketplace, and define a continuous integration pipeline in Jenkins.* 2. Configure a pipeline step to pull the application source code from a Git repository.* 3. Deploy the application source code to App Engine as a pipeline step.
3. C. * 1. Create a continuous integration pipeline on Cloud Build, and configure the pipeline to deploy the application infrastructure using Deployment Manager templates.* 2. Configure a pipeline step to create a container with the latest application source code.* 3. Deploy the container to a Compute Engine instance as a pipeline step.
4. D. * 1. Deploy the application infrastructure using gcloud commands.* 2. Use Cloud Build to define a continuous integration pipeline for changes to the application source code.* 3. Configure a pipeline step to pull the application source code from a Git repository, and create a containerized application.* 4. Deploy the new container on Cloud Run as a pipeline step.

Correct Answer: D
Reference: https://cloud.google.com/docs/ci-cd

- (Exam Topic 2)
You are developing an application that will allow users to read and post comments on news articles. You want to configure your application to store and display user-submitted comments using Firestore. How should you design the schema to support an unknown number of comments and articles?

1. A. Store each comment in a subcollection of the article.
2. B. Add each comment to an array property on the article.
3. C. Store each comment in a document, and add the comment’s key to an array property on the article.
4. D. Store each comment in a document, and add the comment’s key to an array property on the user profile.

Correct Answer: D

- (Exam Topic 2)
You are designing a resource-sharing policy for applications used by different teams in a Google Kubernetes Engine cluster. You need to ensure that all applications can access the resources needed to run. What should you do? (Choose two.)

1. A. Specify the resource limits and requests in the object specifications.
2. B. Create a namespace for each team, and attach resource quotas to each namespace.
3. C. Create a LimitRange to specify the default compute resource requirements for each namespace.
4. D. Create a Kubernetes service account (KSA) for each application, and assign each KSA to the namespace.
5. E. Use the Anthos Policy Controller to enforce label annotations on all namespace
6. F. Use taints and tolerations to allow resource sharing for namespaces.

Correct Answer: BC
https://kubernetes.io/docs/concepts/policy/resource-quotas/ https://kubernetes.io/docs/concepts/policy/limit-range/
https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-l

- (Exam Topic 2)
You are designing a schema for a table that will be moved from MySQL to Cloud Bigtable. The MySQL table is as follows:

How should you design a row key for Cloud Bigtable for this table?

1. A. Set Account_id as a key.
2. B. Set Account_id_Event_timestamp as a key.
3. C. Set Event_timestamp_Account_id as a key.
4. D. Set Event_timestamp as a key.

Correct Answer: C