A customer wants to make it convenient for their mobile workforce to access a CRM web interface that is hosted on Google Cloud Platform (GCP). The CRM can only be accessed by someone on the corporate network. The customer wants to make it available over the internet. Your team requires an authentication layer in front of the application that supports two-factor authentication
Which GCP product should the customer implement to meet these requirements?

1. A. Cloud Identity-Aware Proxy
2. B. Cloud Armor
3. C. Cloud Endpoints
4. D. Cloud VPN

Correct Answer: D

A company allows every employee to use Google Cloud Platform. Each department has a Google Group, with all department members as group members. If a department member creates a new project, all members of that department should automatically have read-only access to all new project resources. Members of any other department should not have access to the project. You need to configure this behavior.
What should you do to meet these requirements?

1. A. Create a Folder per department under the Organizatio
2. B. For each department’s Folder, assign the Project Viewer role to the Google Group related to that department.
3. C. Create a Folder per department under the Organizatio
4. D. For each department’s Folder, assign the Project Browser role to the Google Group related to that department.
5. E. Create a Project per department under the Organizatio
6. F. For each department’s Project, assign the Project Viewer role to the Google Group related to that department.
7. G. Create a Project per department under the Organizatio
8. H. For each department’s Project, assign the Project Browser role to the Google Group related to that department.

Correct Answer: C

An organization is migrating from their current on-premises productivity software systems to G Suite. Some network security controls were in place that were mandated by a regulatory body in their region for their previous on-premises system. The organization’s risk team wants to ensure that network security controls are maintained and effective in G Suite. A security architect supporting this migration has been asked to ensure that network security controls are in place as part of the new shared responsibility model between the organization and Google Cloud.
What solution would help meet the requirements?

1. A. Ensure that firewall rules are in place to meet the required controls.
2. B. Set up Cloud Armor to ensure that network security controls can be managed for G Suite.
3. C. Network security is a built-in solution and Google’s Cloud responsibility for SaaS products like G Suite.
4. D. Set up an array of Virtual Private Cloud (VPC) networks to control network security as mandated by the relevant regulation.

Correct Answer: B

Your company is using Cloud Dataproc for its Spark and Hadoop jobs. You want to be able to create, rotate, and destroy symmetric encryption keys used for the persistent disks used by Cloud Dataproc. Keys can be stored in the cloud.
What should you do?

1. A. Use the Cloud Key Management Service to manage the data encryption key (DEK).
2. B. Use the Cloud Key Management Service to manage the key encryption key (KEK).
3. C. Use customer-supplied encryption keys to manage the data encryption key (DEK).
4. D. Use customer-supplied encryption keys to manage the key encryption key (KEK).

Correct Answer: A

An organization is starting to move its infrastructure from its on-premises environment to Google Cloud Platform (GCP). The first step the organization wants to take is to migrate its current data backup and disaster recovery solutions to GCP for later analysis. The organization’s production environment will remain on- premises for an indefinite time. The organization wants a scalable and cost-efficient solution.
Which GCP solution should the organization use?

1. A. BigQuery using a data pipeline job with continuous updates
2. B. Cloud Storage using a scheduled task and gsutil
3. C. Compute Engine Virtual Machines using Persistent Disk
4. D. Cloud Datastore using regularly scheduled batch upload jobs

Correct Answer: A