NEW QUESTION 1
You have one GCP account running in your default region and zone and another account running in a
non-default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?

• A. Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.
• B. Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.
• C. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.
• D. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.

Answer: C

NEW QUESTION 2
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Answer: C

NEW QUESTION 3
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?

• A. Use service account credentials in your on-premises application.
• B. Use gcloud to create a key file for the service account that has appropriate permissions.
• C. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
• D. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

Answer: B

NEW QUESTION 4
You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax. What should you do?

• A. Export your bill to a Cloud Storage bucket, and then import into Cloud Bigtable for analysis.
• B. Export your bill to a Cloud Storage bucket, and then import into Google Sheets for analysis.
• C. Export your transactions to a local file, and perform analysis with a desktop tool.
• D. Export your bill to a BigQuery dataset, and then write time window-based SQL queries for analysis.

Answer: D

NEW QUESTION 5
You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

• A. Review the Compute Engine activity logs Select and review the Admin Event logs
• B. Review the Compute Engine activity logs Select and review the System Event logs
• C. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs
• D. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs

Answer: A

NEW QUESTION 6
You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be
cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

• A. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.
• B. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.
• C. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.
• D. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.

Answer: B

NEW QUESTION 7
You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?

• A. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
• B. Create an instance template, and use the template in a managed instance group with autoscaling configured.
• C. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
• D. Use a set of third-party tools to build automation around scaling the application up and down, based onStackdriver CPU usage monitoring.

Answer: A

NEW QUESTION 8
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network ta
• C. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• D. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• E. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: B

NEW QUESTION 9
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault- tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

• A. Run a test using simulated maintenance event
• B. If the test is successful, use preemptible N1 Standard VMs when running future jobs.
• C. Run a test using simulated maintenance event
• D. If the test is successful, use N1 Standard VMs when running future jobs.
• E. Run a test using a managed instance grou
• F. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.
• G. Run a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.

Answer: B

NEW QUESTION 10
You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?

• A. Run gcloud iam roles lis
• B. Review the output section.
• C. Run gcloud iam service-accounts lis
• D. Review the output section.
• E. Navigate to the project and then to the IAM section in the GCP Consol
• F. Review the members and roles.
• G. Navigate to the project and then to the Roles section in the GCP Consol
• H. Review the roles and status.

Answer: D

NEW QUESTION 11
You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application.
The security team has forbidden the existence of network routes between these 2 environments, and asks you to follow Google-recommended practices. What should you do?

• A. Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.
• B. Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources.
• C. Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.
• D. Ask the security team to grant you the Project Editor role in an existing production project used by another division of your compan
• E. Once they grant you that role, replicate the setup you have in the development environment in that project.

Answer: A

NEW QUESTION 12
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

You want to resolve the issue. What should you do?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 13
You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them with view access while following Google-recommended practices. What should you do?

• A. Grant each individual external consultant the role of BigQuery Editor
• B. Grant each individual external consultant the role of BigQuery Viewer
• C. Create a Google Group that contains the consultants and grant the group the role of BigQuery Editor
• D. Create a Google Group that contains the consultants, and grant the group the role of BigQuery Viewer

Answer: D

NEW QUESTION 14
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

• A. Enable node auto-provisioning on the GKE cluster.
• B. Create a VerticalPodAutscaler for those workloads.
• C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
• D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

Answer: C

NEW QUESTION 15
You have an application that uses Cloud Spanner as a backend database. The application has a very predictable traffic pattern. You want to automatically scale up or down the number of Spanner nodes depending on traffic. What should you do?

• A. Create a cron job that runs on a scheduled basis to review stackdriver monitoring metrics, and then resize the Spanner instance accordingly.
• B. Create a Stackdriver alerting policy to send an alert to oncall SRE emails when Cloud Spanner CPU exceeds the threshol
• C. SREs would scale resources up or down accordingly.
• D. Create a Stackdriver alerting policy to send an alert to Google Cloud Support email when Cloud Spanner CPU exceeds your threshol
• E. Google support would scale resources up or down accordingly.
• F. Create a Stackdriver alerting policy to send an alert to webhook when Cloud Spanner CPU is over or under your threshol
• G. Create a Cloud Function that listens to HTTP and resizes Spanner resources accordingly.

Answer: D

NEW QUESTION 16
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

• A. Add the users to roles/browser role.
• B. Add the users to roles/iam.roleViewer role.
• C. Add the users to a group, and add this group to roles/browser role.
• D. Add the users to a group, and add this group to roles/iam.roleViewer role.

Answer: C

NEW QUESTION 17
You need to verify that a Google Cloud Platform service account was created at a particular time. What should you do?

• A. Filter the Activity log to view the Configuration categor
• B. Filter the Resource type to Service Account.
• C. Filter the Activity log to view the Configuration categor
• D. Filter the Resource type to Google Project.
• E. Filter the Activity log to view the Data Access categor
• F. Filter the Resource type to Service Account.
• G. Filter the Activity log to view the Data Access categor
• H. Filter the Resource type to Google Project.

Answer: D

NEW QUESTION 18
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Repair feature for your GKE cluster.
• B. Enable the Node Auto-Upgrades feature for your GKE cluster.
• C. Select the latest available cluster version for your GKE cluster.
• D. Select “Container-Optimized OS (cos)” as a node image for your GKE cluster.

Answer: B

NEW QUESTION 19
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

• A. Export Cloud Datastore data using gcloud datastore export.
• B. Create a Cloud Datastore index using gcloud datastore indexes create.
• C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
• D. Install the cloud-datastore-emulator component using the gcloud components install command.

Answer: D

NEW QUESTION 20
You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

• A. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.2. Call your application on Cloud Run from the Cloud Function for every message.
• B. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.2. Create a Cloud Pub/Sub subscription for that topic.3. Make your application pull messages from that subscription.
• C. 1. Create a service account.2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.
• D. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.2. Create a Cloud Pub/Sub subscription for that topic.3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.

Answer: D

NEW QUESTION 21
......