NEW QUESTION 1
Your company security team manages access control to production systems using an LDAP directory group. How is this access control managed in the Google Cloud production project?

• A. Assign the proper role to the Service Account in the project's 1AM Policy
• B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
• C. Assign the proper role to the Google Group in the project's 1AM Policy.
• D. Create the project in a folder with the same name as the LDAP directory group.

Answer: C

NEW QUESTION 2
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.
Which Google Cloud product or feature should your organization use?

• A. Identity-Aware Proxy
• B. Cloud NAT (network address translation)
• C. VPC internal load balancers
• D. Private Google Access

Answer: B

NEW QUESTION 3
Your company needs to segment Google Cloud resources used by each team from the others. The teams’ efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility. Which approach does Google recommend?

• A. One project per team.
• B. One organization per team.
• C. One project that contains all of each team's resources.
• D. One top-level folder per team.

Answer: A

NEW QUESTION 4
Your company’s development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible usingthe CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them.
What should you do?

• A. Create a Compute Engine image containing the application
• B. Store the images in Container Registry
• C. Store the images in Cloud Storage
• D. Create a Compute Engine disk containing the application

Answer: B

NEW QUESTION 5
You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios. Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any timeto restart later. Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources arenot bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way.
What should you do?

• A. Deploy the application on Compute Engine using preemptible instances
• B. Develop the application so it can run in an unmanaged instance group
• C. Create a reservation for the minimum number of Compute Engine instances you will use
• D. Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instances with more vCPUs

Answer: A

NEW QUESTION 6
As your organization increases its releasevelocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster.
What should your organization do?

• A. Migrate your VMs to the cloud, and add more resources tothem
• B. Convert your applications into containers
• C. Increase the resources of your VMs
• D. Automate your upgrade rollouts

Answer: D

NEW QUESTION 7
Which Google Cloud product gives you a consistent platform for multi-cloud application deployments and extends other Google Cloud services to your environment?

• A. Google KubernetesEngine
• B. Virtual Public Cloud
• C. Compute Engine
• D. Anthos

Answer: D

NEW QUESTION 8
Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another. Each department has several environments of its own: development, testing, and production. Which strategy should your organization choose?

• A. Create a project per department, and create a folder per environment in each project.
• B. Create a folder per department, and create a project per environment in each folder.
• C. Create a Cloud Identity domain per department, and create a project per environment in each domain.
• D. Create a Cloud Identity domain per environment, and create a project per department in each domain.

Answer: D

NEW QUESTION 9
Your organization runs many workloads in different Google Cloud projects, each linked to the same billing account. Each project's workload costs can vary from month to month, but the overall combined cost of all projects is relatively stable. Your organization needs to optimize its cost.
What should your organization do?

• A. Purchase a commitment per project for each project’s usual minimum
• B. Create a billing account per project, and link each project to a different billing account
• C. Turn oncommitted use discount sharing, and create a commitment for the combined usage
• D. Move all workloads from all different projects into one single consolidated project

Answer: B

Explanation:
Billing contacts

NEW QUESTION 10
Your organization uses Active Directory to authenticate users. Users’ Google account access must be removed when their Active Directoryaccount is terminated.
How should your organization meet this requirement?

• A. Configure two-factor authentication in the Google domain
• B. Remove the Google account from all IAM policies
• C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
• D. Configure single sign-on in the Google domain

Answer: D

NEW QUESTION 11
What would provide near-unlimited availability of computing resources without requiring your organization to procure and provision new equipment?

• A. Public cloud
• B. Containers
• C. Private cloud
• D. Microservices

Answer: A

NEW QUESTION 12
Your organization needs to analyze data in order to gather insights into its daily operations. You only want to pay for the data you store and the queries you perform. Which Google Cloud product should your organization choose for its data analytics warehouse?

• A. Cloud SQL
• B. Dataproc
• C. Cloud Spanner
• D. BigQuery

Answer: A

NEW QUESTION 13
How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?

• A. Comply with data security and privacy regulations in each geographical region
• B. Comply with regional standards for data security and privacy, because they supersede all international regulations
• C. Comply with international standards for data security and privacy, because they supersede all regional regulations
• D. Comply with regional data security regulations, because they’re more complex than privacy standards

Answer: C

NEW QUESTION 14
Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team.Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process.
Which Google Cloud product or feature should your organization use?

• A. Cloud Scheduler
• B. Cloud Code
• C. Cloud Build
• D. Cloud Deployment Manager

Answer: C

Explanation:
Deploy your application to App Engine using the gcloud app deploy command. This command automatically builds a container image by using the Cloud Build service and then deploys that image to the App Engine flexible environment.

NEW QUESTION 15
Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, andwould like to use those database skills.
Which Google Cloud product or feature should your organization choose?

• A. BigQuery ML
• B. LookML
• C. TensorFlow
• D. Cloud SQL

Answer: A

NEW QUESTION 16
Your organization wants to be sure that is expenditures on cloud services are in line with the budget. Which two Google Cloud cost management features help your organization gain greater visibility into its cloud resource costs? (Choose two.)

• A. Billing dashboards
• B. Resource labels
• C. Sustained use discounts
• D. Financial governance policies
• E. Payments profile

Answer: BD

NEW QUESTION 17
......