For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.
Considering Dress4Win's business and technical requirements, what should you do?
Answer
Assign custom IAM roles to the Google Groups you created in order to enforce security requirements. Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.
Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Utilize Google's default encryption at rest when storing files in Cloud Storage.
Assign custom IAM roles to the Google Groups you created in order to enforce security requirements. Enable default storage encryption before storing files in Cloud Storage.
Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.
Card 162
Question
For this question, refer to the Dress4Win case study. You want to ensure that your on-premises architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?
Answer
Replace RabbitMQ with Google Pub/Sub.
Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.
Resize compute resources to match predefined Compute Engine machine types.
Containerize the micro services and host them in Google Kubernetes Engine.
Card 163
Question
Which of the following services provides real-time messaging?
Answer
Cloud Pub/Sub
Big Query
App Engine
Datastore
Card 164
Question
Which of the following tasks would Nearline Storage be well suited for?
Answer
A mounted Linux file system
Image assets for a high traffic website
Infrequently read data backups
Frequently read files
Card 165
Question
Which of the following products will allow you to administer your projects through a browser based command-line?
Answer
Cloud Datastore
Cloud Command-line
Cloud Terminal
Cloud Shell
Card 166
Question
Which of the following products will allow you to perform live debugging without stopping your application?
Answer
App Engine Active Debugger (AEAD)
Stackdriver Debugger
Code Inspector
Pause IT
Card 167
Question
Which of these options is not a valid Cloud Storage class?
Answer
Glacier Storage
Coldline Storage
Nearline Storage
Regional Storage
Card 168
Question
Regarding Cloud Storage, which option allows any user to access to a Cloud Storage resource for a limited time, using a specific URL?
Answer
Open Buckets
Temporary Resources
Signed URLs
Temporary URLs
Card 169
Question
Of the options given, which is a NoSQL database?
Answer
Cloud Datastore
Cloud SQL
All of the given options
Cloud Storage
Card 170
Question
Google Kubernetes Engine (GKE) allows orchestration of what type of containers?
Answer
Blue Whale
LXC
BSD Jails
Docker
Card 171
Question
Regarding Cloud IAM, what type of role(s) are available?
Answer
Basic roles and Compiled roles
Simple roles
Basic roles, Predefined roles and Custom roles
Basic roles and Curated roles
Card 172
Question
Which of the follow products will allow you to host a static website?
Answer
Cloud SDK
Cloud Endpoints
Cloud Storage
Cloud Datastore
Card 173
Question
Cloud Source Repositories provide a hosted version of which version control system?
Answer
Git
SVN
RCS
Mercurial
Card 174
Question
Which of the following is an analytics data warehouse?
Answer
Cloud SQL
Big Query
Cloud Storage
Datastore
Card 175
Question
Which service offers the ability to create and run virtual machines?
Answer
Google Virtualization Engine
Compute Containers
VM Engine
Compute Engine
Card 176
Question
Which of the following is not helpful for mitigating the impact of an unexpected failure or reboot?
Answer
Use persistent disks
Configure tags and labels
Use startup scripts to re-configure the system as needed
Back up your data
Card 177
Question
Single sign-on (SSO) with Google Workspace is based on _____?
Answer
SAML2 and OIDC
JWT
Service accounts
JSON
Card 178
Question
Which tool allows you to sync data in your Google domain with Active Directory?
Answer
Google Cloud Directory Sync (GCDS)
Google Active Directory (GAD)
Google LDAP Sync
Google Domain Sync Service
Card 179
Question
Regarding Cloud Storage: which of the following allows for time-limited access to buckets and objects without a Google account?
Answer
Signed URLs
gsutil
Single sign-on
Temporary Storage Accounts
Card 180
Question
Which of the following is a virtual machine instance that can be terminated by Compute Engine without warning?
Answer
A preemptible VM
A shared-core VM
A high-cpu VM
A standard VM
How to use this set
Read the preview and check whether the content and answers suit your learning goal. You can add the public set to your sets to study it. Your account shows the available actions.