Google Cloud Digital Leader (GCP) Certified Practice Test - Resultados Voltar para reviséo Tentativa 1 Todas as perguntas pergunta 1; Ignorado You are migrating workloads to the cloud, The goal of the migration is to serve customers worldwide as quickly as possible According to local regulations, certain data is required to be stored in a specific geographic area, and it can be served worldwide. You need to design the architecture and deployment for your workloads ‘What should you do? oO Select a public cloud provider that is only active in the required O Select a private cloud provider fhat globally replicates data storage © Select a public cloud provider that guarantees data ee ., . (Correto) location in the required geographic area oO Select a private cloud provider fat is only active in the required Explicacao Key words - as quickly as possible -> should be public cloud with low latency and also guaranteeing data storage in the required locationPergunta 2: Ignorado Your organization needs a large amount of extra computing power within the next two weeks. After those two weeks, the need forthe additional resources will end Which is the most cost-effective approach? tual reserve a very powerful O Use a committed use discount Purchase one vi werful physical computer O Purchase multiple physical computers and scale workload across O Start avery powerful virtual machine without using a correc) Explicagao ‘When you purchase a committed use contract, you purchase Compute Engine resources—suich as vCPUs, memory, GPUS, local SSDs, and sole-tenant nades—at a discounted price in return for committing to paying for those resources for 1 year or 3 years we don't know the compute use for 2 weeks and discount is available on 1-3 years not for 2 weeks. Reference: htpsi//cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts Pergunta 3: Ignorado Your organization needs to plan its cloud infrastructure expenditures. Which should your organization do? O Review cloud resource costs frequently, because costs (Correto)© Review cloud resource costs anpi ually as part of planning your Oo If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget oO Involve fewer people in cloud organization did for on-premise Explicacao “Cloud Infrastructure’ as being only physical. The resources like Ch resources and cloud infrastructure are used interchangeable. source planning than your s resource planning loud VPN, Interconnects, GCE, ete are all ‘cloud infrastructure! Correct Answer a: explained in module 4, section 1: Financial governanace :- variable nature of cloud resources and their costs, spending must be monitored and controlled on an ongoing basis Pergunta 4; Ignorado The operating systems of some of your organization's virtual mact How can your organization most effectively identify all virtual mac Oo View the Security Command C machines running vulnerable di isk images oO View the Compliance Reports M © View the Security Command cr O View the Compliance Reports M hines may have a security vulnerability. ines that do not have the latest security update? iter to identify virtual (Correto) anager to identify and download a ter to identify virtual machines anager to identify and download aExplicacao Security Command Center is a centralized security and risk management platform for your google cloud resources. Pergunta 5: Ignerado: You are currently managing workloads running on Windows Server for which your company owns the licenses. Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend, Your Windows Server licenses are up for renewal in a month, and you want to optimize your license cost. What should you do? © Renew your licenses for an add cost reduction by committing t tional period of 2 years. Negotiate a an automatic renewal of the period O Migrate the workloads to Compute Engine with a pay-as- you-go (PAYG) model (Correto) O Renew your licenses for an additional period of 3 years. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use ute Engine with a bring-your-own- Explicagao It says “optimize your license cost” and that license will expire in one month, Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend, Here Pay as You go Model is useful Pergunta 6 Ignorado Your organization runs a cltrbuted application inthe Compute Engine virtual machines. Your organization needs redundancy, butit ao needs extremely fast communication (ess than 10 milseconds) between the pats of the application in ferent virtual machines. Where should your organization locate this virtual machines? oer rerei ithin a si egion i ithii ingle region (Correto) i i i le zones per ret Explicagao It guarantees a latency of ~10 milliseconds is maintained, well also giving the redundancy of multi-zone. Iit was D, we could not guarantee 10 milliseconds between the different regions. Multi zone is also redundant within the region, and it provides the lowest latency. Pergunta 7; Ignorado An organization decides to migrate their on-premises environment to the cloud. They need to determine which resource components still need to be assigned ownership. Which two functions does a public cloud pro nfrastructlre architecture jer own? (Choose two.) ere ere (core ee eeLn frastructire deployment automation [sé ixing application security issues Pergunta 8; Ignorado You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios, Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later. Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources are not bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way. ‘What should you do? Oo Develop the application, so it qn run in an unmanaged instance imum number of Compute Engine O Create a reservation for the min O Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instankes with more vCPUs O Deploy the application on Compute Engine using (Correto) Explicagaéo Can be interrupted at any time to restart later, software needs to run on Google Cloud in a cost-optimized way. Scheduled at will and to be interrupted at any time to restart later, and no SLA makes,Perguntas: Ignorado Your manager wants to restrict communication of all virtual machi with a resource outside Compute Engine. Itis expected that different teams will create new folders external IP address © Define an organization poly a node to restrict virtual machin Lasers 12 aclelpou, O Communicate with the differen] virtual machine is created, it mi external IP address Explicacao Introduction t Policy Service aw rg organzatins a entering cones Athowto guides The Organization Policy Sen » Resource Manager » organization pty serce » ary access Cater Benefits Concepts Akcencept + Centralize contralto co! me + Define and establish g organization pai serie boundaries Oo Define an organization policy on all exi: |_~_vireal machine instances fom virtual machine instances from having an external IP address ines with internet access; with resources in another network: or and projects in the near future. How would you restrict all virtual machines from having an external IP address? all existing folders to define a O Define an organization policy 9} constraint to restrict virtual machine instances from having an the root organization instances from having an —_(Correto) teams and agree that each time a ist be configured without an ing projects to restrict ena feedback 0 the Organization Q rice glves you centralized and programmatic contro over your ‘organizations cloud resources. As the organization policy administrator, you willbe able to configure constants across your entire resource hierarchy, figure restrictions on how your organization’ resources cen be used uardrails for your development teams to stay within compliancehttps://cloud google.com/resource-manager/docs/organization-policy/overview Pergunta 10: Ignorado Your multinational organization has servers running mission-critical workloads on its premises around the world. You want to be able to manage these workloads consistently and centrally, and you want to stop managing infrastructure, ‘What should your organization do? cloud (Correto) |_©) Migrate the workloads to a central office building O Migrate the workloads to multiple local co-location facilities O Migrate the workloads to multiple local private clouds Explicagao Key is manage centrally. Manage these workloads consistently and centrally, and you want to stop managing infrastructure. Pergunta 11: Ignorado Infrastructure and Application Modernization with Google Cloud Google provides discounts to its customers on their commitment to use the minimum level of Compute Engine resources in a particular region. These discounts are called Resource-based committed use discounts. For which of the below resources can customers not avail Resource-based committed use discounts? LQ vepy iS; |_©Q Memory Sd; LO cloudsqap (Correto)LQ© tocalssp Explicagaéo Options A, B, and D are incorrect: Resource-based committed use discounts to apply to CPUs, memory, GPUs, and local SSDs. Option C is correct: Resource-based committed use discounts cannot be applied to Cloud SQL, because Cloud SQL. commitments are spend based. Reference: hetpsi//cloud.google.com/docs/cuds#resource_based_commitments Pergunta 12: Ignorado Infrastructure and Application Modernization with Google Cloud You are identified as the project manager for a migration project. The key considerations that you need to ensure while planning this migration are that post-migration, the workload should be able to operate *as-is* in the target environment because the source code of the workload is impossible to be modified, Which of the below migration strategies would be best suited for this requirement? © Lift and Shift (Correto) Explicacao Option A is correct: The scenario specifies that changing the source code is mostly impossible, Hence the target environment, should be the same as the source. In this scenario, lift and shift are the most appropriate method, Options B, C, D are incorrect: ‘Improve and Move’ migration involves modernizing the workload while migration, and ‘Rip and Replace’ involves either decommissioning or redesigning the existing app. Hence itis not suitable for the stated scenario. References:https://cloud.google.com/architecture/migration-to-gc https://cloud.google.com/architecture/migration-to-gcp-getting-startedstypes_of migrations Pergunta 13: Ignorado Infrastructure and Application Modernization with Google Cloud Which of the below-listed storage class is most appropriate for storing frequently accessed data? |_©) Standard Storage = (Correto) Q_ Archive storage Explicagao Option A is correct: Standard Storage is the best-sulted storage lass for data that is accessed frequently Option B is incorrect: Nearline Storage is best suited when a 30-day minimum storage duration, slightly lower availability, and data access costs are acceptable as trade-offs for lowered at-rest storage costs Option C is incorrect: Coldline Storage is best suited for highly durable storage for infrequently accessed data, Option D is incorrect: Lowest-cost Archive Storage is highly durable Storage best suited for data archiving, online backup, and disaster recovery, Reference: hetps//cloud.google.comystorage Pergunta 14: Ignorado Innovating with Data and Google Cloud Most Cloud and Developer APIs and Google Cloud services have access permitted by Private Google Access, Which of below-listed services does NOT have the access allowed by Private Google Access?LL amarystre Cloud Data Fusion Explicagao Option A is correct: Private Google Access does not permit access to Memorystore. Option B is correct: Private Google Access does not permit access to Filestore Option Cis incorrect: Private Google Access permits access to Cloud Data Fusion, Option D incorrect: Private Google Access permits access to Cloud Billing API Option E is incorrect: Private Google Access permits access to BigQuery APL (Correto) (Correto)Reference: hetpsi//cloud.google.com/vpe/docs/private-google-accesst#pga-supported Pergunta 15: Ignorado Innovating with Data and Google Cloud Your team lead has approached you for some suggestions. The team lead wants to know which Google cloud product he can use for messaging and ingestion for a stream analytics solution he is working on. Which of the following has both the push and pull modes? LQ Pub/Sub (Correto) Explicacao Option A is incorrect: Fully managed Dataflow is a data processing service. Option B is incorrect: Fully Managed service, Cloud Data Fusion, is a scalable cloud-native data integrator. Option C is incorrect: Cloud BigMessage is an invalid option Option D is correct: Pub/Sub is the Google Cloud offering that is ideal for messaging and ingestion for a stream analytics solution and has both the push and pull modes. References: httpsi//cloud google.com/data-fusion https://cloud google.com/dataflow httpsi//cloud.google.comypubsub Pergunta 16: Ignorado Innovating with Data and Google Cloud A local Swedish news organization with more than 100 publications and 200K readers has commissioned a project to develop a customized news reader application, For which of the following functionalities would you use Firestore?Run ACID transactions against the Mata. (Correto) Create application cache to provide sub- Lor i access to data. Migrating faching layer to cloud without code eee (Corret database. (Correto) Explicagao Option A is correct: Firestore allows running ACID transactions against the document data Option B is incorrect: MemoryStore should be used for creating an application cache to provide sub-milisecond access to data Option C is incorrect: MemoryStore should be used for migrating caching layers to the cloud without code change. Option D is correct: Firestore allows creating a scalable document database. References: https//cloud.google.com/firestore https://cloud.google.com/memorystore Pergunta 17; Ignoradonnovating with Data and Google Cloud {An e-fashion retail start-up has seen an exponential increase in the number of users with a very high user growth rate, To ensure that the existing and the new users do not face any performance issues, the organization has decided to migrate its current SQL server database to Cloud SQL using Database Migration Service. Identify the correct statement with regards to this planned migration? The proposed migration to Cloud SQL cannot be performed because saqu server jatabase ration using —_(Correto) jot supported The proposed migration to Cloud SQL can be performed only if cross- platform database migration is enabled while using Database O The proposed ration to Cloud SQL can be performed only if data replication is enabled on the current SQL server database. © Alloftheabove Explicagaéo Option A is correct: Database Migration Service can be used only to perform the migration of PostgreSQL and MySQL databases. SQL Server database migration is currently not supported and is coming soon. Hence Option Ais incorrect. Options B, C, and D are incorrect: because all of these options are invalid, Reference: httpsi//cloud.google.com/database-migration Pergunta 18: Ignorado Innovating with Data and Google Cloud Your team is developing an application that will derive insights from collected raw weather data using Machine Learning and publish it to its users. Which Google Product Offering would you the text from unstructured weather data, ‘efer to get insightful text analysis using ML to extract, analyze and store jout any code? |_© Natural Language AL___—__| (Correto)© ‘TextAnalysisAl Explicagao Option A is correct: Natural Language Al is a Google machine learning offering that helps in deriving insightful data from Unstructured text. Option B incorrect: Cloud Inference API helps in running large-scale correlations quickly over typed time-series datasets. Option C is incorrect: Recommendations Al helps in delivering personalized product recommendations Option D \correct: TextAnalysis Al is just a distraction; there is no Al lke this, References: (psi//cloud.google.com/natural-language htips//cloud.google,convinference htips//cloud.google.comy/recommendations Pergunta 19: Ignorado Introduction to Digital Transformation with Google Cloud While designing a solution for a client, which of the below scenarios laaS cannot be used? O laaS cannot be used to Run testing and development |_©__1aaS cannot be used to Perform big data analysi O laaS cannot be used to Improve disaster recovery preparation O laaS cannot be used to get Improved control on Operating System (Correto) hosting your applicaExplicacao Option A is incorrect: As in the given scenario, aaS is a good choice, and hence the given statement is correct. laaS can be used to Run testing and development. Option B is incorrect: As in the given scenario, laaS is a good choice, and hence the given statement is correct. laaS can be used to Perform big data analysis. Option C is incorrect: As in the given scenario, laaS is a good choice, and hence the given statement is correct. laaS can be used to improve disaster recovery preparation, Option D is correct: The given scenario/statement is incorrect, While using laaS, the customer has control over the Operating System hosting your application. In PaaS and SaaS, the customer does not have control over the Operating System hosting the application, https://cloud.google.com/learn/what-is-iaas#section-S Pergunta 20: Ignorado: Introduction to Digital Transformation with Google Cloud Which one of the below listed compute engine deployment options provides the feature of “predictive horizontal scaling"? © StatelessMIG (Correto) LQ Statefulmig © StandaloneVMs Explicagao Option A is correct: Stateless MIG provides the feature of “predictive horizontal scaling”. Refer to the snapshot below for detail Option B is incorrect: Stateful MIG does not provide the feature of “predictive horizontal scaling’. Refer to the snapshot below for details Option C is incorrect: The Unmanaged Instance group does not provide the feature of "predictive horizontal scaling”. Refer t the snapshot below for details. Option D for details, incorrect: Standalone VMs do not provide the feature of “predictive horizontal scaling”. Refer to the snapshot below Reference:https://cloud.google.com/compute/docs/choose-compute-deployment-option Pergunta 21: Ignorado: Introduction to Digital Transformation with Google Cloud ‘Which of the below listed are the main purpose of Google Cloud resource hierarchy? Helps developers to use turnkey self-service [| tatasbemersip hierarchy (Comte Provide inheritance for organization (Correto) access control. ‘ J Facilitates administrators to access controls ributes for resources in Google Cloud. Explicagao Option A is incorrect: Developer portal (Apigee integrated portal) helps API teams and the development teams use the turnkey self-service platform, Option B is correct: Facilitating ownership hierarchy is one of the main purposes of Google Cloud resource hierarchy. Option C is correct: Providing inheritance for organization policies and access control is one of the main purposes of Google Cloud resource hierarchy, Option D is incorrect: Access Context Manager facilitates administrators to access controls based on attributes for resources in Google Cloud.References: hetps//cloud google.com/resource-manager/docs/cloud. resource-hierarchy https://docs.apigee.com/api-platform/publish/developer-portaltintegrated-portal https://cloud google.com/access-context-manager/docs Pergunta 22: Ignerade Introduction to Digital Transformation with Google Cloud Which of the below listed is the root node of Google Cloud resource hierarchy? © Organization (Correto) © Folders LQ Projects L© Resources Explicagao Option A is correct: Root node for the Google Cloud resource hierarchy is Organization. Options B, C, D are incorrect: Please refer to the diagram from Google Documentation below. Reference: https://cloud google.com/resource-manager/docs/clou: \ierarchy Pergunta 23; Ignorado Introduction to Digital Transformation with Google Cloud Your client has commissioned a project to modernize IT and strengthen security, As a part of the same, the Organization wants to implement: 1- Multi-factor authentication 2: Endpoint management for the security of the devices Which of the below would you propose to use for this requirement?© Cloud Identity (Correto) Explicagao Option A is incorrect: Advanced protection helps enforce usage of security keys, block access to the untrusted apps, and perform enhanced scanning of the email threats Option B is incorrect: Cloud IAM helps with Identity and Access Management, However, it cannot help with enforcing the endpoint management for the devices or implementing MFA, Option Cis correct: Cloud Identi implement MFA, amongst others, y is a unified platform that can help enforce endpoint management policies for devices, Option D is incorrect: Cloud Access Manager is an invalid option, References: httpsi//landing.google.com/advancedprotection/ hetps//cloud.google.comyiam https://cloud.google.comyidentity Pergunta 24: Ignorado: Introduction to Digital Transformation with Google Cloud Which one of the fully managed Google Cloud services abstracts away infrastructure management tasks and enables the development and deployment of highly scalable containerized applications on a serverless platform? LQ© cloud Build LQ© Knative © cloud Run (Correto)|_©) Cloud Serverless | Explicagaéo Option A is incorrect: Cloud Build helps developers build, test, and deploy on Google Cloud's serverless CV/CD platform Option B is incorrect: Kubernetes-based Platform, Knative, facilitates building, deploying, and managing modern serverless workloads Option C is correct. : Cloud Run is a fully managed Google Cloud offering that enables the development and deployment of highly scalable containerized applications on a serverless platform, Option D is incorrect: Cloud Serverless is an invalid option. References: https//cloud.google.com/build httpsi//cloud.google.com/knative https://cloud.google.com/run Pergunta 25: Ignorado Introduction to Digital Transformation with Google Cloud ‘You are working on an RFP and listing down the features of Cloud CDN, Which of the below listed is NOT a feature of Cloud oN? jo extra cost O Customers can bring their own certificate at no extra cost © Customers can initiate cache validation at no extra cost — (Correto) Explicagaéo Option A is incorres : Cloud CDN supports multi-cloud architecture. Option B LS certificates are included at no extra cost. Option C is incorrect: Customers can bring their own certificate at no additional cost, Option D is correct: Customers are charged for any cache invalidation that they initiate,Reference: hetps//cloud.google.comyedn Pergunta 26: Ignorado Your organization needs to build streaming data pipelines. You don't want to manage the individual servers that do the data processing in the pipelines. Instead, you want a managed service that will automatically scale with the amount of data to be processed Which Google Cloud product or feature should your organization choose? QO. Pub/Sub |_©) Dataprep by Trifacta © Dataflow (Correto) LQ© DataCatalog Explicagao Reference: s://cloud.google.com/dataflow/docs/quides/deploying-a-pipelineDeploying a pipeline 4 enc! feeaback Yk This document explains in detail how Dataflow deploys and runs a pipeline, and covers advanced topics like optimization and load balancing. If you are looking for a step-by-step guide on how to create and deploy your first pipeline, use Dataflow's quickstarts for Java, Python or templates. After you construct and test your Apache Beam pipeline, you can use the Dataflow managed service to deploy and execute it. Once on the Dataflow service, your pipeline code becomes a Dataflow job. The Dataflow service fully manages Google Cloud services such as Compute Engine and Cloud Storage to run your Dataflow job, automatically spinning up and tearing down the necessary resources, The Dataflow service provides visibility into your job through tools like the Dataflow monitoring interface and the Dataflow command-line interface. Pergunta 27: Ignorado: Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team. Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process. Which Google Cloud product or feature should your orgar © Cloud Build (Correto) |_©) Cloud Deployment Manager | Q_ Cloud Code © Cloud Scheduler Explicagao Cloud Build helps build, test and deploy on serverless CV/CD platforms Deploy your application to App Engine using the gcloud app deploy command. This command automatically builds a container image by using the Cloud Build service and then deploys that image to the App Engine flexible environment.Reference: htpsi//cloud google com/appengine/docs/tlexible/nodejs/testing-and-deployin Testing and Deploying your sone tenon veneoomes Application © igs lg pss Python | dave | Nedeje | Go| Ruby | PHP NET » Designing Your App Learn how to run your application locally, deploy it, and test on App Engine. “esting ane Deporng Your Ap Runi \g locally To test your applications functionality before deploying. un your application in your local ‘Storing ata andes environment withthe development tools that you usually use, uthenesing Uses cancena tana For example, nom start Pergunta 28: Ignorado ‘Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects? |_©_ Identity and Access Managemeht © Google Cloud Armor __| |_©)_ Security Command Center _| (Correto) LQ Cloud Logging _] Explicagao Security Command Center isa centralized security and risk management platform for your Google Cloud resources tis a single tool that offers a variety of security features, including 1. Gain centralized visibility and control 2. Discover misconfigurations and vulnerabilities 3. Report on and maintain compliance 4. Detect threats targeting your Google Cloud assets reference:htpsi//cloud.google.com/security-command-cen Pergunta 29: Ignorado Your organization needs to establish private network connectivity between its on-premises network and its workloads running in Google Cloud. You need to be able to set up the connection as soon as possible, Which Google Cloud product or feature should you use? LO cloudvpN (Correto) Explicagao Cloud VPN setup can be done instantly and though it travels over internet, itis private in nature, Cloud interconnect needs physically dedicated connection As per Google the Cloud VPN can be established using a private and public IP both, Now here the main point or thing to focus is Bandwidth requirement if it is Private and your connection is in Google POP then we use Dedicated Interconnect or Partner Interconnect. Else for Public IP we use Direct peering Or carrier peering Reference: htips//cloud google.com/blog/products/networking/google-cloud-network-connectivity-options-explained Pergunta 30: Ignorado Your organization is developing a mobile app and wants to select a fully featured cloud-based compute platform for it. Which Google Cloud product or feature should your organization use? |_© Cloud Functions |LO Ffirebase (Correto) Explicagao Always look for key points, “mobile app", the best option for ths is for sure Firebase, is mobile friendly, | have taken multiple ‘webinars from Googlers, and they always give that advice forall Google Cert exams, look for key points that are documented offically Reference: hetpsi//cloud.google.comyfirestore/docs/client/get-firebase Pergunta 31; Ignorado Your company has been using a shared facility for data storage and will be migrating to Google Cloud. One of the internal applications uses Linux custom images that need to be migrated. Which Google Cloud product should you use to maintain the custom images? |_© App Engine standard environment © Compute Engine (Correto) Explicagaéo You can use one of the following image types: Public and Custom images.Reference: hetps//cloud.google.comy/compute/docs/images Pergunta 32: Ignorado Your organization wants to migrate its data management solutions to Google Cloud because it needs to dynamically scale up or down and to run transactional SQL queries against historical data at scale. Which Google Cloud product or service should your organization use? © Cloud Spanner (Correto) Explicacao States transactional SQL, so it's Spanner 1psi/cloud. google.com/terms/services Cloud Spanner: Cloud Spanner is a fully-managed, mission-critical relationel database service, I is designed to provide a scalable online transaction processing (OLTP) database with high availability and strong consistency at global scale. Pergunta 33: Ignorado: Your organization needs to categorize objects in a large group of static images using machine learning. Which Google Cloud product or service should your organization use? © loud Vision APL (Correto)Explicagao Visian Al derives insights from your images in the cloud or at the edge with AutoML Vision or use pre-trained Vision API models to detect emotion, understand text, and more. Reference: htips//cloud.google.comvvision/automl/docs/create-datasets Pergunta 34: Ignorado Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement. Which Google Cloud product or feature should your organization use? |_© VPC internal load balancers | |_©) Private Google Access (Correto) |_©) Cloud NAT (network address translation) |_© Identity-Aware Proxy _—_| Explicagaéo According to the Google Documents >>> By default, when a Compute Engine VM lacks an external IP address assigned to its network interface, it can only send packets to other internal IP address destinations. You can allow these VMs to connect to theset of external IP addresses used by Google APIs and services by enabling Private Google Access on the subnet used by the VM's network interface, Besides, the security rules say no Internet access while NAt provite internet access. Google Private Access is like AWS VPC endpoint where you access GCP Public services without using Public Internet, Reference: https://cloud google.com/vpe/docs/private-goog| Pergunta 35: Ignorado Which Google Cloud product is designed to reduce the risks of handling personally identifiable information (PII)? |_© Cloud Data Loss Prevention _| (Correto) QO Secret Manager |_© Google Cloud Armor __| | © Cloud Storage Explicagao Cloud Data Loss Prevention (DLP) detect and protect sensitive information within GCP storage repositories httpsi//cloud google.comv/blog/products/gcp/take-charge-of-your-sensitive-data-with-the-cloud-dlp-api Pergunta 36: Ignorado Your organization is migrating to Google Cloud. As part of that effort, it needs to move terabytes of data from on-premises file servers to Cloud Storage, Your organization wants the migration process to be automated and to be managed by Google. Your organization has an existing Dedicated Interconnect connection that it wants to use. Which Google Cloud product or feature should your or: jon use? |_© Transfer Appliance _|Explicagao (Correto) It is storage transfer Service as the customer wants to use its existing dedicated Internet. Reference: https//cloud google.comvarchitecture/migration-to-google-cloud-transferring-your-large-datasets Where you're moving data from ‘Another cloud provider (for example, Amazon Web Services or Microsoft Azute) to Google Cloud Cloud storage to Cloud Storage (two different buckets) Your private data center to Google Cloud Your pvate data center to Google Cloud Your private data center to Google Cloud Pergunta 37: Ignorado: Scenario Enough bandwidth to meet your project deadline forless than 1 TH of data Enough bandwidth to meet your project deadline ‘or mote than 1 TB of data Not enough bandwidth to meet your project deadline Suggested products Storage Transfer Serv Storage Transfer Service gsutil Storage Transfer Service for orrgremises data Transfer Appliance Your organization needs to analyze data in order to gather insights into its daily operations. You only want to pay for the data you store and the queries you perform. Which Google Cloud product should your organization choose for |_© CloudSpanner _© BigQuery data analytics warehouse? (Correto)Explicacao Key pay per query used. hetpsi//cloud.google.com/bigquery/pricing Pergunta 38: Ignorado ‘Your organization wants to run a container-based application on Google Cloud. This application is expected to increase in complexity. You have a security need for fine-grained control of traffic between the containers, You also have an operational need to exercise fine-grained control over the application's scaling policies. What Google Cloud product or feature should your organization use? _© AppEngine sd; |_© Google Kubernetes Engine cluster (Correto) ies Explicagao GKE seems a better fit since the requirement is for "security need for fine-grained control of traffic between the containers" and "fine-grained control over scaling policies’. Such level of control is easier on GKE that Cloud Run Reference:https://cloud.google.com/blog/products/containers-kubernetes/when-to-use-google-kubernetes-engine-vs-cloud-run-for- containers Pergunta 39: Ignorado: Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations? | © Google Cloud firewalls __| |_©) Security Command Center _| (Correto) Explicagao Reference: httpsi//cloud.google.com/securit Asset discovery and inventory Di cross App Engine, BigQuery, Cloud SQL, Cloud Storage, Compute Engine, Cloud Identity and Access Management, Google Kubernetes Engine, and mare. Review historical discovery scans to Identify new, modified, or delated assets. over and view your assets in near-real time 2 Threat prevention Understand the security state of your Google Cloud assets. Uncover common web application vulnerabilities such as cross-site scripting or outdated libraries in your web applications running on App Engine, GKE, and Compute Engine. Quickly resolve misconfigurations by clicking directiy on the impacted resource and following the prescribed steps on how to fix it Threat detection Detect threats using logs running in Google Cloud at scale. Detect some of mast common container attacks, including suspicious binary, suspicious library, and reverse shellPergunta 40: Ighorado Which Google Cloud product provides a consistent platform for multi-cloud application deployments and extends other Google Cloud services to your organization's environment? _Q© Anthos SS; (Correto) Explicacao Multi cloud migration -> Anthos Pergunta 41: Ignorado Your organization is developing an application that will manage payments and online bank accounts located around the world, The most critical requirement for your database is that each transaction is handled consistently. Your organization anticipates almost unlimited growth in the amount of data stored, Which Google Cloud product should your organization choose? © Firestore = LO cloudso. |_© Cloud Spanner (Correto)Explicagao CloudSpanner is the correct answer. Firestore is for mobile applications developed from Firebase, GCS is not a Database and Cloud SQL isto simple for this amout of data Global unlimited storage can be provided by Cloud Spanner only. Firestore gives very limited storage capacity ergunta 42: Ignorado Your organization wants an economical solution to store data such as files, graphical images, and videos and to access and share them securely Which Google Cloud product or service should your organization use? © Cloud Spanner LQ coudsqa, © Cloud Storage (Correto) Explicagaéo If you're familiar with AWS, Google Storage is GCP's version of AWS Simple Storage Service ($3) and an $3 bucket would be equivalent to a Google Storage bucket across the two clouds. Reference: hitps://wwsmyamberlife.com/leamn/top-ways:Desktop storage Despite many external solutions for digital files, some people still store their photos, videos, and content files on their desktop or laptop. The only problem with this method is that your computer can quickly become cluttered with thousands of files. It slows your prized piece of hardware (computer) down. When you want to find a digital file you probably expect that file to come flying up on your screen in an instant. Yet — anyone who keeps a lot of photos on a computer knows it can take minutes, sometimes hours, to find one - even if you keep it on your desktop. It’s just not all that convenient to store things this way. Most importantly, just storing these digital files on a desktop leaves them vulnerable to viruses, damage, or theft. Folks who rely on this also generally don’t have a back-up plan. Pergunta 43: Ignorado Your organization wants to predict the behavior of visitors to its public website, To do that, you have decided to build a machine learning model. Your team has database-related skis but only basic machine learning skills and would like to use those database skills. Which Google Cloud product or feature should your orgar |© BigQuerymt (Correto) Explicacao BigQuery ML lets you create and execute machine learning models in BigQuery using standard SQL queries. BigQuery ML democratizes machine learning by letting SQL practitioners build models using existing SQL tools and skill. BigQuery ML increases development speed by eliminating the need to move data,hetps://cloud.google.com/bigquery-ml/docs/introduction Pergunta 44: Ignorado Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents, ‘What is the most effective and efficient way to satisfy this requirement? © Configure Google Cloud Armor|to allow access to the bucket only front? addresses based in Canada Oo Create a group consisting of all|Canada-based employees, and give the group access to the bucket (Correto) O Deploy the Cloud Storage buckpt to a Google Cloud region in O Give each employee who is based in Canada access to the bucket Explicagao Question is tricky, but it says "based! in Canada. That is not the same as restricting access to “from Canada”, An employee can for instance be based in Canada, but access the services while on business trip to Singapore. using a VPN the IP addresses from employees based elsewhere could get around this. Pergunta 45: Ignorado: Your organization is moving an application to Google Cloud. As part of that effort, it needs to migrate the application's working database from another cloud provider to Cloud SQL. The database runs on the MySQL engine. The migration must cause minimal disruption to users, Data must be secured while in transit. Which should your organization use? (Correto)Osi ; Explicagao Database Migration Service Can be used only to perform the migration of PostgreSQL and MySQL databases. SQL Server database migration is currently not supported and is coming soon, Reference: https://cloud.gaogle.com/database-migration