Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can’t affect the workloads of other customers. What should you do?

A.

Enable Application-layer Secrets on the GKE cluster to protect the cluster.

B.

Deploy a namespace per tenant and use Network Policies in each blog deployment.

C.

Use GKE Audit Logging to identify malicious containers and delete them on discovery.

D.

Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.

You recently migrated a monolithic application to Google Cloud by breaking it down into microservices. One of the microservices is deployed using Cloud Functions. As you modernize the application, you make a change to the API of the service that is backward-incompatible. You need to support both existing callers who use the original API and new callers who use the new API. What should you do?

A.

Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use a load balancer to distribute calls between the versions.

B.

Leave the original Cloud Function as-is and deploy a second Cloud Function that includes only the changed API. Calls are automatically routed to the correct function.

C.

Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use Cloud Endpoints to provide an API gateway that exposes a versioned API.

D.

Re-deploy the Cloud Function after making code changes to support the new API. Requests for both versions of the API are fulfilled based on a version identifier included in the call.

You are using Cloud Build for your CI/CD pipeline to complete several tasks, including copying certain files to Compute Engine virtual machines. Your pipeline requires a flat file that is generated in one builder in the pipeline to be accessible by subsequent builders in the same pipeline. How should you store the file so that all the builders in the pipeline can access it?

A.

Store and retrieve the file contents using Compute Engine instance metadata.

B.

Output the file contents to a file in /workspace. Read from the same /workspace file in the subsequent build step.

C.

Use gsutil to output the file contents to a Cloud Storage object. Read from the same object in the subsequent build step.

D.

Add a build argument that runs an HTTP POST via curl to a separate web server to persist the value in one builder. Use an HTTP GET via curl from the subsequent build step to read the value.

You are planning to add unit tests to your application. You need to be able to assert that published Pub/Sub messages are processed by your subscriber in order. You want the unit tests to be cost-effective and reliable. What should you do?

A.

Implement a mocking framework.

B.

Create a topic and subscription for each tester.

C.

Add a filter by tester to the subscription.

D.

Use the Pub/Sub emulator.

Your application is running in multiple Google Kubernetes Engine clusters. It is managed by a Deployment in each cluster. The Deployment has created multiple replicas of your Pod in each cluster. You want to view the logs sent to stdout for all of the replicas in your Deployment in all clusters. Which command should you use?

A.

kubectl logs [PARAM]

B.

gcloud logging read [PARAM]

C.

kubectl exec –it [PARAM] journalctl

D.

gcloud compute ssh [PARAM] –-command= “sudo journalctl”

You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?

A.

Cloud Amor

B.

Stackdriver Debugger

C.

Cloud Security Scanner

D.

Stackdriver Error Reporting

You recently developed a new application. You want to deploy the application on Cloud Run without a Dockerfile. Your organization requires that all container images are pushed to a centrally managed container repository. How should you build your container using Google Cloud services? (Choose two.)

A.

Push your source code to Artifact Registry.

B.

Submit a Cloud Build job to push the image.

C.

Use the pack build command with pack CLI.

D.

Include the --source flag with the gcloud run deploy CLI command.

E.

Include the --platform=kubernetes flag with the gcloud run deploy CLI command.

Your company’s product team has a new requirement based on customer demand to autoscale your stateless and distributed service running in a Google Kubernetes Engine (GKE) duster. You want to find a solution that minimizes changes because this feature will go live in two weeks. What should you do?

A.

Deploy a Vertical Pod Autoscaler, and scale based on the CPU load.

B.

Deploy a Vertical Pod Autoscaler, and scale based on a custom metric.

C.

Deploy a Horizontal Pod Autoscaler, and scale based on the CPU toad.

D.

Deploy a Horizontal Pod Autoscaler, and scale based on a custom metric.

You are designing a schema for a table that will be moved from MySQL to Cloud Bigtable. The MySQL table is as follows:

How should you design a row key for Cloud Bigtable for this table?

A.

Set Account_id as a key.

B.

Set Account_id_Event_timestamp as a key.

C.

Set Event_timestamp_Account_id as a key.

D.

Set Event_timestamp as a key.

You manage an ecommerce application that processes purchases from customers who can subsequently cancel or change those purchases. You discover that order volumes are highly variable and the backend order-processing system can only process one request at a time. You want to ensure seamless performance for customers regardless of usage volume. It is crucial that customers’ order update requests are performed in the sequence in which they were generated. What should you do?

A.

Send the purchase and change requests over WebSockets to the backend.

B.

Send the purchase and change requests as REST requests to the backend.

C.

Use a Pub/Sub subscriber in pull mode and use a data store to manage ordering.

D.

Use a Pub/Sub subscriber in push mode and use a data store to manage ordering.