A.  

Deploy Nginx and Tomcat using Cloud Deployment Manager to Compute Engine. Deploy a Cloud SQL server to replace MySQL. Deploy Jenkins using Cloud Deployment Manager.

B.  

Deploy Nginx and Tomcat using Cloud Launcher. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Deployment Manager scripts.

C.  

Migrate Nginx and Tomcat to App Engine. Deploy a Cloud Datastore server to replace the MySQL server in a high-availability configuration. Deploy Jenkins to Compute Engine using Cloud Launcher.

D.  

Migrate Nginx and Tomcat to App Engine. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Launcher.

A.  

Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L4 load balancer.

B.  

Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L4 load balancer.

C.  

Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L7 load balancer.

D.  

Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L7 load balancer.

A.  

Deploy failure injection software to the game analytics platform that can inject additional latency to mobile client analytics traffic.

B.  

Build a test client that can be run from a mobile phone emulator on a Compute Engine virtual machine, and run multiple copies in Google Cloud Platform regions all over the world to generate realistic traffic.

C.  

Add the ability to introduce a random amount of delay before beginning to process analytics files uploaded from mobile devices.

D.  

Create an opt-in beta of the game that runs on players ' mobile devices and collects response times from analytics endpoints running in Google Cloud Platform regions all over the world.

A.  

Run unit testing.

B.  

Use load testing.

C.  

Perform end-to-end testing.

D.  

Execute integration testing.

A.  

Configure reserved VM instances

B.  

Deploy spot VM instances.

C.  

Set up standard VM instances.

D.  

Use Cloud Run functions.

A.  

Replace RabbitMQ with Google Pub/Sub.

B.  

Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.

C.  

Resize compute resources to match predefined Compute Engine machine types.

D.  

Containerize the micro services and host them in Google Kubernetes Engine.

A.  

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.

Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.

B.  

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.

Enable default storage encryption before storing files in Cloud Storage.

C.  

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements.

Utilize Google’s default encryption at rest when storing files in Cloud Storage.

D.  

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.

A.  

Set up VPC Service Controls to restrict access to sensitive resources and prevent data exfiltration.

B.  

Configure Cloud Next Generation Firewall (NGFW) with custom rules to filter malicious traffic at the network level.

C.  

Deploy Google Cloud Armor with pre-configured and custom rules for L3/L4 and L7 protection.

D.  

Activate Security Command Center to monitor security posture and detect potential threats.

A.  

Opex/capex allocation, LAN changes, capacity planning

B.  

Capacity planning, TCO calculations, opex/capex allocation

C.  

Capacity planning, utilization measurement, data center expansion

D.  

Data Center expansion, TCO calculations, utilization measurement

A.  

Have your engineers inspect the data for patterns, and then create an algorithm with rules that make operational adjustments automatically.

B.  

Capture all operating data, train machine learning models that identify ideal operations, and run locally to make operational adjustments automatically.

C.  

Implement a Google Cloud Dataflow streaming job with a sliding window, and use Google Cloud Messaging (GCM) to make operational adjustments automatically.

D.  

Capture all operating data, train machine learning models that identify ideal operations, and host in Google Cloud Machine Learning (ML) Platform to make operational adjustments automatically.

A.  

Use Explainable AI.

B.  

Use Vision AI.

C.  

Use Google Cloud’s operations suite.

D.  

Use Jupyter Notebooks.

A.  

Store the card data in Secret Manager after running a query to identify duplicates.

B.  

Encrypt the card data with a deterministic algorithm stored in Firestore using Datastore mode.

C.  

Encrypt the card data with a deterministic algorithm and shard it across multiple Memorystore instances.

D.  

Use column-level encryption to store the data in Cloud SQL.

A.  

Set up Cloud Tasks and a Cloud Storage bucket that triggers a Cloud Function.

B.  

Set up a Cloud Logging sink and a Cloud Storage bucket that triggers a Cloud Function.

C.  

Configure the deployment job to notify a Pub/Sub queue that triggers a Cloud Function.

D.  

Set up Identity and Access Management (IAM) and Confidential Computing to trigger a Cloud Function.

A.  

Apply a Cloud Armor security policy to external load balancers using a named IP list for Fastly.

B.  

Apply a Cloud Armor security policy to external load balancers using the IP addresses that Fastly has published. C. Apply a VPC firewall rule on port 443 for Fastly IP address ranges.

C.  

Apply a VPC firewall rule on port 443 for network resources tagged with scurceiplisr-fasrly.

A.  

Log into each Compute Engine instance and collect disk, CPU, memory, and network usage statistics for

analysis.

B.  

Use the gcloud compute instances list to list the virtual machine instances that have the idle: true label set.

C.  

Use the gcloud recommender command to list the idle virtual machine instances.

D.  

From the Google Console, identify which Compute Engine instances in the managed instance groups are

no longer responding to health check probes.

A.  

Use Firestore for its scalable and flexible document-based database. Use collections to aggregate race data

by season and event.

B.  

Use Cloud Spanner for its scalability and ability to version schemas with zero downtime. Split race data

using season as a primary key.

C.  

Use BigQuery for its scalability and ability to add columns to a schema. Partition race data based on

season.

D.  

Use Cloud SQL for its ability to automatically manage storage increases and compatibility with MySQL. Use

separate database instances for each season.

A.  

Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine

B.  

Google Cloud Storage, Google App Engine, Google Network Load Balancer

C.  

Google Kubernetes Registry, Google Container Engine, Google HTTP(S) Load Balancer

D.  

Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager

A.  

Container Engine, Cloud Pub/Sub, and Cloud SQL

B.  

Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery

C.  

Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow

D.  

Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow

E.  

Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc

A.  

Delete the virtual machine (VM) and disks and create a new one.

B.  

Delete the instance, attach the disk to a new VM, and investigate.

C.  

Take a snapshot of the disk and connect to a new machine to investigate.

D.  

Check inbound firewall rules for the network the machine is connected to.

E.  

Connect the machine to another network with very simple firewall rules and investigate.

F.  

Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.

A.  

A single VPN tunnel, which limits throughput

B.  

A tier of Google Cloud Storage that is not suited for this task

C.  

A copy command that is not suited to operate over long distances

D.  

Fewer virtual machines (VMs) in GCP than on-premises machines

E.  

A separate storage layer outside the VMs, which is not suited for this task

F.  

Complicated internet connectivity between the on-premises infrastructure and GCP

A.  

Error rates for requests from Asia

B.  

Latency difference between US and Asia

C.  

Total visits, error rates, and latency from Asia

D.  

Total visits and average latency for users in Asia

E.  

The number of character sets present in the database

A.  

Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.

B.  

Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.

C.  

Create a single G Suite account to manage users with each stage of each application in its own project.

D.  

Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.

A.  

Cloud Spanner

B.  

Google BigQuery

C.  

Google Cloud SQL

D.  

Google Cloud Datastore

A.  

Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).

B.  

Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.

C.  

Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

D.  

Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.

A.  

Logging, Alerts, Insights, Debug

B.  

Monitoring, Trace, Debug, Logging

C.  

Monitoring, Logging, Alerts, Error Reporting

D.  

Monitoring, Logging, Debug, Error Report

A.  

Set up API key validation.

B.  

Integrate OAuth 2.0 authorization.

C.  

Configure Quota policies.

D.  

Activate XML threat protection.

A.  

Grant the operations engineers access to use Google Cloud Shell.

B.  

Configure a VPN connection to GCP to allow SSH access to the cloud VMs.

C.  

Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.

D.  

Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.

A.  

Use regional managed instance groups and a global load balancer to increase performance because the

regional managed instance group can grow instances in each region separately based on traffic.

B.  

Use a global load balancer with a set of virtual machines that forward the requests to a closer group of

virtual machines managed by your operations team.

C.  

Use regional managed instance groups and a global load balancer to increase reliability by providing

automatic failover between zones in different regions.

D.  

Use a global load balancer with a set of virtual machines that forward the requests to a closer group of

virtual machines as part of a separate managed instance groups.

A.  

Query logs in Cloud Logging.

B.  

Analyze the data via Cloud Profiler.

C.  

Instrument the code to use Cloud Trace.

D.  

Inspect data from Snapshot Debugger.

A.  

Deploy Cloud Run services to multiple availability zones. Create Cloud Endpoints that point to the services. Create a global HTIP(S) Load Balancing instance and attach the Cloud Endpoints to its backend.

B.  

Deploy Cloud Run services to multiple regions Create serverless network endpoint groups pointing to the services. Add the serverless NE Gs to a backend service that is used by a global HTIP(S) Load Balancing instance.

C.  

Cloud Run services to multiple regions. In Cloud DNS, create a latency-based DNS name that points to the services.

D.  

Deploy Cloud Run services to multiple availability zones. Create a TCP/IP global load balancer. Add the Cloud Run Endpoints to its backend service.

A.  

Configure a global load balancer connected to a managed instance group running Compute Engine

instances.

B.  

Configure kubemci with a global load balancer and Google Kubernetes Engine.

C.  

Configure a global load balancer with Google Kubernetes Engine.

D.  

Configure Ingress for Anthos with a global load balancer and Google Kubernetes Engine.

A.  

Upload your mobile app to the Firebase Test Lab, and test the mobile app on Android and iOS devices.

B.  

Create Android and iOS VMs on Google Cloud, install the mobile app on the VMs, and test the mobile app.

C.  

Create Android and iOS containers on Google Kubernetes Engine (GKE), install the mobile app on the

containers, and test the mobile app.

D.  

Upload your mobile app with different configurations to Firebase Hosting and test each configuration.

A.  

Configure Workload Identity and service accounts to be used by the application platform.

B.  

Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the

application platform.

C.  

Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use

Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to

be used by the application platform.

D.  

Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud

Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used

by the application platform.

A.  

Create CPU Utilization and Request Latency as service level indicators.

B.  

Create GKE CPU Utilization and Memory Utilization as service level indicators.

C.  

Create Request Latency and Error Rate as service level indicators.

D.  

Create Server Uptime and Error Rate as service level indicators.

A.  

Create a service account (SA) in the legacy game ' s Google Cloud project, add this SA in the new game ' s IAM page, and then give it the Firebase Admin role in both projects

B.  

Create a service account (SA) in the legacy game ' s Google Cloud project, add a second SA in the new game ' s IAM page, and then give the Organization Admin role to both SAs

C.  

Create a service account (SA) in the legacy game ' s Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game ' s project.

D.  

Create a service account (SA) in the lgacy game ' s Google Cloud project, give the SA the Organization Admin rule and then give it the Firebase Admin role in both projects

A.  

Create a shutdown script named k99.shutdown in the /etc/rc.6.d/ directory.

B.  

Create a shutdown script registered as a xinetd service in Linux and configure a Stackdnver endpoint check to call the service.

C.  

Create a shutdown script and use it as the value for a new metadata entry with the key shutdown-script in the Cloud Platform Console when you create the new virtual machine instance.

D.  

Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

A.  

Use gsutil to batch move files in sequence.

B.  

Use gsutil to batch copy the files in parallel.

C.  

Use gsutil to extract the files as the first part of ETL.

D.  

Use gsutil to load the files as the last part of ETL.

A.  

Configure an organizational policy which constrains where resources can be deployed.

B.  

Configure IAM conditions to limit what resources can be configured.

C.  

Configure the quotas for resources in the regions not being used to 0.

D.  

Configure a custom alert in Cloud Monitoring so you can disable resources as they are created in other

regions.

A.  

Create a Filestore Zonal instance in each zone where the VMs are running. Mount the Filestore file share on each Compute Engine VM.

B.  

Use a multi-region Cloud Storage bucket to store the files.

C.  

Create a Regional Persistent Disk and attach it to all VMs in multi-writer mode.

D.  

Create a Filestore Enterprise instance in the same region as the VMs. Mount the Filestore file share on each Compute Engine VM.

A.  

1. Copy popular songs into CloudSQL as a blob

2. Update application code to retrieve data from CloudSQL when Cloud Storage is overloaded

B.  

1. Create a managed instance group with Compute Engine instances

2. Create a global toad balancer and configure ii with two backbends

* Managed instance group

* Cloud Storage bucket

3. Enable Cloud CDN on the bucket backend

C.  

1. Mount the Cloud Storage bucket using gcsfuse on all backend Compute Engine instances

2. Serve muse files directly from the backend Compute Engine instance

D.  

1. Create a Cloud Filestore NFS volume and attach it to the backend Compute Engine instances

2. Download popular songs in Cloud Filestore

3. Serve music Wes directly from the backend Compute Engine instance

A.  

1. Install the Cloud Ops agent on all instances.

2. Create a sink to export logs into a partitioned BigQuery table.

3. Set a time_partitioning_expiration of 30 days.

B.  

1. Install the Cloud Ops agent on all instances.

2. Create a sink to export logs into a regional Cloud Storage bucket.

3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

4. Configure a retention policy at the bucket level to create a lock.

C.  

1. Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery

table. 2. Set a time_partitioning_expiration of 30 days.

D.  

1. Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket.

2. Create a sink to export logs into a regional Cloud Storage bucket.

3. Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

A.  

Configure a Kubernetes autoscaling based on the subscription/push_request metric.

B.  

Use the –enable- autoscaling flag when you create the Kubernetes cluster

C.  

Configure a Kubernetes autoscaling based on the subscription/num_undelivered message metric.

D.  

Use kubectl autoscale deployment APP_NAME –max 6 –min 2 –cpu- percent 50 to configure Kubernetes autoscaling deployment

A.  

Store image files in a Google Cloud Storage bucket. Use Google Cloud Datastore to maintain metadata that maps each customer ' s ID and their image files.

B.  

Store image files in a Google Cloud Storage bucket. Add custom metadata to the uploaded images in Cloud Storage that contains the customer ' s unique ID.

C.  

Use a distributed file system to store customers ' images. As storage needs increase, add more persistent disks and/or nodes. Assign each customer a unique ID, which sets each file ' s owner attribute, ensuring privacy of images.

D.  

Use a distributed file system to store customers ' images. As storage needs increase, add more persistent disks and/or nodes. Use a Google Cloud SQL database to maintain metadata that maps each customer ' s ID to their image files.

A.  

Create a dump of the on-premises MySQL master server, and then shut it down, upload it to the cloud environment, and load into a new MySQL cluster.

B.  

Setup a MySQL replica server/slave in the cloud environment, and configure it for asynchronous replication from the MySQL master server on-premises until cutover.

C.  

Create a new MySQL cluster in the cloud, configure applications to begin writing to both on-premises and cloud MySQL masters, and destroy the original cluster at cutover.

D.  

Create a dump of the MySQL replica server into the cloud environment, load it into: Google Cloud Datastore, and configure applications to read/write to Cloud Datastore at cutover.

A.  

Create a cron script using gsutil to copy the files to a Coldline Storage bucket.

B.  

Create a cron script using gsutil to copy the files to a Regional Storage bucket.

C.  

Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.

D.  

Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.

A.  

Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

B.  

Revoke the compute.networkAdmin role from all users in the project with front end instances.

C.  

Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.

D.  

Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

A.  

Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.

B.  

Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.

C.  

Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.

D.  

Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.

A.  

Add a new Dedicated Interconnect connection

B.  

Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G

C.  

Add three new Cloud VPN connections

D.  

Add a new Carrier Peering connection

A.  

Google Cloud SQL

B.  

Google Cloud Bigtable

C.  

Google Cloud Storage

D.  

Google cloud Datastore

A.  

Configure Cloud Storage to use server-side encryption with Google-managed encryption keys. Create a bucket policy to restrict access to only authorized Google groups and required service accounts.

B.  

Use Cloud Storage default encryption at rest. Implement fine-grained access control using IAM roles and groups to restrict access to sensitive buckets.

C.  

Implement client-side encryption before uploading it to Cloud Storage. Store the encryption keys in a HashiCorp Vault instance deployed on Google Kubernetes Engine (GKE). Implement fine-grained access control to sensitive Cloud Storage buckets using IAM roles.

D.  

Use customer-managed encryption keys (CMEK) for all Cloud Storage buckets storing sensitive media content. Implement fine-grained access control using IAM roles and groups to restrict access to sensitive buckets.

A.  

Use the Admin Directory API to authenticate against the Active Directory domain controller.

B.  

Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and

configure SAML SSO.

C.  

Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.

D.  

Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the onpremises AD domain controller using Google Cloud Directory Sync.

A.  

Use a bastion host to provide secure access lo Google Cloud resources from Cymbal ' s on-premises systems.

B.  

Configure a static VPN connection using SSH tunnels to connect the on-premises systems to Google Cloud

C.  

Configure a Cloud VPN gateway and establish a VPN tunnel Configure firewall rules to restrict access to specific resources and services based on IP addresses and ports.

D.  

Use Google Cloud ' s VPC peering to connect Cymbal ' s on-premises network to Google Cloud.

A.  

1. Create a Cloud Logging sink to export BigQuery data access logs to Cloud Storage. 2. Develop a Dataflow pipeline to compute the cost of queries split by users.

B.  

1. Create a Cloud Logging sink to export BigQuery data access logs to BigQuery.

2. Perform a BigQuery query on the generated table to extract the information you need.

C.  

1. Activate billing export into BigQuery.

2. Perform a BigQuery query on the billing table to extract the information you need.

D.  

1. In the BigQuery dataset that contains all the tables to be queried, add a label for each user that can launch a query.

2. Open the Billing page of the project.

3. Select Reports.

4. Select BigQuery as the product and filter by the user you want to check.

A.  

Use Stackdriver Trace to create a trace list analysis.

B.  

Use Stackdriver Monitoring to create a dashboard on the project’s activity.

C.  

Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.

D.  

Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.

A.  

Web applications deployed using App Engine standard environment

B.  

RabbitMQ deployed using an unmanaged instance group

C.  

Hadoop/Spark deployed using Cloud Dataproc Regional in High Availability mode

D.  

Jenkins, monitoring, bastion hosts, security scanners services deployed on custom machine types

A.  

Migrate all databases to Spanner for consistency, and use Cloud Storage Standard for image storage

B.  

Migrate all databases to self-managed instances on Compute Engino. and use a persistent disk for image storage.

C.  

Migrate MySQL and SQL Server to Spanner. Redis to Memorystore. and MongoDB to Firestore Use Cloud Storage Standard for image storage, and move

images to Cloud Storage Nearline storage when products become less popular.

D.  

Migrate MySQL to Cloud SQL. SQL Server to Cloud SQL. Redis to Memorystore. and MongoDB to Firestore. Use Cloud Storage Standard for image storage, and move images to Cloud Storage Coldline storage when products become less popular

A.  

Migrate the web application layer to App Engine, and MySQL to Cloud Datastore, and NAS to Cloud Storage. Deploy RabbitMQ, and deploy Hadoop servers using Deployment Manager.

B.  

Migrate RabbitMQ to Cloud Pub/Sub, Hadoop to BigQuery, and NAS to Compute Engine with Persistent Disk storage. Deploy Tomcat, and deploy Nginx using Deployment Manager.

C.  

Implement managed instance groups for Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Compute Engine with Persistent Disk storage.

D.  

Implement managed instance groups for the Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Cloud Storage.

A.  

Increase the Pub/Sub Total Timeout retry value.

B.  

Move from a Pub/Sub subscriber pull model to a push model.

C.  

Turn off Pub/Sub message batching.

D.  

Create a backup Pub/Sub message queue.

A.  

Use a private cluster with a private endpoint with master authorized networks configured.

B.  

Use a public cluster with firewall rules and Virtual Private Cloud (VPC) routes.

C.  

Use a private cluster with a public endpoint with master authorized networks configured.

D.  

Use a public cluster with master authorized networks enabled and firewall rules.

A.  

Add a new Dedicated Interconnect connection.

B.  

Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G.

C.  

Add three new Cloud VPN connections.

D.  

Add a new Carrier Peering connection.

A.  

Verify EHR ' s product usage against the list of compliant products on the Google Cloud compliance page.

B.  

Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

C.  

Use Firebase Authentication for EHR ' s user facing applications.

D.  

Implement Prometheus to detect and prevent security breaches on EHR ' s web-based applications.

E.  

Use GKE private clusters for all Kubernetes workloads.

A.  

Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.

B.  

Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.

C.  

Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.

D.  

Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

A.  

Configure two Partner Interconnect connections in one metro (City), and make sure the Interconnect connections are placed in different metro zones.

B.  

Configure two VPN connections from on-premises to Google Cloud, and make sure the VPN devices on-premises are in separate racks.

C.  

Configure Direct Peering between EHR Healthcare and Google Cloud, and make sure you are peering at least two Google locations.

D.  

Configure two Dedicated Interconnect connections in one metro (City) and two connections in another metro, and make sure the Interconnect connections are placed in different metro zones.