NEW QUESTION 1

Which of the following statements is/are true about Cloud Spanner offered by Google Cloud Plat-form.

• A. It can scale horizontally to support additional capacity.
• B. It comes with Zero Downtime, No Maintenance windows, and is proven for large and small workloads.
• C. You don't need to shard or replicate data.
• D. All of the above.

Answer: D

Explanation:
Cloud Spanner:
Fully managed relational database with unlimited scale, strong consistency, and up to 99.999% availability.
- Get all the benefits of relational semantics and SQL with unlimited scale
- Start at any size and scale with no limits as your needs grow
- Enjoy high availability with zero scheduled downtime and online schema changes
- Deliver high-performance transactions with strong consistency across regions and continents
- Focus on innovation, eliminating manual tasks with capabilities like automatic sharding.

NEW QUESTION 2

A client is currently running software on their on-premise systems that is bound by a certain
type of license. They are allowed to run the software on virtualized machines. However, they cannot run them on virtualized machines that are shared by two different companies, teams, or projects. What option do they have on Google Cloud?

• A. Google Cloud is a public cloud accessed by multiple customers.
• B. Allocate a Bare Metal machine.
• C. Setup exclusive login to the VM with self-generated security keys.
• D. Allocate sole-tenant nodes

Answer: D

Explanation:
Sole-tenancy lets you have exclusive access to a sole-tenant node, which is a physical Compute Engine server that is dedicated to hosting only your project's VMs. Use sole-tenant nodes to keep your VMs physically separated from VMs in other projects, or to group your VMs together on the same host hardware. https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes

NEW QUESTION 3

The operating systems of some of your organization’s virtual machines may have a security vulnerability.
How can your organization most effectively identify all virtual machines that do not have the latest security update?

• A. View the Security Command Center to identify virtual machines running vulnerable disk images
• B. View the Compliance Reports Manager to identify and download a recent PCI audit
• C. View the Security Command Center to identify virtual machines started more than 2 weeks ago
• D. View the Compliance Reports Manager to identify and download a recent SOC 1 audit

Answer: A

Explanation:
Security Health Analytics and Web Security Scanner detectors generate vulnerabilities findings that are available in Security Command Center. Your ability to view and edit findings is determined by the Identity and Access Management (IAM) roles and permissions you are assigned. For more information about IAM roles in Security Command Center.
Reference link:-
https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings

NEW QUESTION 4

An organization wants to search for and share plug-and-play AI components which can easily build ML services into their project. Which Google Cloud product should the organi- zation use?

• A. Document AI
• B. AI Hub
• C. Cloud Talent Solution
• D. Recommendations AI

Answer: B

Explanation:
Because AI Hub is a hosted repository of plug-and-play AI compo-nents. Reference link:- https://cloud.google.com/ai-hub/docs/release-notes

NEW QUESTION 5

Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team. Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process.
Which Google Cloud product or feature should your organization use?

• A. Cloud Scheduler
• B. Cloud Code
• C. Cloud Build
• D. Cloud Deployment Manager

Answer: C

Explanation:
Deploy your application to App Engine using the gcloud app deploy command. This command automatically builds a container image by using the Cloud Build service and then deploys that image to the App Engine flexible environment.
Reference: https://cloud.google.com/appengine/docs/flexible/nodejs/testing-and-deploying-your-app

NEW QUESTION 6

You are working with a user to set up an application in a new VPC behind a firewall and it is no-ticed that the user is concerned about data egress. Therefore, to provide assistance you want to con-figure the fewest open egress ports. Which of the following statement is correct?

• A. Set up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
• B. Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
• C. Set up a high-priority (1000) rule to allow the appropriate ports.
• D. Set up a high-priority (1000) rule that pairs both ingress and egress ports.

Answer: B

Explanation:
Implied rules Every VPC network has two implied firewall rules. These rules exist, but are not shown in the Cloud Console:
Implied allow egress rule. An egress rule whose action is allow, destination is 0.0.0.0/0, and priority is the lowest possible (65535) lets any instance send traffic to any destination, except for traffic blocked by Google Cloud. A higher priority firewall rule may restrict outbound access. Internet access is allowed if no other firewall rules deny outbound traffic and if the instance has an external IP address or uses a Cloud NAT instance. For more information, see Internet access requirements.

Reference link- https://cloud.google.com/vpc/docs/firewalls

NEW QUESTION 7

Your organization is developing an application that will capture a large amount of data from millions of different sensor devices spread all around the world. Your organization needs a database that is suitable for worldwide, high-speed data storage of a large amount of unstructured data.
Which Google Cloud product should your organization choose?

• A. Firestore
• B. Cloud Data Fusion
• C. Cloud SQL
• D. Cloud Bigtable

Answer: D

Explanation:

Reference: https://cloud.google.com/bigtable
Cloud Bigtable is a sparsely populated table that can scale to billions of rows and thousands of columns, enabling you to store terabytes or even petabytes of data. A single value in each row is indexed; this value is known as the row key. Bigtable is ideal for storing very large amounts of single-keyed data with very low latency. It supports high read and write throughput at low latency, and it is an ideal data source for MapReduce operations.
Bigtable is exposed to applications through multiple client libraries, including a supported extension to the Apache HBase library for Java. As a result, it integrates with the existing Apache ecosystem of open-source Big Data software.
Bigtable's powerful back-end servers offer several key advantages over a self-managed HBase installation:
Incredible scalability. Bigtable scales in direct proportion to the number of machines in
your cluster. A self-managed HBase installation has a design bottleneck that limits the performance after a certain threshold is reached. Bigtable does not have this bottleneck, so you can scale your cluster up to handle more reads and writes.
Simple administration. Bigtable handles upgrades and restarts transparently, and it automatically maintains high data durability. To replicate your data, simply add a second cluster to your instance, and replication starts automatically. No more managing replicas or regions; just design your table schemas, and Bigtable will handle the rest for you.
Cluster resizing without downtime. You can increase the size of a Bigtable cluster for a few hours to handle a large load, then reduce the cluster's size again—all without any downtime. After you change a cluster's size, it typically takes just a few minutes under load for Bigtable to balance performance across all of the nodes in your cluster.
Graphical user interface, text, application, email Description automatically generated

NEW QUESTION 8

You are looking for a one stop reference page for GCP support. What Page would you se- lect?

• A. Compliance Hub
• B. Google Cloud Platform Status
• C. Support Hub
• D. Pricing Page

Answer: C

Explanation:
Google provides a page that brings together everything needed around support. Its called the Support Hub
Reference link- https://cloud.google.com/support-hub

NEW QUESTION 9

An organization wants to introduce a new image recognition login system What should the organization do to follow SRE principles?

• A. Roll out the new system to a subset of employees to test it out
• B. Roll out the new system to all employees to collect as much data as possible
• C. Avoid rolling out the new system because it may have security flaws
• D. Avoid rolling out the new system because it may violate privacy policy

Answer: A

NEW QUESTION 10

An organization delivers a proactive healthcare service. They want to efficiently and automatically collect patient data.
What should the organization encourage the patients to do?

• A. Use at-home health screening devices and then upload their health data daily
• B. Wear Internet of Things (IoT) devices that upload their health data in real time
• C. Self-assess their health data and then document and upload it in real time
• D. Visit a nurse who will use Internet of Things (IoT) devices to collect and upload their health data

Answer: B

NEW QUESTION 11

A customer has new applications to build that has to handle both batch data and streaming data. Which product should they choose?

• A. Dataprep
• B. Dataflow
• C. Dataproc
• D. Data Fusion

Answer: B

Explanation:
Enabling Requester Pays is useful, for example, if you have a lot of data you want to make available to users, but you don't want to be charged for their access to that data.
Reference link- https://cloud.google.com/storage/docs/requester-pays

NEW QUESTION 12

An international bank is looking for a serverless warehouse solution that lets them perform smart analytics
Which Google Cloud product or service should the bank use?

• A. BigQuery
• B. Dataflow
• C. Compute Engine
• D. Cloud Spanner

Answer: A

Explanation:
The international bank should use Google Cloud's BigQuery service, which is a fully managed, serverless data warehouse that allows for high-speed analysis of large datasets. It provides a range of built-in functions for analytics and can easily integrate with other Google Cloud services.

NEW QUESTION 13

Your team is working on building a machine learning model. There are a bunch of terminologies that are being used. What is an "instance" or an "example"?

• A. An input variable is used in making prediction
• B. E.
• C. number of rooms in a house price prediction model.
• D. One row of a dataset containing one or more input columns and possibly a prediction result.
• E. An answer for a prediction task,¬ either the answer produced by a machine learning system or the right answer supplied in training dat
• F. E.
• G. image contains a "cat".
• H. The "knobs" that you tweak during successive runs of training a mode
• I. E.
• J. learning rate

Answer: B

Explanation:
One row of a dataset containing one or more input columns and possibly a prediction result.

https://developers.google.com/machine-learning/guides/rules-of-ml#terminology

NEW QUESTION 14

Which of the following NIST Cloud characteristics uses the business model of shared re- sources in a cloud environment?

• A. Elasticity
• B. Availability
• C. Broad Network Access
• D. Multi-Tenancy

Answer: D

Explanation:

In cloud computing, multitenancy means that multiple customers of a cloud vendor are using the same computing resources. Even though they share resources, cloud customers aren’t aware of each other, and their data is kept totally separate. Mul-titenancy is a crucial component of cloud computing; without it, cloud services would be far less practical. Multitenant architecture is a feature in many types of public cloud com-puting, including IaaS, PaaS, SaaS, containers, and serverless computing.

NEW QUESTION 15

An organization is looking for a business intelligence solution that allows individual employees and end users to analyze business data and generate insights.
Which Google Cloud product or service should the organization use?

• A. Looker
• B. Cloud Spanner
• C. BigQuery
• D. Dataflow

Answer: A

NEW QUESTION 16

Your Google Cloud Platform [GCP] admin has to manage a bunch of API keys for external services that are accessed by different applications, which are used by a few teams. What is the best way to manage them?

• A. Share the information in a Github repository and grant access to the repo in IAM asrequired.
• B. Store the information in Secret Manager and give IAM read permissions as re-quired.
• C. Store the information in Kubernetes Secrets and only grant read permissions to users as required.
• D. Encrypt the information and store it in Cloud Storage for centralized acces
• E. Give the decrypt key only to the users who need to access it.

Answer: B

Explanation:
Store the information in Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. Secret Manager provides a central place and single source of truth to manage access, and audit secrets across Google Cloud.
https://cloud.google.com/secret-manager

NEW QUESTION 17

All Google Cloud Platform services are associated with a project that is used to provide what functions?

• A. Manage Container Deployments
• B. Enable Services and APIs
• C. Manage DNS Services
• D. None of the Above

Answer: B

Explanation:
The recommended approach is to have folders corresponding to teams/departments and they manage the projects within that.
-> Sharing a single project will cause a conflict of resources, billing, concerns, etc.
-> One folder per project is unnecessary overuse of abstraction/grouping.
-> Teams and projects in a company should ideally be centrally managed in a single Organization.

NEW QUESTION 18

An organization is training a machine learning model to make predictions. What could improve the prediction accuracy of their model?

• A. An increase in storage capacity
• B. Higher network bandwidth
• C. An increase in training data
• D. Faster CPU processors

Answer: C

NEW QUESTION 19

What are the network requirements for Private Google Access?

• A. Private Google Access automatically enables any API.
• B. Your network must have appropriate routes for the destination IP ranges used by Google APIs and services.
• C. Both A and B
• D. None of the Above

Answer: B

Explanation:
Network requirements for Private Google Access:
- Because Private Google Access is enabled on a per-subnet basis, you must use a VPC network. Legacy networks are not supported because they don't support subnets.
- Private Google Access does not automatically enable any API. You must separately enable the Google APIs you need to use via the APIs & services page in the Google Cloud Console.
- If you use the private.googleapis.com or therestricted.googleapis.com domain names, you'll need to create DNS records to direct traffic to the IP addresses associated with those domains.
- Your network must have appropriate routes for the destination IP ranges used by Google APIs and services. These routes must use the default internet gateway next hop. If you use the private.googleapis.com or therestricted.googleapis.com domain names, you only need one route (per domain). Otherwise, you'll need to create multiple routes.
- Egress firewalls must permit traffic to the IP address ranges used by Google APIs and services. The implied allow egress firewall rule satisfies this requirement. For other ways to meet the firewall requirement.

NEW QUESTION 20

What is an example of structured data that a healthcare facility stores in their system?

• A. X-ray images
• B. Surgery video recordings
• C. Blood pressure history
• D. Physician-written notes

Answer: C

Explanation:
Physical measures like height, weight, blood pressure, blood type, and stage
of the disease can be recorded numerically and they are structured.

NEW QUESTION 21
......