GCDIGILEADER_Set3

You are working at a large enterprise that has several departments using Google Cloud independently. All departments have multiple environments: development, testing, and production. Which strategy can help you ensure that the Google Cloud resources of each of the departments remain separated from one another?

• Create a project per department, and create a folder per environment in each project.
• Create a folder per department, and create a project per environment in each folder.
• Create a Cloud Identity domain per department, and create a project per environment in each domain.
• Create a Cloud Identity domain per environment, and create a project per department in each domain.

You are starting a new project in your company that will be deployed on Google Cloud. You need separate development and production environments. The production environment will be deployed in Compute Engine in two regions. Which structure should your organization choose for the resource hierarchy?

• Create a single project for all environments. Segregate resources by environment using labels.
• Create a single project for all environments. Segregate resources by environment using tags.
• Create one project for the development environment and one project for the production environment.
• Create two projects for the development environment and two projects for the production environment (one for each region).

You are working as a finance officer at your company and you accidentally purchased a 1-year Committed Use Discount when you wanted to purchase for 3 years instead. What steps should you take?

• Contact your financial institution.
• Contact Trust and Safety.
• Contact Cloud Billing Support.
• Contact Technical Support.

You are building a recommendation engine app based on data in BigQuery. You have deployed your app on Compute Engine as part of an instance group. What should be included in the IAM Policy on the BigQuery dataset so that the app can access BigQuery?

• The Compute Engine instance group
• The project that owns the Compute Engine instance
• The Compute Engine service account
• The Compute Engine instance

You are working at a data science research organization and you want to make some datasets available for other researchers within the professional community. How should you host the data at a minimum cost?

• Use a Cloud Storage bucket and enable Requester Pays
• Use a Cloud Storage bucket and provide Signed URLs for the data files.
• Use a Cloud Storage bucket and set up a Cloud Interconnect connection to allow access to the data.
• Host the data on-premises and set up a Cloud Interconnect connection to allow access to the data.

Different teams within your organizations make use of Google Cloud for their applications. The costs incurred by different teams vary significantly and you need to segment Google Cloud resources used by each team from the others. Which approach does Google recommend to reduce operational risk and maintain cost visibility?

• One project per team.
• One organization per team.
• One project that contains all of each team's resources.
• One top-level folder per team.

Your leadership has asked you to explain how do Migrate for Compute Engine and Migrate for Anthos differ from each other. How should you explain the difference?

• Migrate for Compute Engine assumes that the migration source is VMware vSphere, while Migrate for Anthos does not have that assumption.
• Migrate for Compute Engine charges for ingress, while Migrate for Anthos does not.
• Migrate for Compute Engine is closed source, while Migrate for Anthos is open source.
• Migrate for Anthos migrates to containers, while Migrate for Compute Engine migrates to virtual machines.

Your work at a large enterprise with thousands of users. The users are managed through LDAP, which stores users’ passwords and group organization membership. How can your organization provision Google groups and accounts so that the users can have access to resources in Google Cloud?

• Replicate the LDAP infrastructure on Compute Engine
• Use the Firebase Authentication REST API to create users
• Use Google Cloud Directory Sync to create users
• Use the Identity Platform REST API to create users

Your company has recently migrated an app to Google Cloud. This app needs to communicate with a database that is on-premises. How can you enable this connection privately and securely with minimum latency?

• Securely make your data available to Google Cloud using Storage Transfer Service.
• Create a VPC between your on-premises data center and your Google resources
• Peer your on-premises data center to Google's Edge Network
• Use Transfer Appliance to securely make your data available to Google Cloud

Multiple teams in your company leverage Google Cloud for various applications. What strategy can your organization use to manage identity and access policies for Google Cloud projects in a simple manner?

• Create a separate domain for each team's projects
• Assign labels based on the virtual machines that are part of each team's projects
• Group each team's projects using folders
• Create a separate organization node for each team