CDL-1

Your organization consists of many teams. Each team has many Google Cloud projects. Your organization wants to simplify the management of identity and access policies for these projects. How can you group these projects to meet this goal?

• Group each team’s projects into a separate domain

• Assign labels based on the virtual machines that are part of each team’s projects

• Use folders to group each team’s projects

• Group each team’s projects into a separate organization node

Your organization recently migrated its compute workloads to Google Cloud. You want these workloads in Google Cloud to privately and securely access your large volume of on-premises data, and you also want to minimize latency. What should your organization do?

• Use Storage Transfer Service to securely make your data available to Google Cloud

• Create a VPC between your on-premises data center and your Google resources

• Peer your on-premises data center to Google’s Edge Network

• Use Transfer Appliance to securely make your data available to Google Cloud

Your team is publishing research results and needs to make large amounts of data available to other researchers within the professional community and the public at minimum cost. How should you host the data?

• Use a Cloud Storage bucket and enable “Requester Pays”.

• Use a Cloud Storage bucket and provide Signed URLs for the data files.

• Use a Cloud Storage bucket and set up a Cloud Interconnect connection to allow access to the data.

• Host the data on-premises, and set up a Cloud Interconnect connection to allow access to the data.

Your company needs to segment Google Cloud resources used by each team from the others. The team’s efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility. Which approach does Google recommend?

• One project per team.

• One organization per team.

• One project that contains all of each team’s resources.

• One top-level folder per team.

How do Migrate for Compute Engine and Migrate for Anthos differ?

• Unlike Migrate for Anthos, Migrate for Compute Engine assumes that the migration source is VMware vSphere.

• Migrate for Compute Engine charges for ingress, but Migrate for Anthos does not.

• Migrate for Compute Engine is closed source, and Migrate for Anthos is open source

• Migrate for Anthos migrates to containers, and Migrate for Compute Engine migrates to virtual machines.

Your large and frequently changing organization’s user information is stored in an on-premises LDAP database. The database includes user passwords and group and organization membership. How should your organization provision Google accounts and groups to access Google Cloud resources?

• Replicate the LDAP infrastructure on Compute Engine

• Use the Firebase Authentication REST API to create users

• Use Google Cloud Directory Sync to create users

• Use the Identity Platform REST API to create users

Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another. Each department has several environments of its own: development, testing, and production. Which strategy should your organization choose?

• Create a project per department, and create a folder per environment in each project.

• Create a folder per department, and create a project per environment in each folder.

• Create a Cloud Identity domain per department, and create a project per environment in each domain

• Create a Cloud Identity domain per environment, and create a project per department in each domain

Your organization is defining the resource hierarchy for its new application in Google Cloud. You need separate development and production environments. The production environment will be deployed in Compute Engine in two regions. Which structure should your organization choose?

• Create a single project for all environments. Use labels to segregate resources by environment.

• Create a single project for all environments. Use tags to segregate resources by environment.

• Create one project for the development environment and one project for the production environment

• Create two projects for the development environment and two projects for the production environment (one for each region).

Your organization meant to purchase a 3-year Committed Use Discount, but accidentally purchased a 1-year Committed Use Discount instead. What should your organization do?

• Contact your financial institution

• Contact Trust and Safety.

• Contact Cloud Billing Support.

• Contact Technical Support.

Your organization needs to allow a production job to have access to a BigQuery dataset. The production job is running on a Compute Engine instance that is part of an instance group. What should be included in the IAM Policy on the BigQuery dataset?

• The Compute Engine instance group

• The project that owns the Compute Engine instance

• The Compute Engine service account

• The Compute Engine instance