CDL-2

Each of the three cloud service models - infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) - offers benefits between flexibility and levels of management by the cloud provider and the customer. Why would SaaS be the right choice of service model?

• You want a balance between flexibility for the customer and the level of management by the cloud provider

• You want to minimize the level of management by the customer

• You want to maximize flexibility for the customer.

• You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change

As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster. What should your organization do?

• Migrate your VMs to the cloud, and add more resources to them

• Convert your applications into containers

• Increase the resources of your VMs

• Automate your upgrade rollouts

Your organization uses Active Directory to authenticate users. User’s Google account access must be removed when their Active Directory account is terminated. How should your organization meet this requirement?

• Configure two-factor authentication in the Google domain

• Remove the Google account from all IAM policies

• Configure BeyondCorp and Identity-Aware Proxy in the Google domain

• Configure single sign-on in the Google domain

Your company has recently acquired three growing startups in three different countries. You want to reduce overhead in infrastructure management and keep your costs low without sacrificing security and quality of service to your customers. How should you meet these requirements?

• Host all your subsidiarie’s services on-premises together with your existing services.

• Host all your subsidiarie’s services together with your existing services on the public cloud.

• Build a homogenous infrastructure at each subsidiary, and invest in training their engineers.

• Build a homogenous infrastructure at each subsidiary, and invest in hiring more engineers.

Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute Engine. It is expected that different teams will create new folders and projects in the near future. How would you restrict all virtual machines from having an external IP address

• Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address

• Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address

• Define an organization policy on all existing projects to restrict virtual machine instances from having an external IP address

• Communicate with the different teams and agree that each time a virtual machine is created, it must be configured without an external IP address

Your multinational organization has servers running mission-critical workloads on its premises around the world. You want to be able to manage these workloads consistently and centrally, and you want to stop managing infrastructure. What should your organization do?

• Migrate the workloads to a public cloud

• Migrate the workloads to a central office building

• Migrate the workloads to multiple local co-location facilities

• Migrate the workloads to multiple local private clouds

Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud. What should your organization do?

• Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network

• Create a Cloud VPN tunnel between Google Cloud and your data center

• Order a Partner Interconnect connection with your network provider

• Enable Private Google Access in your Google Cloud VPC network

Your company’s development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them. What should you do?

• Create a Compute Engine image containing the application

• Store the images in Container Registry

• Store the images in Cloud Storage

• Create a Compute Engine disk containing the application

You are currently managing workloads running on Windows Server for which your company owns the licenses. Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend. Your Windows Server licenses are up for renewal in a month, and you want to optimize your license cost. What should you do?

• Renew your licenses for an additional period of 3 years. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use

• Renew your licenses for an additional period of 2 years. Negotiate a cost reduction by committing to an automatic renewal of the licenses at the end of the 2 year period

• Migrate the workloads to Compute Engine with a bring-your-own-license (BYOL) model

• Migrate the workloads to Compute Engine with a pay-as-you-go (PAYG) model

Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines. Where should your organization locate this virtual machines?

• In a single zone within a single region

• In different zones within a single region

• In multiple regions, using one zone per region

• In multiple regions, using multiple zones per region