- (Topic 1)
How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?

1. A. Comply with data security and privacy regulations in each geographical region
2. B. Comply with regional standards for data security and privacy, because they supersede all international regulations
3. C. Comply with international standards for data security and privacy, because they supersede all regional regulations
4. D. Comply with regional data security regulations, because they’re more complex than privacy standards

Correct Answer: A
Comply with data security and privacy regulations in each geographical region For a multi-national corporation, they need to abide not just by international laws, but also regional laws where they do business.

- (Topic 3)
An organization wants full control of their virtual machine infrastructure for a custom home- grown application with a product that autoscales and automatically updates.
Which Google Cloud product or solution should the organization use?

1. A. Cloud Build
2. B. Cloud Run
3. C. Compute Engine
4. D. App Engine

Correct Answer: C
Compute Engine will allow you to have full control of their VM infrastructure and you can autoscale and also apply automatic updates.

- (Topic 1)
A Multiple projects within your organization have long-term VM usage. Based on current demand, they are able to project into the future and estimate how many VM hours they will use every year. Going in for a committed use contract seems sensible. How can you configure committed use easily across all the projects?

1. A. Enable committed use with discount sharing for the projects
2. B. Review the usage of resources by each project on a daily basi
3. C. Enable committed use for the following day based on that number, so that it gives maximum granularity without wastage.
4. D. Take a report of each project's use in the last yea
5. E. Enable committed use on a per- project basis based on the previous year's numbers.
6. F. Share a Google Sheet and request each project team to send in their estimat
7. G. Enable committed use accordingly on a per-project basis.

Correct Answer: A

Enable committed use discounts are applied to the project from which you purchased it. To share the discount across multiple projects linked to your Cloud Billing account, enable committed use discount sharing from the console. When you enable committed use discount sharing, all of your current active committed use dis-counts in all the projects under the same Cloud Billing account, including those you previously purchased and new ones you purchase in the future are shared across your Cloud Billing account. Your sustained use discounts are also pooled and shared across all projects within your Cloud Billing account.

- (Topic 2)
You have contracted a partner to conduct some medical trials. This is a limited, 2-month contract. At the end of each day, you are expecting about 10 Gbs of data. The data is highly sensitive. What networking option would you employ?

1. A. As the name indicates, set up Partner Interconnect with your partner company.
2. B. Setup Dedicated Interconnect with your partner.
3. C. Setup Cloud VPN and create an IPsec VPN tunnel with your partner.
4. D. Create a public IP for a VM and share that with your partners so that they can access it over the internet and share the data.

Correct Answer: C
"Cloud VPN securely extends your peer network to Google's network through an IPsec VPN tunnel. Traffic is encrypted and travels between the two networks over the public internet. Cloud VPN is useful for low-volume data connections. For additional connection options, see the Hybrid Connectivity product page."

- (Topic 2)
How does a least privilege resource access model contribute to cloud security?

1. A. Google is responsible for determining access to cloud resources.
2. B. Employees may only access on-premises software with special permission.
3. C. Only managers and other senior employees have cloud resource access.
4. D. Employees only have access to the cloud resources necessary for their job.

Correct Answer: D
This is the definition of a least privilege model.
A supporting principle that helps organizations achieve these goals is the principle of least privilege. The principle of least privilege addresses access control and states that an individual should have only the minimum access privileges necessary to perform a specific job or task and nothing more