Question 191
Your company is hosting their static website on Cloud Storage. You have implemented a change to add PDF files to the website. However, when the user clicks on the PDF file link it downloads the PDF instead of opening it within the browser. What would you change to fix the issue?
A. Set content-type as object metadata to application/octet-stream on the files
B. Set content-type as object metadata to application/pdf on the files
C. Set content-type as object metadata to application/octet-stream on the bucket
D. Set content-type as object metadata to application/pdf on the bucket
Question 192
Your company has a set of compute engine instances that would be hosting production-based applications. These applications would be running 24x7 throughout the year. You need to implement the cost-effective, scalable and high availability solution even if a zone fails. How would you design the solution?
A. Use Managed instance groups with preemptible instances across multiple zones
B. Use Managed instance groups across multiple zones
C. Use managed instance groups with instances in a single zone
D. Use Unmanaged instance groups across multiple zones
Question 193
You currently are running an application on a machine type with 2 vCPUs and 4gb RAM. However, recently there have been plenty of memory problems. How to increase the memory of the application with minimal downtime?
A. In GCP console, upgrade the memory of the Compute Engine instance
B. Use gcloud compute instances increase-memory to increase the memory
C. Use Live migration to move to machine type with higher memory
D. Use Live migration to move to machine type with higher CPU
Question 194
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
A. Use a custom mode VPC network, configure static routes, and use active/passive routing
B. Use an automatic mode VPC network, configure static routes, and use active/active routing
C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
Question 195
You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients.
Which load balancing option should you use?
A. HTTPS Load Balancer
B. Network Load Balancer
C. SSL Proxy Load Balancer
D. Internal TCP/UDP Load Balancer. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.
Question 196
You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?
A. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
B. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
C. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
D. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
Question 197
Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?
A. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on
B. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on
C. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials
D. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.
Question 198
Your organization requires that log from all applications be archived for 10 years as a part of compliance.
Which approach should you use?
A. Configure Stackdriver Monitoring for all Projects, and export to BigQuery
B. Configure Stackdriver Monitoring for all Projects with the default retention policies
C. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage
D. Grant the security team access to the logs in each Project
Question 199
Your organization requires that log from all applications be archived for 10 years as a part of compliance.
Which approach should you use?
A. Configure Stackdriver Monitoring for all Projects, and export to BigQuery
B. Configure Stackdriver Monitoring for all Projects with the default retention policies
C. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage
D. Grant the security team access to the logs in each Project
Question 200
You are running an application in Google App Engine that is serving production traffic. You want to deploy a risky but necessary change to the application. It could take down your service if not properly coded. During development of the application, you realized that it can only be properly tested by live user traffic. How should you test the feature?
A. Deploy the new application version temporarily, and then roll it back.
B. Create a second project with the new app in isolation, and onboard users.
C. Set up a second Google App Engine service, and then update a subset of clients to hit the new service.
D. Deploy a new version of the application, and use traffic splitting to send a small percentage of traffic to it.
