GCP-CDP-M7,8,9

Your company security team manages access control to production systems using an LDAP directory group. How is this access control managed in the Google Cloud protection project?. Assign the proper role to the Service Account in the project's IAM policy. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group. Assign the proper role to the Google Group in the project's IAM policy. Create the project in a folder with the same name as the LDAP directory group.

An organization operates their entire IT infrastructure from Google Cloud. What should they do to prepare for data breaches?. Reduce reliance on multi-factor authentication. Data security is Google's responsibility, so preparation is minimal. Create an incident plan to mitigate impacts. Strengthen their data center perimeter security.

An employee receives an email from their internet service provider asking for their bank account number and password. Which cyber security threat is this?. Ransomware. Distributed Denial of Service. Spamming. Phishing.

Why is data stored in Google Cloud secure and private?. Data is encrypted by the Security Command Center. Data is encrypted by Cloud Data Loss Prevention. Data is encrypted by default. Data is encrypted when an appropriate tag is applied.

Several departments in an organization are working together on a project. The organization wants to customize access to resources for each department. What is the quickest and most efficient way to achieve this?. By mapping IAM roles to job functions for each department. By assigning IAM primitive roles to each employee. By applying least-privilege to roles for each employee. By creating a single shared service account for all departments.

An organization is moving away from an on-premises infrastructure. Instead they want to create, access, and share information virtually in the cloud. What should the organization consider?. Built in security when moving their data to the cloud. Replacing their perimeter security with data encryption keys. Optimizing cost-management with a capital expenditure model. Increased hardware capacity when moving their data to the cloud.

How is privacy defined in the context of cloud technology?. Restrictions on data access and sharing. Procedures to authenticate user identity. Susceptibility to data breaches and cyber attacks. Compliance with regulatory standards.

An organization wants to move from a tactical cloud approach to a transformational approach. How should they change their cloud security?. Provide staff identities using only Google Cloud authentication. Provide multiple layers of network security using a zero-trust model. Emphasize strong perimeter security and trust in their private network. Emphasize three main Identity Access Management roles: owner, editor and viewer.

Which cybersecurity threat can lead to information being stolen or damaged without a user ever being aware?. SLA policy violation. Malware Attack. Ransomware attack. Incomplete data input.

An organization has decided to create a mobile app for their customer-facing service. What may have prompted this business decision?. Customers expect information to be easily accessible on any device. Customers expect mobile-only access to information in the cloud era. Developers can apply increased data security on a mobile app. Developers can run different versions of the service to test features only through a mobile app.

An organization suffers a major data leak only six months after upgrading its security system. What should the organization do to ensure long-term security?. Extend data retention policy lengths to at least seven years. Pay more to get the best security system available on the market. Hire cybersecurity experts to further develop their data security plan. Wait for a more advanced security system to be released.

How should a multi-national organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?. Comply with data security and privacy regulations in each geographical region. Comply with regional standards for data security and privacy, because they supersede all international regulations. Comply with international standard for data security and privacy, because they supersede all regional regulations. Comply with regional data security regulations because they are more complex than privacy standards.

A new team member has joined your project. You need to grant him permission to access a few Google Cloud resources through IAM. How can you grant permission to your new team member so that he can access the required Google Cloud resources. Directly grant the permissions to access the resources as required. Grant role to the team member to access the resources as required. Grant IAM policy to the team member to access the resources as required. Give pre-authenticated URLs so that the new team member can access the required resources.

What issues can arise when organizations integrate third-party systems into their cloud infrastructure?. Without sufficient security measures and regular checks, unsecured third-party systems can pose a threat to data security. Third-party systems are less capable of addressing an organization's security requirements. Over-reliance on third-party systems limits an organization's potential for innovation. Third-party systems may not be powerful enough to run many critical business applications.

How does a least privilege resource access model contribute to cloud security?. Only managers and other senior employees have cloud resource access. Employee only have access to the cloud resources necessary for their job. Employees may only access on-premises software with special permission. Google is responsible for determining access to cloud resources.

A cloud-native organization is not meeting their service level objective (SLO) but has not exhausted their error budget. What should the organization prioritize?. Innovation to improve user experience. Hardware reliability to improve availability. Stability to avoid prolonged user downtime. Speed to release new features.

An organization has an on-premise IT infrastructure. Their customer facing application repeatedly fails during peak usage. What could be causing this issue?. A serverless compute function struggles to scale. The application contains unclean data. They don't have enough servers to meet the demand. The application is only configurable on-premises.

An organization has started to develop cloud-native applications to replace their legacy applications. What else should the organization do to adopt the cloud?. Provide privileged cloud network access to third-party partners. Migrate some of their legacy infrastructure to the cloud. Conduct maintenance on their legacy hardware. Increase CapEx on existing projects.

A retail organization has moved all of their inventory data to a relational database in the cloud. What functionality does a relational database offer?. It stores large amounts of raw data in its original format. It stores transactional data, which can then be accessed electronically. It rapidly analyzes large and multi-dimensional datasets. It analyzes unstructured data, which can then be accessed in multiple regions.

An organization has created a medical fitness app and wants to store a very large amount of data about exercise times, activity and calories burned for later analysis. Which data management solution should the organization use?. Data lake. Data warehouse. Data field. Database.

What is artificial intelligence?. Any system that ingests data in real time. Any system that automatically structures data. Any system capable of a task that requires smart analytics to generate predictions. Any system capable of a task that normally requires human cognition.

A customer service department wants to increase their operational efficiency while maintaining personalized dialog with their customers. What Google Cloud product or service should the organization use?. Recommendations AI. Cloud Identity. Contact Center AI. Text-to-Speech.

Your organization wants to be sure that its expenditures on cloud services are in line with the budget. Which two Google cloud cost management features help your organization gain greater visibility into its cloud resource costs?. Billing dashboards. Resource labels. Sustained use discounts. Financial governance policies. Payments profile.

Your organization needs to plan its cloud infrastructure expenditures. Which should your organization do?. Review cloud resource costs frequently, because costs change often based on use. Review cloud resource costs annually as part of planning your organization's overall budget. If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget. Involve fewer people in cloud resource planning than your organization did for on-premise resource planning.

You are currently managing workloads running on Windows Server for which your company owns the licenses. Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend. Your Windows Server licenses are up for renewal in a month, and you want to optimize your license cost. What should you do?. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use. Renew your licenses for an additional period of 2 years. Negotiate a cost reduction by committing to an automatic renewal of the licenses at the end of the 2 year period. Migrate the workloads to Compute Engine with a bring-your-own-license(BOYL) mode. Migrate the workloads to Compute Engine with a pay-as-you-go(PAYG) model.

Your company needs to segment Google Cloud resources used by each team from the others. The team's efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility. Which approach does Google recommend?. One project per team. One Organization per team. One project that contains all of each team's resource. One top-level folder per team.

An organization notices that some of their cloud expenditures are too high. What should the organization do to control costs?. Streamline the hardware procurement process to reduce costs. Share cost views with the departments to establish more accountability. Change the cost model from operational expenditure to capital expenditure. Ensure that all resources are tagged with a single tag.

An organization is altering their gaming product so that it is compatible with cloud technology. What can they expect when moving from traditional technology to cloud technology?. No change to existing responsibilities. A shift towards OpEx. A shift towards using structured data. Increased hardware maintenance.

When an organization adopts cloud technology, how does their total cost of ownership(TCO) shift?. Away from cost management towards capital expenditure. Away from operational expenditure towards cost management. Away from capital expenditure towards operational expenditures. Away from operational expenditures towards capital expenditures.

An organization is struggling to keep up with the growth of their application which is running on legacy infrastructure. What might be holding them back?. The time it takes their serverless compute function to scale. The overreliance on platform as a service. The inaccessibility of their data due to perimeter security. The cost of provisioning hardware for peak usage.

An organization is planning its cloud expenditure. What should the organization do to control costs?. Consider cloud resource costs as capital expenditure in annual planning. Use only cloud resources; they have no cloud infrastructure costs. Review cloud resource costs frequently because costs depend on usage. Assess cloud resources costs only when SLO is not met by their cloud providers.

An organization finds that the amount of cash in their vending machines doesn't match the value of items sold. They have decided to upgrade their vending machines with cloud-based mobile payment systems. How could the organization benefit from this upgrade?. They could relax data access permissions. They could reduce their error budget overspend. They could improve their perimeter security. They could view data history to see transactions.

A large retail organization uses traditional technology for their ecommerce website. During peaks in traffic, resources are often under utilized or overutilized. They have decided to migrate to cloud technology. What aspect of cloud technology will benefit their ecommerce business?. Agile infrastructure means that they only pay for what they need, when they need it. Operational expenditure means that their total cost of ownership is more predictable. Unlimited storage means that their website will never experience downtime. Share responsibility means that the cloud provider brings increased visibility during peaks in traffic.

Your organization wants to optimize its use of Google Cloud's discounts on virtual machine-based workloads. You plan to use 200 CPUs constantly for the next 3 years, and you forecast that spikes of upto 300 CPUs will occur approximately 30% of the time. What should you choose?. 1-year committed use discount for 200 CPUs. 3-year committed use discount for 300 CPUs. 3-year committed use discount for 200 CPUs. Regular pay-as-you-go pricing.

An organization wants to search for and share plug-and-play AI components, which can easily build ML services into their project. Which Google Cloud product should the organization use?. Recommendations AI. Document AI. AI Hub. Cloud Talent Solution.

A crowdsourcing platform is looking forward to hosting its applications and services on Google Cloud. Before onboarding, the applications and services on Google Cloud, they have expressed an intention to estimate the total cost that they will incur for running their workload on Google Cloud. What would you suggest to them for getting this estimation immediately?. Browse Pricing list for individual service. Use Pricing Calculator. Contact Google Support. Contact Your Google Account Manager.

An organization currently stores its data on-premises and they receive different levels of traffic on their website every month. How could the organization benefit from modernizing their infrastructure with cloud technology?. 100% service availability. They can rely on the cloud provider for all website source code. They can shift from heavy operational expenditure to a capital expenditure model. Agile storage capability.

Your organization needs a large amount of extra computing power within the next 2 weeks. After those 2 weeks, the need for the additional resources will end. Which is the most cost-effective approach?. Use a committed use discount to reserve a very powerful virtual machine. Purchase one very powerful physical computer. Start a very powerful virtual machine without using a committed use discount. Purchase multiple physical computers and scale workload across them.

Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations?. Google Cloud firewalls. Security Command Center. Cloud Deployment Manager. Google Cloud Armor.

Your Organization is moving an application to Google Cloud. As part of that effort, it needs to migrate the application's working database from another cloud provider to Cloud SQL. The database runs on the MySQL engine. The migration must cause minimal disruption to users. Data must be secured while in transit. Which should your organization use?. BigQuery Data Transfer Service. MySQL batch insert. Database Migration Service. Cloud Composer.

Each of the three cloud service models - infrastructure as a service(IaaS), Platform As a Service(PaaS), and Software As a Service(SaaS) - offers benefits between flexibility and levels of management by the cloud provider and the customer. Why would SaaS be the right choice of service model?. You want a balance between flexibility for the customer and the level of management by the cloud provider. You want to minimize the level of management by the customer. You want to maximize flexibility for the customer. You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change.

Your organization is developing a plan for migrating to Google cloud. What is a best practice when initially configuring your Google Cloud environment?. Create a project via Google Cloud Console per department in your company. Define your resource hierarchy with an organization node on top. Create projects based on team member's request. Make every member of your company the project owner.

Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another. Each department has several environments of its own: development, testing, and production. Which strategy should your organization choose?. Create a project per department, and create a folder per environment in each project. Create a folder per department, and create a project per environment in each folder. Create a Cloud Identity domain per department, and create a project per environment in each domain. Create a Cloud Identity domain per environment, and create a project per department in each domain.

Your organization consists of many teams. Each team has many Google Cloud projects. Your organization wants to simplify the management of identity and access policies for these projects. How can you group these projects to meet this goal?. Group each team's projects into a separate domain. Assign labels based on the virtual machines that are part of each team's projects. Use folders to group each team's projects. Group each team's projects into a separate organization node.

An organization has servers running mission-critical workloads on-premises around the world. They want to modernize their infrastructure with a multi-cloud architecture. What benefit could the organization experience?. Ability to disable regional network connectivity during cyber attacks. Ability to keep backups of their data on-premises in case of failure. Full management access to their regional infrastructure. Reduced likelihood of system failure during high demand events.

An organization is migrating their business applications from on-premises to the cloud. How could this impact their operations and personnel costs?. Reduced on-premises infrastructure management costs. Increased on-premises hardware maintenance costs. Reduced cloud software licensing costs. Increased cloud hardware management costs.

An organization's web developers and operations personnel use different systems. How will increasing communication between the teams reduce issues caused by silos?. By assigning blame for failures and establishing consequences. By combining job role responsibilities to ensure that everyone has shared access. By increasing data encryption to strengthen workflows. By emphasizing shared ownership of business outcomes.

An organization has completely migrated all their infrastructure to the cloud to benefit from its agility. Now they want to innovate faster and achieve a higher return on investment. What should the organization do?. Lower their service level objective (SLO). Modernize their applications. Manually provision all cloud infrastructure for increased control. Move to hybrid architecture with some of their infrastructure on-premises.

An organization has created an ecommerce website. What data on this website would be considered structured data?. Product ratings score. Product reviews. Product photographs. Product descriptions.

An organization wants to leverage tooling and automation as part of its new DevOps philosophy. Which operational challenge will this resolve?. Repetitive manual tasks that hinder workflows. Time-consuming supervision of creative tasks. Distribution and supply-chain issues. Defective technical equipment that limits innovation.

An organization delivers a proactive healthcare service. They want to efficiently and automatically collect patient data. What should organization encourage the patients to do?. Use at-home health screening devices and then upload their health data daily. Wear Internet of Things (IoT) devices that upload their health data in real time. Self-assess their health data and then document and upload it in real time. Visit a nurse who will use Internet of Things (IoT) devices to collect and upload their health data.

An organization wants to move from a tactical cloud adoption approach to a transformational approach. How should they adapt the way they lead the organization?. Increase top-down visibility and foster a culture of blamelessness. Shift from an operational expenditure model to capital expenditure. Drive cloud adoption with an individual contributor focus. Invest in on-premises infrastructure to redesign relationships between IT and employees.

A multi-national organization has decided to use public cloud services to modernize their IT infrastructure. What is one benefit of doing this?. They can perform hardware maintenance outside of normal business hours. They can expect 100% service availability in all regions. Built-in security is no longer required during data migrations. Access to data and computer resources is not tied to a geographical location.

An organization wants to introduce a new image recognition login system. What should the organization do to follow SRE principles?. Roll out the new system to a subset of employees to test it out. Roll out the new system to all employees to collect as much data as possible. Avoid rolling out the new system because it may have security flaws. Avoid rolling out the new system because it may violate privacy policy.

How can a streaming service meet global compliance requirements using the cloud?. By automatically encrypting personally identifiable information. By obtaining a business license to operate in a new market. By allowing users to disable two-factor authentication. By adhering only to data policies of the country in which the head office is registered.

An organization wants to build an entirely new infrastructure and applications in the cloud. Which application modernization approach should the organization use?. Move the application to the cloud, and then change it. Change their application, and then move it to the cloud. Invent in greenfield. Invent in brownfield.

How does switching from on-premises to the cloud help organizations gain value over time?. The can expand their internal application hosting infrastructure. They can focus their efforts on solution development. They can increase development of data recovery systems. They can relax their on-premises data security protocols.

An organization is struggling to meet user demand for change and wants to modernize their legacy applications by moving the applications to the cloud. Why would this help the organization satisfy user expectations?. Customer data can be used to offer tailored content. Toil automation helps make automatic updates. Updates can be pushed out more quickly to repair bugs. DevOps requires that industry trends be measured and tracked.

An organization meets their service level objective(SLO) of 99.999%(five nines). How much downtime do their end users experience per year?. 5 minutes. 500 minutes. 5 hours. 5 days.

An organization needs to store structured, semi-structured and unstructured data in its raw, native format in the same repository. Which cloud data management solution the organization use?. Data field. Data Lake. Database. Data warehouse.