新しい質問45
Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

新しい質問 46
Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

新しい質問 47
You are creating a new application and require access to Cloud SQL from VPC instances without public IP addresses.
Which two actions should you take? (Choose two.)

新しい質問 48
あなたはGoogle Cloudに移行しようとしている大学に勤めています。
これがクラウドの要件だ：
10Gbpsのオンプレミス接続
クラウドへの低遅延アクセス
集中ネットワーク管理チーム
新しい部署が、プロジェクトへのオンプレミス接続を求めている。キャンパスを Google Cloud に接続するための最もコスト効率の良い相互接続ソリューションを導入したい。
どうするべきか？

新しい質問 49
あなたの会社には、ファイアウォールやSSL証明書を管理するセキュリティ・チームがある。また、ネットワーキング・リソースを管理するネットワーキング・チームもある。ネットワーキング・チームはファイアウォール・ルールを読むことができる必要がありますが、作成、変更、削除はできません。
ネットワークチームの権限はどのように設定すべきでしょうか？

新しい質問50
You have two Google Cloud projects in a perimeter to prevent data exfiltration. You need to move a third project inside the perimeter; however, the move could negatively impact the existing environment. You need to validate the impact of the change. What should you do?

新しい質問 51
You want to configure a NAT to perform address translation between your on-premises network blocks and GCP.
Which NAT solution should you use?

新しい質問 52
You are designing the network architecture for your organization. Your organization has three developer teams: Web, App, and Database. All of the developer teams require access to Compute Engine instances to perform their critical tasks. You are part of a small network and security team that needs to provide network access to the developers. You need to maintain centralized control over network resources, including subnets, routes, and firewalls. You want to minimize operational overhead. How should you design this topology?

新しい質問 53
You are a admin at XYZ organization. Few of your team members need to use BigQuery Data Transfer Service for Amazon S3 . They want to automatically schedule and manage recurring load jobs from Amazon S3 into BigQuery, they want to run the transfer job every week. They have, Amazon S3 URI for the source data, access key ID , secret access key and Read permission on the data source . What necessary permissions are required for the transfer job creators in BigQuery .

新しい質問 54
You need to configure a Google Kubernetes Engine (GKE) cluster. The initial deployment should have 5 nodes with the potential to scale to 10 nodes. The maximum number of Pods per node is 8. The number of services could grow from 100 to up to 1024. How should you design the IP schema to optimally meet this requirement?

新しい質問 55
You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.
Which two methods can you use to accomplish this? (Choose two.)

新しい質問56
Your company just completed the acquisition of Altostrat (a current GCP customer). Each company has a separate organization in GCP and has implemented a custom DNS solution. Each organization will retain its current domain and host names until after a full transition and architectural review is done in one year. These are the assumptions for both GCP environments.
* Each organization has enabled full connectivity between all of its projects by using Shared VPC.
* Both organizations strictly use the 10.0.0.0/8 address space for their instances, except for bastion hosts (for accessing the instances) and load balancers for serving web traffic.
* There are no prefix overlaps between the two organizations.
* Both organizations already have firewall rules that allow all inbound and outbound traffic from the 10.0.0.0/8 address space.
* Neither organization has Interconnects to their on-premises environment.
You want to integrate networking and DNS infrastructure of both organizations as quickly as possible and with minimal downtime.
Which two steps should you take? (Choose two.)

新しい質問 57
You have configured a service on Google Cloud that connects to an on-premises service via a Dedicated Interconnect. Users are reporting recent connectivity issues. You need to determine whether the traffic is being dropped because of firewall rules or a routing decision. What should you do?

新しい質問 58
You work for a multinational enterprise that is moving to GCP.
これがクラウドの要件だ：
– An on-premises data center located in the United States in Oregon and New York with Dedicated Interconnects connected to Cloud regions us- west1 (primary HQ) and us-east4 (backup)
– Multiple regional offices in Europe and APAC
– Regional data processing is required in europe-west1 and australia-
southeast1
– Centralized Network Administration Team
Your security and compliance team requires a virtual inline security appliance to perform L7 inspection for URL filtering. You want to deploy the appliance in us-west1.
どうするべきか？

新しい質問 59
あなたは最近、us-central1に2つのネットワーク仮想アプライアンスをデプロイしました。ネットワークアプライアンスはオンプレミスネットワーク、10.0.0.0/8への接続を提供します。仮想プライベートクラウド（VPC）のルーティングを構成する必要があります。設計は次の要件を満たす必要があります：
オンプレミスネットワークへのアクセスは、すべてネットワーク仮想アプライアンスを経由しなければならない。
単一のネットワーク仮想アプライアンスに障害が発生した場合に、オンプレミス・アクセスを許可する。
両方のネットワーク仮想アプライアンスを同時に使用する必要がある。
そのためには、どの方法を使うべきか？

新しい質問 60
You need to enable Cloud CDN for all the objects inside a storage bucket. You want to ensure that all the objects in the storage bucket can be served by the CDN.
What should you do in the GCP Console?

新しい質問 61
You want to use Cloud Interconnect to connect your on-premises network to a GCP VPC. You cannot meet Google at one of its point-of-presence (POP) locations, and your on-premises router cannot run a Border Gateway Protocol (BGP) configuration.
Which connectivity model should you use?

新しい質問 62
Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with access from on-premises locations using Cloud Interconnect connections. Your company must be able to send traffic to Cloud Storage only through the Interconnect links while accessing other Google APIs and services over the public internet. What should you do?

新しい質問 63
You have recently been put in charge of managing identity and access management for your organization. You have several projects and want to use scripting and automation wherever possible. You want to grant the editor role to a project member.
Which two methods can you use to accomplish this? (Choose two.)
GetIamPolicy() via REST API

新しい質問 64
Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You have recently engaged a traffic-scrubbing service and want to restrict your origin to allow connections only from the traffic-scrubbing service.
どうするべきか？

新しい質問65
One instance in your VPC is configured to run with a private IP address only. You want to ensure that even if this instance is deleted, its current private IP address will not be automatically assigned to a different instance.
In the GCP Console, what should you do?

新しい質問 66
You need to configure a static route to an on-premises resource behind a Cloud VPN gateway that is configured for policy-based routing using the gcloud command.
Which next hop should you choose?

新しい質問 67
パートナーインターコネクトを使用して、オンプレミスネットワークとVPCを接続したい。すでにインターコネクトのパートナーを持っている。
まず何をすべきか？