QUESTION: 97

You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can't affect the workloads of other customers.
What should you do?

Enable Application-layer Secrets on the GKE cluster to protect the cluster.
Deploy a namespace per tenant and use Network Policies in each blog deployment.
Use GKE Audit Logging to identify malicious containers and delete them on discovery.
Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.

Answer(s): B

Reference:

https://cloud.google.com/kubernetes-engine/docs/concepts/multitenancy-overview

Reveal Solution Next Question

QUESTION: 98

You have decided to migrate your Compute Engine application to Google Kubernetes Engine. You need to build a container image and push it to Artifact Registry using Cloud Build.
What should you do? (Choose two.)

Run gcloud builds submit in the directory that contains the application source code.
Run gcloud run deploy app-name --image gcr.io/$PROJECT_ID/app-name in the directory that contains the application source code.
Run gcloud container images add-tag gcr.io/$PROJECT_ID/app-name gcr.io/$PROJECT_ID/app-name:latest in the directory that contains the application source code.
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 99

You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere.
What should you do?

Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.
Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.
Set up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.
Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.

Answer(s): B

Reveal Solution Next Question

QUESTION: 100

Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible.
What should you do?

Manually copy the photos to webphotos-prod.
Add a startup script in the application's app.yami file to move the photos from webphotos-staging to webphotos-prod.
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:

Answer(s): C

Reveal Solution Next Question

Free Professional Cloud Developer Exam Braindumps (page: 26)

QUESTION: 97

Reference:

QUESTION: 98

QUESTION: 99

QUESTION: 100

Exam Discussions & Posts