Your application named ecom-web-app is deployed in three GKE clusters: ecom-web-app-dev, ecom-web-app-qa, and ecom-web-app-prod. You need to ensure that only trusted container images are deployed to the ecom-web-app-prod GKE cluster in the production environment while following Google-recommended practices. What should you do?

• A. Set up an image verification process that scans the container images in Artifact Registry for vulnerabilities and tags the image versions that fail the scan as untrusted.
• B. Set up an image verification process by using Cloud Functions where the function is invoked when a container image is built in Cloud Build and ensures that only trusted container images are stored in Artifact Registry.
• C. Set up Binary Authorization, and define cluster-specific rules in clusterAdmissionRules nodes in the policy YAML file.
• D. Set up Binary Authorization, and exempt any container images that are not deployed to the ecom- web-app-prod GKE cluster.

You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch. What should you do? (Choose two.)

• A. Check whether your instance boot disk is completely full.
• B. Troubleshoot firewall rules or routes on an instance.
• C. Check whether network traffic to or from your instance is being dropped.
• D. Access Compute Engine as a different SSH user.
• E. Determine whether your file system is corrupted.

You developed a Python script that retrieves information from files that are uploaded to Cloud Storage and writes the information to Bigtable. You have completed testing on your local environment and created the python-script service account with the Bigtable User IAM role. You want to deploy the code with the appropriate authentication while following Google-recommended practices. What should you do?

• A. 1. Deploy your code to Cloud Run functions. Create a Cloud Storage trigger.
  2. Create a service account key for authentication
• B. 1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service every minute.
  2. Configure IAM binding for authentication.
• C. 1. Deploy your code to Cloud Run functions. Create a Cloud Storage trigger.
  2. Configure IAM binding for authentication.
• D. 1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service every minute.
  2. Create a service account key for authentication.

You are a developer that works for a local concert venue. Customers use your company's website to purchase tickets for events. You need to provide customers with immediate confirmation when a selected seat has been reserved. How should you design the ticket ordering process?

• A. Publish the seat reservation to a Pub/Sub topic. Configure the backend service to use Eventarc to process the seat reservation on GKE.
• B. Upload the seat reservation to a Cloud Storage bucket, which triggers an event to a Cloud Run service that processes the orders.
• C. Submit the seat reservation in an HTTP POST request to an Application Load Balancer.Configure the Application Load Balancer to distribute the request to a Compute Engine managed instance group that processes the reservation.
• D. Add the seat reservation to a Cloud Tasks queue, which triggers Workflows to process the seat reservation.

You are migrating a containerized application to Cloud Run. You plan to use Cloud Build to build your container image and push it to Artifact Registry, and you plan to use Cloud Deploy to deploy the image to production. You need to ensure that only secure images are deployed to production.
What should you do?

• A. Use Artifact Analysis to scan the image for vulnerabilities. Use Cloud Key Management Service to encrypt the image to be deployed to production.
• B. Use Cloud Armor in front of Cloud Run to protect the container image from threats.
• C. Use Binary Authorization to enforce a policy that only allows images that have been signed with a trusted key to be deployed to production.
• D. Use Secret Manager to store the encrypted image. Deploy this image to production.