You recently deployed your application in Google Kubernetes Engine, and now need to release a new version of your application. You need the ability to instantly roll back to the previous version in case there are issues with the new version. Which deployment model should you use?

• A. Perform a canary deployment, and test your new application periodically after the new version is deployed.
• B. Perform a blue/green deployment, and test your new application after the deployment is.
  complete.
• C. Perform a rolling deployment, and test your new application after the deployment is complete.
• D. Perform A/B testing, and test your application periodically after the new tests are implemented.

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google- recommended best practices for securing functions. What should you do?

• A. Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.
• B. Enable Identity-Aware Proxy in your project. Secure function access using its permissions.
• C. Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.
• D. Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.

You need to copy directory local-scripts and all of its contents from your local workstation to a Compute Engine virtual machine instance.
Which command should you use?

• A. gsutil cp --project "my-gcp-project" -r ~/local-scripts/ gcp-instance- name:~/server-scripts/ --zone
  "us-east1-b"
• B. gcloud compute mv --project "my-gcp-project" --recurse ~/local-scripts/ gcp- instance- name:~/server-scripts/ --zone "us-east1-b"
• C. gsutil cp --project "my-gcp-project" -R ~/local-scripts/ gcp-instance- name:~/server-scripts/ --zone
  "us-east1-b"
• D. gcloud compute scp --project "my-gcp-project" --recurse ~/local-scripts/ gcp-instance- name:~/server-scripts/ --zone "us-east1-b"

You work for a web development team at a small startup. Your team is developing a Node.js application using Google Cloud services, including Cloud Storage and Cloud Build. The team uses a Git repository for version control. Your manager calls you over the weekend and instructs you to make an emergency update to one of the company's websites, and you're the only developer available. You need to access Google Cloud to make the update, but you don't have your work laptop. You are not allowed to store source code locally on a non-corporate computer.
How should you set up your developer environment?

• A. Use Cloud Shell and the built-in code editor for development. Send your source code updates as pull requests.
• B. Use a text editor and the Git command line to send your source code updates as pull requests from a public computer.
• C. Use a Cloud Storage bucket to store the source code that you need to edit. Mount the bucket to a public computer as a drive, and use a code editor to update the code. Turn on versioning for the bucket, and point it to the team's Git repository.
• D. Use a text editor and the Git command line to send your source code updates as pull requests from a virtual machine running on a public computer.

You recently developed a web application to transfer log data to a Cloud Storage bucket daily.
Authenticated users will regularly review logs from the prior two weeks for critical events. After that, logs will be reviewed once annually by an external auditor. Data must be stored for a period of no less than 7 years. You want to propose a storage solution that meets these requirements and minimizes costs. What should you do? (Choose two.)

• A. Run a scheduled job to set the storage class to Coldline for objects older than 14 days.
• B. Use the Bucket Lock feature to set the retention policy on the data.
• C. Create a JSON Web Token (JWT) for users needing access to the Coldline storage buckets.
• D. Create a lifecycle management policy to set the storage class to Nearline for objects older than
  14 days.
• E. Create a lifecycle management policy to set the storage class to Coldline for objects older than 14 days.