You are a developer that works for a local concert venue. Customers use your company's website to purchase tickets for events. You need to provide customers with immediate confirmation when a selected seat has been reserved. How should you design the ticket ordering process?

• A. Publish the seat reservation to a Pub/Sub topic. Configure the backend service to subscribe to the topic to process the seat reservation.
• B. Add the seat reservation to a Cloud Tasks queue, which triggers Workflows to process the seat reservation.
• C. Upload the seat reservation to a Cloud Storage bucket, which triggers an event to the backend service that processes the seat reservation.
• D. Submit the seat reservation in an HTTP POST request to an Application Load Balancer.
  Configure the Application Load Balancer to distribute the request to the backend service that processes the seat reservation.

You need to deploy resources from your laptop to Google Cloud using Terraform. Resources in your Google Cloud environment must be created using a service account. Your Cloud Identity has the roles/iam.serviceAccountTokenCreator Identity and Access Management (IAM) role and the necessary permissions to deploy the resources using Terraform. You want to set up your development environment to deploy the desired resources following Google-recommended best practices. What should you do?

• A. 1. Download the service account's key file in JSON format, and store it locally on your laptop.
  2. Set the GOOGLE_APPLICATION_CREDENTIALS environment variable to the path of your downloaded key file.
• B. 1. Run the following command from a command line: gcloud auth application-default login.
  2. In the browser window that opens, authenticate using your personal credentials.
• C. 1. Store the service account's key file in JSON format in Hashicorp Vault.
  2. Integrate Terraform with Vault to retrieve the key file dynamically, and authenticate to Vault using a short-lived access token.
• D. 1. Run the following command from a command line: gcloud config set
  auth/impersonate_service_account [email protected].
  2. Set the GOOGLE_OAUTH_ACCESS_TOKEN environment variable to the value that is returned by the gcloud auth print-access-token command.

You are a developer at a company that operates an ecommerce website. The website stores the customer order data in a Cloud SQL for PostgreSQL database. Data scientists on the marketing team access this data to run their reports. Every time they run these reports, the website's performance is negatively affected. You want to provide access to up-to-date customer order datasets without affecting your website. What should you do?

• A. Create a clone of the PostgreSQL database instance for the data science team. Schedule a job to create a new clone every 15 minutes.
• B. Set up a Bigtable table for the data science team. Configure the application to perform dual writes to both Cloud SQL and Bigtable simultaneously.
• C. Set up a BigQuery dataset for the data science team. Configure Datastream to replicate the relevant Cloud SQL tables in BigQuery.
• D. Configure Cloud Scheduler to run an hourly Cloud Run function that exports the data from the Cloud SQL database into CSV format and sends the data to a Cloud Storage bucket.

You are developing a corporate tool on Compute Engine for the finance department, which needs to authenticate users and verify that they are in the finance department. All company employees use G Suite.
What should you do?

• A. Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Issue client-side certificates to everybody in the finance team and verify the certificates in the application.
• B. Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges.
  Verify the provided JSON Web Token within the application.
• C. Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Verify the provided JSON Web Token within the application.
• D. Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges.Issue client side certificates to everybody in the finance team and verify the certificates in the application.

Your team develops services that run on Google Kubernetes Engine. Your team's code is stored in Cloud Source Repositories. You need to quickly identify bugs in the code before it is deployed to production. You want to invest in automation to improve developer feedback and make the process as efficient as possible.
What should you do?

• A. Use Cloud Build to automate building container images from code based on forked versions.
• B. Use Spinnaker to automate building container images from code based on Git tags.
• C. Use Cloud Build to automate building container images from code based on Git tags.
• D. Use Spinnaker to automate deploying container images to the production environment.