Questions about the category: Google Cloud security and operations

Your organization wants to run a container-based application on Google Cloud. This application is expected to increase in complexity. You have a security need for fine-grained control of traffic between the containers. You also have an operational need to exercise fine-grained control over the application's scaling policies.

Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations?

Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.

Your organization is developing and deploying an application on Google Cloud. Tracking your Google Cloud spending needs to stay as simple as possible.

Your organization is releasing its first publicly available application in Google Cloud. The application is critical to your business and customers and requires a 2- hour SLA.

Your organization offers public mobile apps and websites. You want to migrate to a Google Cloud-based solution for checking and maintaining your users' usernames and passwords and controlling their access to different resources based on their identity.

You are migrating workloads to the cloud. The goal of the migration is to serve customers worldwide as quickly as possible According to local regulations, certain data is required to be stored in a specific geographic area, and it can be served worldwide. You need to design the architecture and deployment for your workloads.

Your organization needs a large amount of extra computing power within the next two weeks.
After those two weeks, the need for the additional resources will end.

Your organization needs to plan its cloud infrastructure expenditures.

The operating systems of some of your organization's virtual machines may have a security vulnerability.

Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines.

An organization decides to migrate their on-premises environment to the cloud. They need to determine which resource components still need to be assigned ownership.

Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute Engine. It is expected that different teams will create new folders and projects in the near future.

Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud.

Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.

Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?

Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet.
The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.

Which Google Cloud product is designed to reduce the risks of handling personally identifiable information (PII)?

How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?

Your organization wants to optimize its use of Google Cloud's discounts on virtual machine-based workloads. You plan to use 200 CPUs constantly for the next 3 years, and you forecast that spikes of up to 300 CPUs will occur approximately 30% of the time.

Your organization needs to minimize how much it pays for data traffic from the Google network to the internet.

Your company security team manages access control to production systems using an LDAP directory group.

Your organization wants to be sure that is expenditures on cloud services are in line with the budget.

Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another.
Each department has several environments of its own: development, testing, and production.

Your organization meant to purchase a 3-year Committed Use Discount, but accidentally purchased a 1-year Committed Use Discount instead.

Your organization needs to allow a production job to have access to a BigQuery dataset.
The production job is running on a Compute Engine instance that is part of an instance group.

Your company needs to segment Google Cloud resources used by each team from the others.
The teams' efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility.

Your large and frequently changing organization's user information is stored in an on-premises LDAP database.
The database includes user passwords and group and organization membership.

Your organization recently migrated its compute workloads to Google Cloud. You want these workloads in Google Cloud to privately and securely access your large volume of on-premises data, and you also want to minimize latency.

Your organization consists of many teams. Each team has many Google Cloud projects. Your organization wants to simplify the management of identity and access policies for these projects.

An organization needs to search an application's source code to identify a potential issue.
The application is distributed across multiple containers.

An organization operates their entire IT infrastructure from Google Cloud.

After rolling out a new update, an organization found a minor bug in its online video game.

A manager wants to review Google Cloud data access among their employees.

An organization wants to leverage tooling and automation as part of its new DevOps philosophy.

An employee receives an email from their internet service provider asking for their bank account number and password.

An organization wants to collect metrics and metadata from their cloud applications and put them into dashboards.

An organization's public cloud provider failed to meet their SLA of 99.99% availability.

An organization meets their service level objective (SLO) of 99.999% (`five nines`).

An organization wants to introduce a new image recognition login system.

Several departments in an organization are working together on a project. The organization wants to customize access to resources for each department.

An organization notices that some of their cloud expenditures are too high.

How does Google Cloud ensure that customer data remains secure and private when at rest?

How is service availability measured in the context of cloud technology?