You are the Organization Admin for your company. One of your engineers is responsible for setting up multiple host projects across multiple folders and sharing subnets with service projects.
You need to enable the engineer's Identity and Access Management (IAM) configuration to complete their task in the fewest number of steps. What should you do?

• A. Set up the engineer with Compute Shared VPC Admin IAM role at the organization level.
• B. Set up the engineer with Compute Shared VPC Admin IAM role and Project IAM Admin role at the organization level.
• C. Set up the engineer with Compute Shared VPC Admin IAM role and Project IAM Admin role at the folder level.
• D. Set up the engineer with Compute Shared VPC Admin IAM role at the folder level.

You are reviewing and tuning Secure Web Proxy at your organization, Mount Kirk Games. Users have reported that they are unable to reach the documents they need on the Terram Earth website (https://www.terramearth.com/docs/*). The Secure Web Proxy rules configuration is as follows:

You need to enable access to these documents. What should you do?

• A. Modify the priority of the updates-limiter rule to 1000.
• B. Modify the updates-1 rule to perform the TLS inspection.
• C. Review Cloud Logging for errors with Cloud NAT. If there are no errors, assign the VM a public IP address.
• D. Delete the updates-limiter rule.

You want to set up two Cloud Routers so that one has an active Border Gateway Protocol (BGP) session, and the other one acts as a standby.
Which BGP attribute should you use on your on-premises router?

• A. Multi-exit Discriminator
• B. Local Preference
• C. Community
• D. AS-Path

You need to configure the Border Gateway Protocol (BGP) session for a VPN tunnel you just created between two Google Cloud VPCs, 10.1.0.0/16 and 172.16.0.0/16. You have a Cloud Router (router-1) in the 10.1.0.0/16 network and a second Cloud Router (router-2) in the
172.16.0.0/16 network. Which configuration should you use for the BGP session?

• A.
  
• B.
  
• C.
  
• D.
  

Your organization needs to address the lack of private IP addresses. You need to create new GKE clusters and limit the secondary range size for pods to a maximum of /22. What should you do?

• A. Configure the pods per node value to the minimum to automatically use smaller subnet ranges for pods during the GKE cluster creation.
• B. Create a secondary range for pods with a size of /22. Create a secondary range for services manually. Reference these ranges during the GKE cluster creation.
• C. Specify a new /22 IP range for pods during the GKE cluster creation. Let GKE automatically create the secondary range in your existing primary subnet range.
• D. Deploy GKE Autopilot instead of GKE Standard.