You are in the final stage of migrating an on-premises data center to Google Cloud. You are quickly approaching your deadline, and discover that a web API is running on a server slated for decommissioning. You need to recommend a solution to modernize this API while migrating to Google Cloud. The modernized web API must meet the following requirements:
- Autoscales during high traffic periods at the end of each month
- Written in Python 3.x
- Developers must be able to rapidly deploy new versions in response to frequent code changes You want to minimize cost, effort, and operational overhead of this migration. What should you do?

• A. Ask the development team to re-write the application to run as a Docker container on Google Kubernetes Engine.
• B. Modernize and deploy the code on App Engine flexible environment.
• C. Deploy the modernized application to an n1-standard-1 Compute Engine instance.
• D. Modernize and deploy the code on App Engine standard environment.

Your team is developing an application in Google Cloud that executes with user identities maintained by Cloud Identity. Each of your application's users will have an associated Pub/Sub topic to which messages are published, and a Pub/Sub subscription where the same user will retrieve published messages. You need to ensure that only authorized users can publish and subscribe to their own specific Pub/Sub topic and subscription. What should you do?

• A. Grant the user identity a custom role that contains the pubsub.topics.create and pubsub.subscriptions.create permissions.
• B. Configure the application to run as a service account that has the pubsub.publisher and pubsub.subscriber roles.
• C. Grant the user identity the pubsub.publisher and pubsub.subscriber roles at the project level.
• D. Bind the user identity to the pubsub.publisher and pubsub.subscriber roles at the resource level.

Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.
Which method should they use?

• A. Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
• B. Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
• C. Use Cloud Build with a trigger configured for each source code commit.
• D. Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.

Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running.
A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

• A. Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• B. Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• C. Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.
• D. Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

You want to notify on-call engineers about a service degradation in production while minimizing development time.
What should you do?

• A. Use Cloud Pub/Sub to monitor resources and raise alerts.
• B. Use Stackdriver Monitoring to monitor resources and raise alerts.
• C. Use Cloud Function to monitor resources and raise alerts.
• D. Use Stackdriver Error Reporting to capture errors and raise alerts.