You are deploying new workloads on a GKE Autopilot mode cluster. You need to ensure that the Pods are scheduled on nodes that use Arm architecture CPUs. The cluster currently has no Arm- based CPUs. You want to minimize cluster operations. How should you ensure that the workloads on the GKE cluster will use Arm-based CPU nodes?

• A. Deploy a new cluster in GKE Standard mode, and set up a node pool with Arm-based CPU nodes. Use nodeSelector in your manifest to ensure that Pods are scheduled in this node pool.
• B. Apply node taints on node pools to tell GKE to only schedule your workloads on Arm-based CPU nodes.
• C. Request the Scale-out compute class and the arm64 architecture in your manifest.
• D. Apply Pod tolerations to request GKE to avoid scheduling Pods on nodes that do not have Arm- based CPUs.

You deployed a new application to Google Kubernetes Engine and are experiencing some performance degradation. Your logs are being written to Cloud Logging, and you are using a Prometheus sidecar model for capturing metrics. You need to correlate the metrics and data from the logs to troubleshoot the performance issue and send real-time alerts while minimizing costs.
What should you do?

• A. Export the Prometheus metrics and use Cloud Monitoring to view them as external metrics.Configure Cloud Monitoring to create log-based metrics from the logs, and correlate them with the Prometheus data.
• B. Create custom metrics from the Cloud Logging logs, and use Prometheus to import the results using the Cloud Monitoring REST API.
• C. Export the Cloud Logging logs and the Prometheus metrics to Cloud Bigtable. Run a query to join the results, and analyze in Google Data Studio.
• D. Export the Cloud Logging logs and stream the Prometheus metrics to BigQuery. Run a recurring query to join the results, and send notifications using Cloud Tasks.

You are a developer at a social media company. The company runs their social media website on-premises and uses MySQL as a backend to store user profiles and user posts. Your company plans to migrate to Google Cloud, and your learn will migrate user profile information to Firestore.
You are tasked with designing the Firestore collections. What should you do?

• A. Create one root collection for user profiles, and create one subcollection for each user's posts.
• B. Create one root collection for user posts, and create one subcollection for each user's profile.
• C. Create one root collection for user profiles, and store each user's post as a nested list in the user profile document.
• D. Create one root collection for user profiles, and create one root collection for user posts.

You are running a containerized application on Google Kubernetes Engine. Your container images are stored in Container Registry. Your team uses CI/CD practices. You need to prevent the deployment of containers with known critical vulnerabilities. What should you do?

• A. - Use Web Security Scanner to automatically crawl your application
  - Review the scan results in the scan details page in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
  - Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
• B. - Enable the Container Scanning API to perform vulnerability scanning
  - Review vulnerability reporting in Container Registry in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
  - Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
• C. - Enable the Container Scanning API to perform vulnerability scanning
  - Programmatically review vulnerability reporting through the Container Scanning API, and provide an attestation that the container is free of known critical vulnerabilities
  - Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
• D. - Use Web Security Scanner to automatically crawl your application
  - Review your application logs for scan results, and provide an attestation that the container is free of known critical vulnerabilities
  - Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed