Pass the Google Google Cloud Certified Cloud-Digital-Leader Questions and answers with CertsForce

Explanation

IDaaS - identity providers managed by the company give better control over security and privacy. Security/access can be set granularly, while also being centralized. You don't have to manage multiple credentials.

The PAYG model is more convenient because you only pay for usage. And the case describes that the workloads are only run on certain days.

After the service provider provisions your connection, you can start passing traffic between your networks by using the service provider's network.

Security Health Analytics and Web Security Scanner detectors generate vulnerabilities findings that are available in Security Command Center. Your ability to view and edit findings is determined by the Identity and Access Management (IAM) roles and permissions you are assigned. For more information about IAM roles in Security Command Center.

Reference link:-

https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings

To change the Cloud Billing account for a project, you need to be able to move a project from one Cloud Billing account to another. To accomplish this task, you need permissions adequate to unlink the project from the existing Cloud Billing account AND to link the project to the target Cloud Billing account. Roles with adequate permissions to perform this task: Project Owner or Project Billing Manager on the project, AND Billing Account Administrator or Billing Account User for the target Cloud Billing account

Graphical user interface, text, application, email Description automatically generated

Reference link- https://cloud.google.com/billing/docs/how-to/modify-

Since the use of the tool is infrequent/intermittent, you can choose to compute options that are serverless. Both Cloud Run and Cloud App Engine Standard are serverless options that can shut down to zero. Since cost-effectiveness is a requirement, this will not cost anything during the periods it is not used.

Apigee includes analytics services which allow enterprises to report on various aspects of an API.

Web Security Scanner identifies security vulnerabilities in your App Engine, Google Kubernetes Engine (GKE), and Compute Engine web applications. It crawls your application, following all links within the scope of your starting URLs, and attempts to exercise as many user inputs and event handlers as possible.

Currently,  Web Security Scanner only supports public URLs and IPs that aren’t behind a firewall. Web Security Scanner currently supports the App Engine standard environment and App Engine flexible environments, Compute Engine instances, and GKE resources.

Reference link- https://cloud.google.com/security-command-center/docs/concepts-web-security-scanner-overview

The Bare Metal solution is the recommended approach. You can deploy Oracle capabilities like clustered databases, replication, and all performance features at licensing costs that are similar to on-premise systems

https://cloud.google.com/architecture/migrating-bare-metal-workloads

SaaS – Software as a Service (SaaS) provides you a complete product that is run and managed by the service provider. You worry only about using the software and not about infrastructure.

SaaS provides the lowest level of flexibility and management control over the infrastructure.    (Example:  Google Gsuite and MS O365)