Your company runs an e-commerce business. The application responsible for payment processing has structured JSON logging with the following schema:
Capture and access of logs from the payment processing application is mandatory for operations, but the jsonPayload.user_email field contains personally identifiable information (PII). Your security team does not want the entire engineering team to have access to PII. You need to stop exposing PII to the engineering team and restrict access to security team members only. What should you do?

• A. Apply a jsonPayload.user_email exclusion filter to the _Default bucket.
• B. Apply the conditional role binding resource.name.extract("locations/global/buckets/(bucket)/") ==
  "_Default" to the _Default bucket.
• C. Modify the application to toggle inclusion of user_email when the log_user_email environment variable is set to true. Restrict the engineering team members who can change the production environment variable by using the CODEOWNERS file.
• D. Apply a jsonPayload.user_email restricted field to the _Default bucket. Grant the Log Field Accessor role to the security team members.

You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

• A. GKE health checks for your application servers
• B. Metrics exported from the application servers
• C. Your application servers' logs
• D. A synthetic client that periodically sends simulated user requests
• E. Instrumentation coded directly in the client

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?

• A. Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
• B. Configure Access Context Manager to allow only these members to export logs.
• C. Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.
• D. Grant the team members the IAM role of logging.configWriter on Cloud IAM.

You are the Site Reliability Engineer responsible for managing your company's data services and products.
You regularly navigate operational challenges, such as unpredictable data volume and high cost, with your company's data ingestion processes. You recently learned that a new data ingestion product will be developed in Google Cloud. You need to collaborate with the product development team to provide operational input on the new product. What should you do?

• A. Review the design of the product with the product development team to provide feedback early in the design phase.
• B. When the initial product version passes the quality assurance phase and compliance assessments, deploy the product to a staging environment. Share error logs and performancemetrics with the product development team.
• C. When the new product is used by at least one internal customer in production, share error logs and monitoring metrics with the product development team.
• D. Deploy the prototype product in a test environment, run a load test, and share the results with the product development team.