An organization is migrating from their current on-premises productivity software systems to G Suite. Some network security controls were in place that were mandated by a regulatory body in their region for their previous on-premises system. The organization's risk team wants to ensure that network security controls are maintained and effective in G Suite. A security architect supporting this migration has been asked to ensure that network security controls are in place as part of the new shared responsibility model between the organization and Google Cloud.
What solution would help meet the requirements?

• A. Set up Cloud Armor to ensure that network security controls can be managed for G Suite.
• B. Network security is a built-in solution and Google's Cloud responsibility for SaaS products like G Suite.
• C. Ensure that firewall rules are in place to meet the required controls.
• D. Set up an array of Virtual Private Cloud (VPC) networks to control network security as mandated by the relevant regulation.

While migrating your organization's infrastructure to GCP, a large number of users will need to access GCP Console. The Identity Management team already has a well-established way to manage your users and want to keep using your existing Active Directory or LDAP server along with the existing SSO password.
What should you do?

• A. Use Google Cloud Directory Sync to synchronize the data in Google domain with your existing Active Directory or LDAP server.
• B. Users sign in using OpenID (OIDC) compatible IdP, receive an authentication token, then use that token to log in to the GCP Console.
• C. Manually synchronize the data in Google domain with your existing Active Directory or LDAP server.
• D. Users sign in directly to the GCP Console using the credentials from your on-premises Kerberos compliant identity provider.

An organization is moving applications to Google Cloud while maintaining a few mission-critical applications on-premises. The organization must transfer the data at a bandwidth of at least 50 Gbps. What should they use to ensure secure continued connectivity between sites?

• A. Dedicated Interconnect
• B. Partner Interconnect
• C. Cloud VPN
• D. Cloud Router

Your organization recently deployed a new application on Google Kubernetes Engine. You need to deploy a solution to protect the application. The solution has the following requirements:
Scans must run at least once per week
Must be able to detect cross-site scripting vulnerabilities
Must be able to authenticate using Google accounts
Which solution should you use?

• A. Google Cloud Armor
• B. Web Security Scanner
• C. Security Health Analytics
• D. Container Threat Detection