Autoscaling is supported in both Flexible and Standard environments. Flexible Environment does run a Docker container that includes a custom runtime or source code written in other programming languages.

Reference: https://cloud.google.com/appengine/docs/the-appengine-environments

Cloud DLP provides access to a powerful sensitive data inspection, classification, and de-identification platform.

Classification is the process to inspect the data and know what data we have, how sensitive it is, and the likelihood. Inspection and classification happen here.

De-identification is the process of removing, masking, replacing information from data.

Reference: https://cloud.google.com/dlp/docs

https://cloud.google.com/resource-manager/docs/organization-policy/overview

• A) is correct because unsecured third-party systems are a cybersecurity threat.
• B) is not correct. Third-party systems are not inherently less secure than cloud systems.
• C) is not correct. The use of third-party systems does not necessarily limit innovation.
• D) is not correct. Third-party systems are not inherently less powerful than cloud systems.

Compute Engine provides machine type recommendations to help you optimize the resource utilization of your virtual machine (VM) instances. These recommendations are generated automatically based on system metrics gathered by the Cloud Monitoring service over the previous 8 days. Use these recommendations to resize your instance’s machine type to use the instance’s resources more efficiently. This feature is also known as rightsizing recommendations

Reference: https://cloud.google.com/compute/docs/instances/apply-machine-type-recommendations-for-instances

• You can configure your Cloud Identity or Google Workspace account to use single sign-on (SSO). When you enable SSO, users aren't prompted to enter a password when they try to access Google services. Instead, they are redirected to an external identity provider (IdP) to authenticate.
• Using SSO can provide several advantages:
• You enable a better experience for users because they can use their existing credentials to authenticate and don't have to enter credentials as often.
• You ensure that your existing IdP remains the system of record for authenticating users.
• You don't have to synchronize passwords to Cloud Identity or Google Workspace.
• To use SSO, a user must have a user account in Cloud Identity or Google Workspace and a corresponding identity in the external IdP. SSO is therefore commonly used in combination with an external authoritative source that automatically provisions users to Cloud Identity or Google Workspace

Reference: https://cloud.google.com/architecture/identity/single-sign-on

• A) is not correct. This access model could impede an organization's ability to operate in the cloud.
• B) is correct. This is the definition of a least privilege model.
• C) is not correct. Access to on-premises software is not directly related to cloud resource security.
• D) is not correct. Organizations are responsible for determining access to cloud resources.

AutoML Tables enables your entire team to automatically build and deploy state-of-the-art machine learning models on structured data at massively increased speed and scale.

Vision API assign labels to images and quickly classify them into millions of predefined categories.

Reference: https://cloud.google.com/vision

• A) is not correct. This approach might work for a small organization, but would be problematic for a large organization.
• B) is not correct. An error budget is not related to cost management. Instead it is the difference between an SLO (service level objective) and an SLA (service level agreement).
• C) is not correct. Cloud costs are not impacted by on-premises infrastructure and services.
• D) is correct because cross-team partnerships are part of the visibility cost management strategy.

When you set up an automated update, the MIG rolls out a new version of an instance template automatically to all or to a subset of the group's VMs. If you have stateful configuration, the MIG also applies any unapplied per-instance configurations to the corresponding VMs.