https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer#optional_serving_multiple_applications_on_a_load_balancer

As per the above document and given example of "fanout-ingress.yaml" in above document and also in GKE sample repository below

https://github.com/GoogleCloudPlatform/kubernetes-engine-samples/tree/master/load-balancing

it's clear that GKE LB can handle "6. Route network traffic to specific services based on URL"

So NO need for Cloud Load balancing.

Helm satisfy "5. Deploy application bundles using dynamic templates"

and no other option satisfies this point #5.

So correct answer isA

"C" is the correct answer here.

And, here is why "D" CANNOT be the answer:

Option-D states that: "Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url"

The sentence - "..registered as a xinetd service in Linux" indicates that the shutdown-script needs to be registered as service INSIDE the VM. And, the sentence "...specify the SERVICE URL as the value ...." indicates that we need to specify the service path of the shutdown-script (which is inside the VM) as the target URL for key shutdown-script-url. The key shutdown-script-url, however, will only accept a a Cloud Storage URL.

Let's go with option elimination

A. Add each tier to a different subnetwork

>> Adding tiers to different subnets does not prevent or block them from accessing each other. Until specific firewall rules on VM or subnet allow access traffic on a specific port in the rule.

B. Set up software-based firewalls on individual VMs

>> Not a recommended practice will have to enable firewall anyway.

C. Add tags to each tier and set up routes to allow the desired traffic flow

>> Can be done but.

D. Add tags to each tier and set up firewall rules to allow the desired traffic flow

>> Recommended way

Hence D

ACE are correct answers.

A. Use Stackdriver Logging to search for the module log entries = Check logs

C. Use gcloud or Cloud Console to connect to the serial console and observe the logs = Check grub messages, remember new kernel module was installed.

E. Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics = Zoom into the time window when problem happened.

Answers: A is correct because BigQuery is the fully managed cloud data warehouse for analytics and supports the analytics requirement.

E is correct because Cloud Storage provides the Coldline storage class to support long-term storage with infrequent access, which would support the long-term disaster recovery backup requirement.

https://cloud.google.com/bigquery/

https://cloud.google.com/stackdriver/

https://cloud.google.com/storage/docs/storage-classes#coldline

https://cloud.google.com/sql/

https://cloud.google.com/bigtable/

Let's go with option elimination

A. Log in to a server, and iterate on the fix locally

>> Long step, hence eliminate

B. Revert the source code change and rerun the deployment pipeline

>> This revert will be logged in the source repo. Will go with this way although D also is correct.

C. login to the servers with the bad code change, and swap in the previous code

>> C is manually doing what can be automatically done by B and C, hence eliminate.

D. Change the instance group template to the previous one and delete all instances

>> This is similar to B but why manually do something which is automated. Hence eliminate. But is also correct. But B is better from code lifecycle perspective.

Hence B

Ans C -- "Next in the hierarchy are folders. You can use folders to isolate requirements for different departments and teams in the parent organization"

https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations

B is correct answer.

SHA1 Digest error in the first line in the error code. With Java errors, always focus on the first line in the error code, rest of the lines are garbage **mostly**.

A is not correct because although this would encrypt the message, it does not validate either the client or the server.

B is not correct because a malicious actor could spoof the user identifier and destination user information.

C is not correct because SSL only requires the server to have a signed certificate and does not require validating the client.

D is correct because PKI requires that both the server and the client have signed certificates, validating both the client and the server.

It's latency issues. That won't be solved by adding another VPN tunnel. If it was just a throughput issue then VPN would do, however to improve latency you need to go layer 2. Answer is B