Google Professional Cloud DevOps Engineer Question 267
Select 3Google Cloud PlatformYour organization is running multiple workloads on Google Cloud, and the leadership team is concerned about the rising costs and security risks. As a Cloud DevOps Engineer, you are tasked with identifying opportunities to optimize costs while improving security and reliability. Which of the following Google Cloud recommenders would you use to achieve this goal?
- A
Idle VM recommender to identify virtual machines that are underutilized or idle.
- B
IAM Policy recommender to identify overly permissive IAM roles.
- C
Database Reliability recommender to suggest ways to improve replication and backups.
- D
Firewall Rules recommender to detect overly permissive firewall rules.
Show answer and explanation
Correct answers: A, B, D
Explanation
The Idle VM recommender is useful for cost optimization by identifying resources that are not being fully utilized. The IAM Policy recommender and Firewall Rules recommender focus on improving security by reducing over-permissive access to resources. These tools align with the scenario's goals of optimizing costs and improving security. The Database Reliability recommender, while valuable for reliability, does not address the specific focus areas of cost and security in this case.
- A. Correct.
Idle VM recommender helps reduce costs by identifying underutilized or idle virtual machines that can be resized or shut down, contributing to cost optimization.
- B. Correct.
IAM Policy recommender identifies overly permissive IAM roles, which helps improve security by enforcing the principle of least privilege.
- C. Incorrect.
Database Reliability recommender is focused on database replication and backups but does not directly address cost optimization or security concerns as required by the scenario.
- D. Correct.
Firewall Rules recommender detects overly permissive firewall rules, which can help enhance security by limiting unnecessary access.