You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?

• A. tcp_ssl_proxy/open_connections
• B. flex/connections/current
• C. tcp_ssl_proxy/new_connections
• D. flex/instance/connections/current

You support a user-facing web application When analyzing the application's error budget over the previous six months you notice that the application never consumed more than 5% of its error budget You hold a SLO review with business stakeholders and confirm that the SLO is set appropriately You want your application's reliability to more closely reflect its SLO What steps can you take to further that goal while balancing velocity, reliability, and business needs?
Choose 2 answers

• A. Announce planned downtime to consume more error budget and ensure that users are not depending on a tighter SLO
• B. Implement and measure all other available SLIs for the application
• C. Tighten the SLO to match the application's observed reliability
• D. Add more serving capacity to all of your application's zones
• E. Have more frequent or potentially risky application releases

You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

• A. A synthetic client that periodically sends simulated user requests
• B. Your application servers' logs
• C. Instrumentation coded directly in the client
• D. Metrics exported from the application servers
• E. GKE health checks for your application servers

Your company runs an e-commerce business. The application responsible for payment processing has structured JSON logging with the following schema:
Capture and access of logs from the payment processing application is mandatory for operations, but the jsonPayload.user_email field contains personally identifiable information (PII). Your security team does not want the entire engineering team to have access to PII. You need to stop exposing PII to the engineering team and restrict access to security team members only. What should you do?

• A. Apply the conditional role binding resource.name.extract("locations/global/buckets/(bucket)/") ==
  "_Default" to the _Default bucket.
• B. Apply a jsonPayload.user_email restricted field to the _Default bucket. Grant the Log Field Accessor role to the security team members.
• C. Modify the application to toggle inclusion of user_email when the log_user_email environment variable is set to true. Restrict the engineering team members who can change the production environment variable by using the CODEOWNERS file.
• D. Apply a jsonPayload.user_email exclusion filter to the _Default bucket.