CDL Flashcards

1
Q

What is Compliance Report Manager ?

A

Website where you can download PDFs of Google’s certifications (such as SOC, GDPR etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Cloud Armor?

A

DDoS protection + WAF

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Security Command Center?

A

centralized security platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which service allows browsing through internal enterprise solutions?

A

Service Catalogue (former Private Catalogue)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the Resource Hierarchy in GCP?

A
  • Organization (with domain as identifier)
  • Folders
  • Projects

Use Labels for further differentiation.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AI Infrastructure services

A
  • AI Infrasturcture (orchestrate compute across CPUs, GPUs, TPUs)
  • Cloud GPUs
  • Cloud TPUs
  • DL Containers
  • DL VMs
  • TensorFlow Enterprise
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How to make sure Data Residency & Compliance Boundries ?

A

Use “Assured Workloads”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is Knative?

A

Abstraction above K8s: Focus on code instead of setting up deployments, services etc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Cloud Run?

A

Fully managed environment for running containerized Apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the Shared Responsibility Model?

A

Responsibility IN the cloud: If you can configure it, you are responsible

Responsibility OF the cloud: If you cant configure it, Google is responsible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is CAPEX and OPEX

A

CAPEX = Capital Expenditure
OPEX = Operational Expenditure

WHen adopting Cloud you move from CAPEX (buying physical infrastructure) to OPEX

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Elasticity in the Cloud?

A

Scale up or down depending on demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Failover?

A

Plan to shift traffic to a redundant system if primary fails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are main features of App Engine?

A
  • Fully managed, PaaS
  • Supports common languages like Java, Go, Python
  • Versioning of Services
  • Traffic Splitting (across versions) for A/B testing, graduate rollout etc
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which environments exist for App Engine?

A

Standard ( = serverless)

Flexible ( = fully managed containers)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the Standard env in App Engine?

A
  • Deploy & Startup in seconds
  • For rapid scaling
  • Can scale to 0
  • No Custom Runtime, SSH or Background processes
  • Pricing based on instance hours
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the Flexible env in App Engine?

A
  • Deploy & Statup in minutes
  • For consistent traffic
  • Custom Runtimes (Containers)
  • SSH
  • Background processes
  • Pricing based on CPUS, memory, disk
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are semi-structured and unstructured data?

A

Semi-structured: JSON, Email

Unstructured: Text, Video

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is a Data Lake?

A

Store large amounts of raw data of any type, including unstructured.

(Data Warehouses are mostly for structured data)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the core Data Products in GCP?

A
  • Cloud SQL
  • Cloud Spanner
  • Bigtable
  • Firestore
  • Cloud Storage
  • BigQuery
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

When use Firestore vs BigTable?

A

Use Firestore when you need a flexible, scalable NoSQL database that supports real-time synchronization and offline capabilities.
Ideal for mobile and web applications.

Use Bigtable when you need a high-throughput, low-latency database for large-scale analytical and operational workloads.
Good for time-series data or IoT applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Datastream?

A

Service to stream and synch data from SQL databases into GCP databases (SQL, Spanner, BigQuery)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is Looker?

A

BI Tool to analyse and visualize data.
Support connections to BigQUery and dozens of other SQL databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which service can be used for ingesting stream events, e.g. from gaming or IOT?

A

PubSub

25
Q

What are 4 options to develop ML models?

A
  • BigQuery ML
  • Pre-trained APIs (Vision API, Natural Language API…)
  • Auto ML (No code solution)
  • Vertex AI (for custom training)
26
Q

Which AI solutions exists on GCP?

A
  • Conversational AI
  • Contact Center AI
  • Document AI
  • Discovery for Retail
  • Cloud Talent Solution
27
Q

Which product help with Rehosting workloads to GCP?

A

VMware Engine for VMware workloads

Bare Metal solution for Oracle workloads

28
Q

Spot VMs vs preemptible VMs

A

Spot VMs are newer and have more features like running more than 24h

29
Q

Which migration services exist?

A
  • Migrate to VMs
  • Migrate to Containers
  • Anthos / GKE Enterprise
  • Database Migration Service
  • BigQuery Transfer Service
  • Transfer Appliances
  • Cloud Storage Transfer Service
30
Q

Which ETL tools exist on GCP?

A
  1. Dataproc
    Managed Apache Spark, Hadoop, Flink, Presto and more
  2. Dataflow
    Fully Managed batch & Streaming pipelines based on Apache Beam
  3. Cloud Data Fusion
    No-code, drag-and-drop tool for ETL pipelines
31
Q

How to configure Compute Engine if you plan to run Containers?

A

Container Optimized OS for Compute Engine

32
Q

How can seperate projects communicate with each other?

A

Use “VPC Peering” or “Shared VPC”

33
Q

SLI vs SLO vs SLA

A

SLI = Specific metric like uptime, error rate

SLO = Goal for a system = Number + SLI like 99% Uptime

SLA = Multiple SLOs plus legal terms like refunds

34
Q

Which Operations Suite services are there?

A

Cloud Monitoring

Logging
Error Reporting

Cloud Trace
Cloud Debugger
Cloud Profiler

35
Q

What APM (Application Performance Managment) services are in the Operations Suite?

A

Cloud Debugger
Cloud Trace
Cloud Profiler

36
Q

What is the core data of a project?

A

Name = You choose (can be changes)
ID -> You or Google choose
Project Number -> Google chooses

ID is unique across GCP

37
Q

Does Cloud Monitoring work for AWS as well?

A

Yes

38
Q

Can BigQuery host TensorFlow models?

A

Yes

39
Q

Which role do you need to create, modify and delete Compute Engine Instances?

A

Compute Engine Instance Admin

40
Q

Cloud Run vs AppEngine flexible?

A

Cloud Run is simpler and more cost effective.
App Engine flexible is more flexible but more expensive

41
Q

How big are inter-zone and inter-region latencies?

A

Inter-zone: double digit

Inter-region: Triple digit

42
Q

What is Cloud Composer?

A

Workflow orchestration service with fully managed Apache Airflow

43
Q

Which API Gateway options are there?

A
  • Cloud Endpoints
  • ApiGee
44
Q

Cloud Endpoints vs ApiGee ?

A

Cloud Endpoints is simpler and cheaper.

ApiGee is expensive but has features like:
Security
Analytics
Monetization
ApiGee Hybrid

45
Q

Cloud Storage classes and minimum storage duration

A

Standard - 0 days
Nearline - 30 days
Coldline - 90 days
Archive - 365 days

46
Q

What is Private Google Access?

A

Allow private VMs without Internet Access to access Google Services

47
Q

What is Serverless VPC Access?

A

Allow to connect to VPC from serverless services like Cloud Run, Cloud Functions etc

48
Q

What is Migrate for Compute Engine?

A
  • Continuous replication of disk data from source to GCP
  • Minimal downtime, source VMs can still operate during migration
  • “Clone and Test” of migrated VMs
49
Q

What is Storage Transfer Service?

A
  • Move data from other CSPs or on-prem to GCP
  • Move data between GCS buckets (e.g. for replicating across regions)
  • One-time or recurring operations
50
Q

What are Transfer Appliances?

A

Use when >10TB or when upload would take more than a week

Sizes:
Rackable: 7TB, 40TB, 300TB
Freestanding: 40TB, 300TB

51
Q

What is the Zero Trust Model?

A

Shift Access Control from Network to Identity

  1. Access is NOT determined by Network
  2. Access granted based on context: user, device, …
  3. All access authenticated, authorized, encrypted
52
Q

What is Beyond Corp?

A

Collection of Services on GCP which help to implement the Zero Trust Model

53
Q

What is Access Context Manager?

A

Fine-grained access control for project based on attributes like user, device, IP

54
Q

What are VPC Service Controls?

A

Service to create Service Perimeters (=isolated environments)

55
Q

What charging cycles can you configure?

A

Monthly billing vs Threshold billing

56
Q

What is LDAP?

A

Lightweight Directory Access Protocol

Used for same-sign-on, most SSO uses LDAP

57
Q

How to use Active Directory on GCP?

A

Managed Service for Microsoft AD

58
Q

How to synch AD/LDAP to GCP?

A

Google Cloud Directory Synch