Core Infrastructure Quizes Flashcards
Choose the correct completion: Services and APIs are enabled on a per-__________ basis.
a) Billing account
b) Organisation
c) Project
d) Folder
c) Project
True or false: Google manages every aspect of Google Cloud Platform customers’ security.
False
Google Cloud Platform manages the lower layers of the security stack, such as physical security, and gives customers tools for managing the higher layers.
Your company has two GCP projects, and you want them to share policies. What is the less error-prone way to set this up?
a) Duplicate all the policies on one project onto the other.
b) Place both projects into a folder, and define the policies on the folder.
B)
When would you choose to have an organization node? (Choose all that are correct. Choose 2 responses.)
a) When you want to create folders.
b) When you want to organize resources into projects.
c) When you want to apply organization-wide policies centrally.
d) There is no choice; organization nodes are mandatory.
A) & C)
A) Folders require an organization node. Organization nodes are optional, but if you want to create folders, having one is mandatory.
C) Organization nodes let you apply policies centrally. Organization nodes are optional, but if you want to define policies that apply to all the projects in your organization, having one is mandatory.
Order these IAM role types from broadest to finest-grained.
a) Primitive roles, predefined roles, custom roles
b) Custom roles, predefined roles, primitive roles
c) Predefined roles, custom roles, primitive roles
a)
Can IAM policies that are implemented higher in the resource hierarchy take away access that is granted by lower-level policies?
No
True or False: In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone applies a more restrictive policy directly to that resource.
False
Policies are a union of those applied on resource itself and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied on the resource. If a parent policy is more restrictive, it does not override a less restrictive policy applied on the resource. Therefore, access granted at a higher level in the hierarchy cannot be taken away by policies applied at a lower level in the hierarchy.
True or False: All Google Cloud Platform resources are associated with a project.
True
All Google Cloud Platform resources are associated with a project.
Service accounts are used to provide which of the following? (Choose all that are correct. Choose 3 responses.)
a) A way to restrict the actions a resource (such as a VM) can perform
b) A way to allow users to act with service account permissions
c) Authentication between Google Cloud Platform services
d) A set of predefined permissions
a) b) c)
How do GCP customers and Google Cloud Platform divide responsibility for security?
a) Google takes care of the higher parts of the stack, and customers are responsible for the lower parts.
b) All aspects of security are the customer’s responsibility.
c) All aspects of security are Google’s responsibility.
d) Google takes care of the lower parts of the stack, and customers are responsible for the higher parts.
d)
Which of these values is globally unique, permanent, and unchangeable, but chosen by the customer?
a) The project number
b) The project name
c) The project’s billing credit-card number
d) The project ID
d)
Consider a single hierarchy of GCP resources. Which of these situations is possible? (Choose all that are correct. Choose 3 responses.)
a) There are two or more organization nodes
b) There is an organization node, and there is at least one folder.
c) There is no organization node, but there is at least one folder.
d) There is an organization node, and there are no folders.
e) There is no organization node, and there are no folders.
b) d) & e)
What is the difference between IAM primitive roles and IAM predefined roles?
a) Primitive roles affect all resources in a GCP project. Predefined roles apply to a particular service in a project.
b) Primitive roles only apply to the owner of the GCP project. Predefined roles can be associated with any user.
c) Primitive roles are changeable once assigned. Predefined roles can never be changed.
d) Primitive roles can only be granted to single users. Predefined roles can be associated with a group.
e) Primitive roles only allow viewing, creating, and deleting resources. Predefined roles allow any modification.
a)
Which statement is true about billing for solutions deployed using Cloud Marketplace (formerly known as Cloud Launcher)?
a) You pay only for the underlying GCP resources you use, with the possible addition of extra fees for commercially licensed software.
b) You pay only for the underlying GCP resources you use; Google pays the license fees for commercially licensed software.
c) Cloud Marketplace solutions are always free.
d) After a trial period, each Cloud Marketplace solution assesses a fixed recurring monthly fee.
a)
True or false? In Google Cloud VPCs, subnets have regional scope.
True
VPC subnets can span the zones that make up a region. This is beneficial because your solutions can incorporate fault tolerance without complicating your network topology.
True or false: If you increase the size of a subnet in a custom VPC network, the IP addresses of virtual machines already on that subnet might be affected.
False
You can dynamically increase the size of a subnet in a custom network by expanding the range of IP addresses allocated to it. Doing that doesn’t affect already configured VMs.
True or false: You can create Compute Engine virtual machines from the command line.
True
It’s advantageous to create virtual machines from a command line when you want their configurations to be scripted and repeatable. The gcloud command, provided by Google Cloud as part of the GCP SDK, can create virtual machines with parameters you specify.
What is the main reason customers choose Preemptible VMs?
To reduce cost.
The per-hour price of preemptible VMs incorporates a substantial discount.
True or False: Google Cloud Load Balancing allows you to balance HTTP-based traffic across multiple Compute Engine regions.
True
With global Cloud Load Balancing, your application presents a single front-end to the world.
Which statement is true about Google VPC networks and subnets?
a) Networks are global; subnets are zonal
b) Networks are global; subnets are regional
c) Networks are regional; subnets are zonal
d) Networks and subnets are global
b)
An application running in a Compute Engine virtual machine needs high-performance scratch space. Which type of storage meets this need?
a) Standard persistent
b) Local standard
c) Local SSD
d) SSD persistent
c)
Choose an application that would be suitable for running in a Preemptible VM.
a) A batch job that can be checkpointed and restarted
b) A batch job that cannot be checkpointed and restarted
c) An interactive website
d) An online relational database
a)
How do Compute Engine customers choose between big VMs and many VMs?
a) Use big VMs for fault tolerance and elasticity; use many VMs for in-memory databases and CPU-intensive analytics
b) Use big VMs for in-memory databases and CPU-intensive analytics; use many VMs for fault tolerance and elasticity
b)
How do VPC routers and firewalls work?
a) They are managed by Google as a built-in feature.
b) Customers provision virtual machines and run their routers and firewalls in them.
c) They are managed by Google in virtual machines, which customers may tune or turn off.
d) They are managed by Google in virtual machines, which customers may never modify.
a)
A GCP customer wants to load-balance traffic among the back-end VMs that form part of a multi-tier application. Which load-balancing option should this customer choose?
a) The global TCP proxy
b) The regional internal load balancer
c) The global SSL proxy
d) The regional load balancer
e) The global HTTP(S) load balancer
b)
For which of these interconnect options is a Service Level Agreement available?
a) VPNs with Cloud Router
b) Direct Peering
c) Carrier Peering
d) Dedicated Interconnect
d)
Your Cloud Storage objects live in buckets. Which of these characteristics do you define on a per-bucket basis? Choose all that are correct (3 correct answers).
a) A globally-unique name
b) An encryption-at-rest setting (on or off)
c) A default file type for the objects in the bucket
d) A geographic location
e) A default storage class
a) d) e)
True or false: Cloud Storage is well suited to providing the root file system of a Linux virtual machine.
False
Cloud Storage is object storage rather than file storage. Compute Engine virtual machines use Persistent Disk storage to contain their file systems.
Why would a customer consider the Coldline storage class?
a) To save money on storing frequently accessed data.
b) To use the Coldline Storage API.
c) To save money on storing infrequently accessed data.
d) To improve security.
c)
True or false: Each table in NoSQL databases such as Cloud Bigtable has a single schema that is enforced by the database engine itself.
False
NoSQL databases such as Cloud Bigtable are suitable when all items in the database needn’t have their integrity checked by a database schema. Why not? Maybe you want your database items to contain variable fields, or maybe because you simply want your application to manage database integrity.
Some developers think of Cloud Bigtable as a persistent hashtable. What does that mean?
a) Each item in the database consists of exactly the same fields, and can be looked up based on a variety of keys.
b) Each item in the database can be sparsely populated, and is looked up with a single key.
b)
Which database service can scale to higher database sizes?
a) Cloud SQL
b) Cloud Spanner
B)
Cloud Spanner can scale to petabyte database sizes, while Cloud SQL is limited by the size of the database instances you choose. At the time this quiz was created, the maximum was 10,230 GB.
