GCP Flashcards

1
Q

What does IAM stand for

A

Identity and Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

IAM role types

A
  1. Primitive roles
  2. Predefined roles
  3. Custom roles
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Types of primitive roles

A
  1. Owner
  2. Editor
  3. Viewer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Supported persistent disk types

A
  1. HDD
  2. SSD
  3. Local SSD
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Command: copy files to and from Cloud Storage

A

gsutil cp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Service used for executing code in response to events

A

Cloud Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Command: list Kubernetes services

A

kubectl get svc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Command: run commands from inside a container that is running on Kubernetes

A

kubectl exec

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Command: create new service account

A

gcloud iam service-accounts create ...

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How to change an App Engine region

A

You cannot. Need to create a new project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Computer choices

A
  1. Compute engine
  2. Kubernetes engine
  3. App engine
  4. Cloud functions
  5. Cloud run
  6. Anthos
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

CIDR notation

A

used for specifying IP address ranges

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Fully managed NoSQL database, limited query syntax

A

Cloud Datastore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Command: create Kubernetes cluster

A

gcloud container clusters create

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Load balancers available

A
  1. HTTP(S) load balancer
  2. SSL Proxy
  3. TCP Proxy
  4. Network TCP/UDP load balancer
  5. internal TCP/UDP load balancer
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Compute: manages app platform

A

App engine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Compute: event-driven, server-less functions

A

Cloud functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Compute: server-less for containerised apps

A

Cloud run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Compute: VM, GPU, TPU, disks

A

Compute engine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Compute: manages Kubernetes/containers

A

Kubernetes engine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Compute: enterprise hybrid/multi-cloud platform

A

Anthos

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Storage options

A
  1. Cloud storage
  2. Nearline
  3. Coldline
  4. Persistent disk
  5. Cloud filestore
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Database options

A
  1. cloud bigtable
  2. cloud datastore
  3. cloud filestore
  4. cloud memorystore
  5. cloud spanner
  6. cloud SQL
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Data & analytics options

A
  1. bigquery
  2. cloud dataflow
  3. cloud datalab
  4. cloud dataproc
  5. cloud pub/sub
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Stackdriver options

A
  1. debugger
  2. error reporting
  3. logging
  4. monitoring
  5. profiler
  6. transparent SLIs
  7. trace
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Cloud IAM members

A
  1. Google account
  2. service account
  3. Google group
  4. G Suite domain
  5. Cloud Identity domain
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

types of audit log for each project

A
  1. admin activity
  2. system events
  3. data access
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Key-value pairs of configuration data that are accessible from code running in a Cloud Function

A

environment variables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Way to enable point-in-time recovery for MySQL databases on Cloud SQL

A

enable binary logging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Command: list networks

A

gcloud compute networks list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Name of a point-in-time backup of a persistent disk

A

Snapshot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Way to ensure the nodes in a Kubernetes Engine cluster are running the latest version of Kubernetes

A

enable ‘Automatic node upgrades’ option

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Cloud storage metadata key to set the MIME type

A

Content-Type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Mechanism that allows you to extract data from logs and track it

A

Custom logging metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Command: interact with Cloud Storage

A

gsutil

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Way to run Compute Engine instance based on templates

A

managed instances groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

Command: copy files to and from Cloud Storage

A

gsutil cp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Special account used for authenticating between difference services

A

service account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Mounted directories accessible from inside containers

A

volumes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

App Engine feature that allows fast rollbacks, A/B testing, canary deployments

A

traffic splitting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

common protocol and port used to connect to a Windows instance

A

RDP over port 3389

RDP: remote desktop protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

Name of the Kubernetes Deployment that ensures a single instance of a pod will run on each node

A

DaemonSet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

Templates that Deployment Manager supports

A

YAML, jinja, python

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

Service that allows you to run a MySQL or Postgres database

A

Cloud SQL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

kubectl flag that allows you to specify the JSON path of properties in JSON output

A

-o along with the jsonpath value

ex: kubectl get svc -o jsonpath

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Compute Services that directly support running Docker containers

A
  1. Kubernetes engine
  2. App engine (flexible environment)
  3. Compute engine
  4. Cloud functions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

Billing export formats

A
  1. BigQuery
  2. File export JSON
  3. File export csv
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

sparsely populated database

A

BigTable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

Kubernetes resource that exposes deployments

A

service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

interfaces for interacting with Google Cloud

A
  • directly to the REST API
  • cloud SDK
  • client libraries
  • console
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

Command: deploy a Cloud Function

A

gcloud functions deploy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

Resource for storing sensitive information in Kubernetes

A

secrets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Command: create new Kubernetes Secret

A

kubectl create secret

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

Commonly paired database with App Engine

A

Cloud datastore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

Command: add an IAM binding policy

A

`gcloud projects add-iam-policy-binding

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

Service that can ingest event streams. Commonly used with IoT

A

Pub/Sub

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

horizontally scalable SQL datapase

A

Cloud spanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

feature of Cloud Shell that allows you to browse to port 8080

A

web preview

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Flag to use when deploying to app engine that will prevent the version from getting 100% of the traffic

A

--no-promote

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

open port 22 to the internet

A

gcloud compute firewall-rules create --network $SERVICES_NETWORK --allow tcp:22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

Command: list gcloud configurations

A

gcloud config configurations list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

mechanism that allow you to track custom information in code and save it to Stackdriver

A

custom monitoring metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Command: set the CORS configuration on a bucket

A

gcloud cors set ...

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

service that supports monitoring, logging, and debugging

A

stackdriver

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

the flag to use that will allow you to determine the price of a bigQuery query without actually running the query

A

dry-run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

name of Kubernetes controller that provides declarative updates for pods

A

deployments

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

App Engine app.yaml handler property that allows directories to be static

A

static_dir

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

Command: list the current configuration for gcloud

A

glcoud config list

69
Q

one-click way to install common applications to Compute Engine instances

A

Cloud Launcher

70
Q

Command: make a bucket

A

gsutil mb gs://bucket-name/

71
Q

way to group different instances together

A

unmanaged instance groups

72
Q

Command: list Kubernetes deployments

A

kubectl get deployments

73
Q

available operating systems to use on a Kubernetes Engine node

A

COS (container-optomized) OS or Ubuntu

74
Q

Command: update a Kubernetes deployment that was created with kubectl create

A

kubectl apply

75
Q

Scaling modes supported by App Engine

A

Manual, Automatic

and Basic (only in standard environment)

76
Q

type of short-lived, reduced price instance commonly used for batch processing

A

preemptible instances

77
Q

feature that allows you to set the exact amount of memory and CPU

A

custom machine type

78
Q

Load balancer used for TCP traffic with SSL offload

A

SSL Proxy

79
Q

Command: deploy an App Engine application

A

gcloud app deploy app.yaml

80
Q

Command: list subnets

A

gcloud compute networks subnets list

81
Q

Common protocol and port used to connect to Linux instances

A

SSH port 22

82
Q

Command: get Pod logs in Kubernetes

A

kubectl get logs

83
Q

Types of App engine environments

A

standard and flexible

84
Q

Command: create a Cloud Function

A

gcloud functions deploy

85
Q

Fully manages version of Redis

A

cloud memorystore

86
Q

downloadable key allowing code to authenticate against google cloud services

A

service account key

87
Q

when creating firewall rules, the lower the number, the ___ the priority

A

higher

88
Q

a way to analyze spending data

A

billing exports sent to bigquery

89
Q

types of available roles

A

primitive (owner, editor, viewer), predefined, custom

90
Q

Command: enable api

A

gcloud services enable [ID]

91
Q

Command: list projects

A

gcloud projects list

92
Q

Command: create a Deployment Manager deployment

A

gcloud deployment-manager deployments create

93
Q

feature of Cloud Storage that allows object to be accessed temporarily

A

signed URLs

94
Q

App Engine traffic can be split by

A

cookies, IP address, random

95
Q

Command: update a Deployement Manager deployment

A

gcloud deployment-manager deployments update

96
Q

Command: list buckets

A

gsutil ls

97
Q

Meaning of 0.0.0.0/0

A

all IP addresses that exist

98
Q

means of dynamically identifying instances to apply firewall rules

A

network tags

99
Q

NoSQL’s realtime database

A

firebase realtime database

100
Q

where SSH keys for connecting to Compute Engine instances are stored

A

project or instance metadata

101
Q

load balancer to use for global HTTP(S) traffic

A

HTTP(S) load balancer

102
Q

tool that warns you when you’re spending too much

A

billing alerts

103
Q

feature that allows you to see all network traffic

A

flow logs

104
Q

kubernetes concept that represents the smallest unit of deployment

A

pod

105
Q

tool that helps estimate costs

A

pricing calculator

106
Q

how to write to stackdriver logs from a cloud function

A

use the logging package or write to standard out

107
Q

the load balancer to use for TCP traffic without SSL offload

A

TCP proxy

108
Q

Command: create a new Spanner database

A

gcloud spanner database create

109
Q

where do container images need to exist for kubernetes to work with them?

A

a container registry

110
Q

key-value pairs that you can set and interact with in a Compute Engine instance

A

metadata

111
Q

fully managed platform that supports running web applications inside a Docker container

A

app engine, flexible environment

112
Q

Compute Engine metadata key that allows you to run code at startup

A

start-up script

113
Q

Command: want to deploy a new instance that uses the centos 7 family. command to determine the family names

A

gcloud compute images list

114
Q

load balancer for external TCP load balancer with SSL offload

A

SSL proxy

115
Q

Which services for IoT solution, thousands of devices that need to send periodic time series data for processing

A

pub/sub, bigtable

116
Q

Which database service for: product catalog of 500 products, no experience with SQL or schema migrations, want NoSQL option

A

cloud datastore

117
Q

easiest way to ensure that the nodes in your kubernetes cluster are always up-to-date with the latest stable version of Kubernetes

A

enable the automatic node upgrades setting

118
Q

You’ve found that your Linux server keeps running low on memory. It’s currently using 8 Gigs of memory, and you want to increase it to 16. What is the simplest way to do that?

A

Stop the instance and change the machine type.

119
Q

use case for enabling flow logs

A

security team wants to audit network traffic inside your network

120
Q

Command: deploy change to deployment created with gcloud deployment-manager deployments create

A

gcloud deployment-manager deployments update

121
Q

Command: looking for the IP address of a specific instance that is running in your default zone.

A

glcoud compute instances list with filter and format flags

jsonpath is used with kubectl

122
Q

Command: fastest way to switch to the correct configuration after running commands against the wrong project

A

glcoud config configurations list, then gcloud config configurations activate

123
Q

You’re running an n-tier application on Compute Engine with an Apache web server serving up web requests. You want to consolidate all of your logging into Stackdriver. What’s the best approach to get the Apache logs into Stackdriver?

A

Install the Stackdriver monitoring and logging agents on the instance.

124
Q

Command: simplest way to deploy keys of team’s public SSH keys onto all of the instances of a particular project?

A

Add all of the keys into a file that’s formatted according to the requirements. Use gcloud compute project-into add-metadata to upload the keys

125
Q

Command: how to ensure there are always 4 idle instance? (running App Engine app with Autoscaling)

A

set the min_idle_instances property in app.yaml

126
Q

Command: best way to generate a signed URL?

A

Create a service account and JSON key. USe gsutil signrl -d 10m, and pass the JSON key and bucket

10m for 10 minutes

127
Q

Command: set default Compute Engine zone

A

glcoud config set compute/zone us-east1-c

128
Q

What is require by Google Cloud in order to enable and use resources

A

Project. All resources belong to a project

129
Q

Are Project ID globally unique

A

yes

130
Q

Are project ID immutable

A

yes

131
Q

Are project names unique

A

no

132
Q

are project names mutable

A

yes

133
Q

are project number globally unique

A

yes

134
Q

are project number chosen by user

A

no, assigned by gcp

135
Q

are project number immutable

A

yes

136
Q

are folders required for projects

A

No, but they help group projects and policies.

137
Q

Use cases for choosing pre-defined roles

A
  1. lowers business risk of accidental or deliberate damage to vital data and systems
  2. increases overall system and data security
  3. finer granularity on permission is considered a best practice
  4. using coarse permission may allow or cause users to violate regulations
138
Q

Who can change the billing account for an existing proejct

A

owner on the project and a billing administrator on the destination billing account

139
Q

who can manage billing accounts and add projects to them

A

billing administrator

140
Q

Compute option: flexible, zero-ops platform for building apps

A

app engine

141
Q

Compute option: virtual machines running in Google’s global data centers

A

compute engine

142
Q

Compute option: logical infrastructure powered by Kubernetes

A

Kubernetes engine

143
Q

Database options: relational

A

Cloud SQL, Cloud spanner

144
Q

database option: non-relational

A

cloud datastore, cloud bigtable

145
Q

data storage option: object

A

cloud storage

146
Q

data storage option: warehouse

A

bigquery

147
Q

data storage: need fully managed MySQL and POstgreSQL database service

A

Cloud SQL

148
Q

data storage: need scalable, fully managed enterprise data warehouse (EDW) with SQL and fast ad-hoc queries

A

BigQuery

149
Q

data storage: need mission-critical, relational database service with transactional consistency, global scale, high availability

A

Cloud Spanner

150
Q

data storage: need scalable, fully manage NoSQL wide-column database that is suitable for both low-latency single-point lookups and precalculated analytics

A

cloud BigTable

151
Q

Cloud Storage classes, from cheapest to most expensive storage price

A
  1. Coldline
  2. Nearline
  3. Regional
  4. Multi-regional
152
Q

Cloud Storage classes, from cheapest to most expensive retrieval price

A
  1. Multi-regional
  2. Regional
  3. Nearline
  4. Coldline
153
Q

Cloud storage classes

A
  1. Multi-regional
  2. Regional
  3. Nearline
  4. Coldline
154
Q

Cloud storage class: most frequently accessed

A

mutli-regional

155
Q

Cloud storage class: accessed frequently within a region

A

regional

156
Q

Cloud storage class: accessed less than once a month

A

nearline

157
Q

Cloud storage calss: accessed less than once a year

A

coldline

158
Q

Kubernetes controller ensures that a copy of a pod runs on nodes in the cluster, allowing for node management

A

Deployment

159
Q

Disadvantages of using the App Engine standard environment

A
  1. no custom runtimes
  2. limited support for third-party binaries
  3. limited ability to write to disk
160
Q

Kubernetes controller uses desired state configuration and allows us to specify the number of pod instances running on a cluster

A

Deployment

161
Q

Kubernetes nodes run services that allow pods to ___

A

communicate without using their individual IP address

162
Q

Google Cloud Price Calculator can …

A
  1. allow us to determine areas to cut back
  2. allow us to determine areas to rework codebase
  3. ensures services are affordable to use at scale
163
Q

Storage solution: suitable fro unstructured data

A

cloud storage

164
Q

optimal compute solution when:

  • workloads require high performance
  • workloads that will use preemptible instances
  • workloads requiring control of the operating system
A

Compute Engine

165
Q

Storage solution:

  • fully managed
  • NoSQL database built on Cloud BigTable
A

Cloud Datastore

166
Q

When to use unmanaged instance groups?

A

instances in the group need different configurations

167
Q

Advantage of using flexible environment with App Engine

A

can customize the runtime

168
Q

Advatages of App engine standard environment

A
  1. managed runtimes
  2. inexpensive
  3. fast startup