GCP ACE Flashcards
What is the order of GCP launch stages? Used in logging and monitoring to check where features are.
UNIMPLEMENTED, PRELAUNCH, EARLY_ACCESS, ALPHA, BETA, GA (General Availability)
Can the Organizational Administrator IAM role turn off all services in an existing GCP project?
No. An admin of an Organization is a member that has privileges which include modifying product access privileges for other members, inviting and removing members from an Organization and changing member roles. An Organization can have more than one admin. More to do with IAM policies than resources. The Project owner CAN shut down all resources.
What service enables admins to synchronize users, groups, and other data from an Active Directory/LDAP service to their cloud domain directory?
Google Cloud Directory Sync (GCDS)
What are the recommended access reoccurrence threshold for the different GCS Storage Classes?
Standard - frequently, daily
Nearline - less than once a Month
Coldline - less than once a quarter
Achive - less than once a year
Does roles/iam.serviceAccountUser or roles/iam.serviceAccountAdmin allow you to create service accounts?
roles/iam.serviceAccountAdmin
What role allows you to view the hierarchal structure on your organization, but not any resources?
roles/browser. This does allow them to view IAM policy as well
You want to quickly deploy a third-party app, what should you use?
Google Cloud Marketplace
How should you group resources that share common IAM policies?
Use folders to group resources that share common IAM policies.
By default, where does GKE collect the app logs when the log data is written? Two answers
STDOUT and STDERR
What is the CLI command to default to a GKE cluster?
gcloud config set container/cluster <CLUSTER_NAME></CLUSTER_NAME>
Can App Engine flexible scale to zero?
No. It has to start at one. Standard can scale to zero, and does by default.
Are images recommended for pub/sub?
No.
What is the gcloud command to use a service account private key for authentication?
gcloud auth activate-service-account <PRIVATE_KEY_PATH></PRIVATE_KEY_PATH>
What are the memory-optimized machine types?
M1, M2, M3. Can be used for in-memory purposes
What are the Alert Maxiumums for high-priority single-region and multi-region?
single-region: 65%
Multi-region: 45%
Can you enable deletion protection on a VM instance?
Yes.
How can you grant access to an operations partner (no GCP account) to VM instances to install tooling?
Cloud IAP Tunnel user with IAP. Identity-Aware Proxy.
Can you update an App Engine’s region after it is created?
NO. You either need to create a new project and then deploy the new region there, or delete and recreate in that project.
What is a DaemonSet?
Ensures that all (or some) Nodes run a copy of a pod.
Typical Use cases:
- running a cluster storage daemon on every node
- running a log collection daemon on every node
- running a node monitoring daemon on every node
What is the best storage/db solution for time-series data?
BigTable. But you can use BigQuery to run analysis on it.
Can Managed Instance Groups read config files like YAML?
No, for that you would need Deployment Manager
How do you support point-in-time recovery for data in SQL?
Enable binary logging.
How is GKE sandbox built?
With gvisor. You can enable GKE sandbox to isolate untrusted workloads.
Why would a GKE pod be in a ponding status? 3 answers.
Not enough CPU. Not enough Memory. Not enough CPU and Memory.
What data services can use Dataplex?
Cloud Storage and BigQuery. Then you can use Data Catalog.
What command allows you to reset and retrieve a password for a windows VM?
gcloud compute reset-windows-password <INSTANCE_NAME></INSTANCE_NAME>
What does Cloud Container Registry use as underlying storage for container images?
Cloud Storage. So if someone needs access, they need Cloud Storage permissions.
What are the 5 types of GKE services?
- ClusterIP: default, client sends requests to stable internal IP address
- NodePort: client sends IP address of a node on 1 or more nodePort
- Loadbalancer: client sends requests to IP address of a network loadbalancer
- ExternalName: Internal client uses the DNS name of a service as an alias for an external DNS name
- Headless: Pod grouping, but no stable IP address
Loadbalance is an extension of nodePort which is an extension of ClusterIP
What does maxSurge indicate within a managed instance group update?
Maxiumum additional # of instances that can be created during the update process.
Can be fixed or %.
Does Instance Template have the ability to enable health checks?
No, but managed instance groups can.
