GCP Dev Flashcards

1
Q

Internal eks cluster communication can be done through a Service or an Ingress?

A

Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In order to not have a secret available from the Kubernetes API Server, you need to use - Kubernetes Secrets, GKE Application-layer Secrets Encryption, or Secret Manager with service account and Workload Identity to auth the service account?

A

Secret Manager with service account and Workload Identity to auth the service account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In GKE with Istio, how can you restrict access to a single API endpoint? NetworkPolicy, AuthorizationPolicy, or mTLS?

A

Authorization Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When using workload identity what is the best way to use service accounts to validate to a Google Cloud API? using roles/iam.workloadIdentityUser, use account keys from secret manager, attach service account to the GKE node?

A

using roles/iam.workloadIdentityUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What autoscaler should you use for a distributed service running in GKE? Horizontal or Vertical pod autoscaler?

A

Horizontal Pod Autoscaler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What should you use for storing session information?

A

Memorystore for Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the best storage for shopping cart information that can be accessed on each login? BigQuery, Cloud storage, or Firestore?

A

Firestore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What api tool can be public, authenticate, enforces quotas and report metrics? Cloud Run, Cloud Endpoints, Identity-Aware Proxy or GKE Ingress for HTTP(s) Load Balancing

A

Cloud Endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

For bucket data that might only be accessed annually what are the two best storage options? Archive, Nearline, Coldline, Standard

A

Archive or Coldline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which datastore has zero operational cost when no traffic is hitting it? FIrestore or Cloud Sql?

A

Firestore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which Kubernetes solution can scale down to zero so you don’t have costs when there’s no traffic? GKE, Cloud Run, App Engine, or Compute Engine managed instance group with autoscaling?

A

Cloud Run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which container option supports running containers in Knative? Cloud Run, Compute Engine, GKE, or App Engine?

A

Cloud Run utilizes the Knative Serverless Framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which solution allows instances in a private subnet to communicate with public GoogleApis? Carrier Peering, VPC peering, Shared VPC networks or Private Google Access?

A

Private Google Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which cluster mount support read-write-many? Cloud storage bucket mounted by FUSE, persistent disk mounted as shared PersistentVolume, or Filestore mounted as nfs PersistentVolume?

A

Filestore mounted as nfs PersistentVolume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If you have a pub/sub topic and are handling large volumes of messages, should you use a pull subscription or a push subscription?

A

pull subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True/False, GOOGLE_APPLICATION_CREDENTIALS env var can be set to an Access Token value for authorization?

A

False, GOOGLE_APPLICATION_CREDENTIALS should be set to the name of a file that contains the access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which datastore provides high availability across regions and global consistency? Cloud SQL, Cloud Spanner, Cloud Bigtable?

A

Cloud Spanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which provides high speed reads and writes? Cloud Bigtable, Cloud Storage or BigQuery?

A

Cloud Bigtable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which is the most cost effective for 100T byte initial data migration? Partner Interconnect, Dedicated Interconnect , Transfer Appliance?

A

Transfer Appliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Data stores that offer a multi-regional location are: Cloud Storage, Memorystore, Fiirestore, Cloud SQL, Cloud Spanner

A

Cloud Storage, Firestore, Cloud Spanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

When forwarding messages to https endpoints if you need explicit rate controls, and timeouts longer than 10 min, you should use: Pub/Sub or Cloud Tasks

A

Cloud Tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the preferred way to implement URL discovery on Cloud Run

A

Treat other service URLs as configuration and pass them using environment variables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the hierarchy of Projects, Resources, Organizations, Folders?

A

Organization -> Folders -> Projects -> Resources

24
Q

Which container solution will not charge you when not handling requests?

25
Where can CloudRun pull containers from?
Only from artifact registry
26
Where do jobs from Cloud Run get run?
Cloud Scheduler
27
What is the closest equivalent to EC2?
Compute Engine
28
How can you autoscale on Compute Engine?
managed instance groups (MIG)
29
What is the closest equivalent of S3?
Cloud Storage
30
What is the closest equivalent of RDS?
Cloud SQL
31
What do you use for big data analysis and interactive querying capabilities?
BigQuery
32
What storage offerings are SQL?
Cloud SQL, Cloud Spanner,
33
What storage offerings are no sql?
BigQuery, BigTable, Firestore, Firebase Realtime Database, Cloud storage
34
What storage should you use for Financial analysis and prediction, IOT processing and analytics, or marketing applications?
Cloud BigTable
35
What data store should you use for Mobile and web applications with both online and offline capabilities?
Firestore
36
What datastore should you use for Development of apps that work across devices, Ad optimization and personalization, or Third-party payment processing?
Firebase Realtime Database
37
What datastore do you use when you plan to use large amounts of data (more than 10TB) and need transactional consistency?
Cloud Spanner
38
Cloud Spanner
39
What datastore do you use if you are using large amounts of single key data. In particular, it is good for low-latency, high throughput workloads.
Cloud Bigtable
40
How can you setup physical connection between your on-premises infrastructure, Google Cloud, and other resources?
Cloud Interconnect
41
Which two provide a direct connection to Google Cloud’s network? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect
Direct Peering and Dedicated Interconnect
42
Which two provide a connection to Google Cloud’s network through a partner? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect
Carrier Peering and Partner Interconnect
43
Which two provides access to Google Workspace services, YouTube, and Google Cloud APIs using public IP addresses? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect
Direct Peering and Carrier Peering
44
Which two provide connections use a VLAN that pipes directly into your Google Cloud environment, providing connectivity to internal IP addresses in the RFC 1918 address space? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect
Dedicated Interconnect and Partner Interconnect
45
How do you configure private communication between VPC networks in the same project?
VPC Network Peering
46
How do you configure private communication between VPC networks in different projects?
Shared VPC
47
What is the closest equivalent of Route53?
Google Cloud DNS
48
What service implements dynamic VPN that allows topology to be discovered and shared automatically, which reduces manual static route maintenance?
Cloud Router
49
What is the lowest-cost option, used ideally for data archiving, online backup, and disaster recovery. data that you plan to access less than once a year?
Archive Storage
50
You can use what feature in Cloud Storage to move logs to Nearline or Coldline storage classes and delete them after the required retention period has passed?
Object lifecycle management
51
What allows instances in the subnetworks to communicate with public Google API endpoints even if the instances don't have external IP addresses?
Private Google Access
52
What allows resources without external IP addresses to create outbound connections to the internet?
Cloud NAT
53
T/F - VPCs are region specific?
False, VPCs can be deployed across multiple regions
54
If you are transferring data from Azure to GCP should you use Storage Transfer Service or Transfer Appliance
Storage Transfer Service, (Transfer appliance only works with on prem)
55
What creates Pod-level firewall rules that determine which Pods and Services can access one another inside your cluster?
Network Policy