GCP Dev Flashcards
Internal eks cluster communication can be done through a Service or an Ingress?
Service
In order to not have a secret available from the Kubernetes API Server, you need to use - Kubernetes Secrets, GKE Application-layer Secrets Encryption, or Secret Manager with service account and Workload Identity to auth the service account?
Secret Manager with service account and Workload Identity to auth the service account
In GKE with Istio, how can you restrict access to a single API endpoint? NetworkPolicy, AuthorizationPolicy, or mTLS?
Authorization Policy
When using workload identity what is the best way to use service accounts to validate to a Google Cloud API? using roles/iam.workloadIdentityUser, use account keys from secret manager, attach service account to the GKE node?
using roles/iam.workloadIdentityUser
What autoscaler should you use for a distributed service running in GKE? Horizontal or Vertical pod autoscaler?
Horizontal Pod Autoscaler
What should you use for storing session information?
Memorystore for Redis
What is the best storage for shopping cart information that can be accessed on each login? BigQuery, Cloud storage, or Firestore?
Firestore
What api tool can be public, authenticate, enforces quotas and report metrics? Cloud Run, Cloud Endpoints, Identity-Aware Proxy or GKE Ingress for HTTP(s) Load Balancing
Cloud Endpoints
For bucket data that might only be accessed annually what are the two best storage options? Archive, Nearline, Coldline, Standard
Archive or Coldline
Which datastore has zero operational cost when no traffic is hitting it? FIrestore or Cloud Sql?
Firestore
Which Kubernetes solution can scale down to zero so you don’t have costs when there’s no traffic? GKE, Cloud Run, App Engine, or Compute Engine managed instance group with autoscaling?
Cloud Run
Which container option supports running containers in Knative? Cloud Run, Compute Engine, GKE, or App Engine?
Cloud Run utilizes the Knative Serverless Framework
Which solution allows instances in a private subnet to communicate with public GoogleApis? Carrier Peering, VPC peering, Shared VPC networks or Private Google Access?
Private Google Access
Which cluster mount support read-write-many? Cloud storage bucket mounted by FUSE, persistent disk mounted as shared PersistentVolume, or Filestore mounted as nfs PersistentVolume?
Filestore mounted as nfs PersistentVolume
If you have a pub/sub topic and are handling large volumes of messages, should you use a pull subscription or a push subscription?
pull subscription
True/False, GOOGLE_APPLICATION_CREDENTIALS env var can be set to an Access Token value for authorization?
False, GOOGLE_APPLICATION_CREDENTIALS should be set to the name of a file that contains the access token
Which datastore provides high availability across regions and global consistency? Cloud SQL, Cloud Spanner, Cloud Bigtable?
Cloud Spanner
Which provides high speed reads and writes? Cloud Bigtable, Cloud Storage or BigQuery?
Cloud Bigtable
Which is the most cost effective for 100T byte initial data migration? Partner Interconnect, Dedicated Interconnect , Transfer Appliance?
Transfer Appliance
Data stores that offer a multi-regional location are: Cloud Storage, Memorystore, Fiirestore, Cloud SQL, Cloud Spanner
Cloud Storage, Firestore, Cloud Spanner
When forwarding messages to https endpoints if you need explicit rate controls, and timeouts longer than 10 min, you should use: Pub/Sub or Cloud Tasks
Cloud Tasks
What is the preferred way to implement URL discovery on Cloud Run
Treat other service URLs as configuration and pass them using environment variables