GCP Dev Flashcards

1
Q

Internal eks cluster communication can be done through a Service or an Ingress?

A

Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In order to not have a secret available from the Kubernetes API Server, you need to use - Kubernetes Secrets, GKE Application-layer Secrets Encryption, or Secret Manager with service account and Workload Identity to auth the service account?

A

Secret Manager with service account and Workload Identity to auth the service account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In GKE with Istio, how can you restrict access to a single API endpoint? NetworkPolicy, AuthorizationPolicy, or mTLS?

A

Authorization Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

When using workload identity what is the best way to use service accounts to validate to a Google Cloud API? using roles/iam.workloadIdentityUser, use account keys from secret manager, attach service account to the GKE node?

A

using roles/iam.workloadIdentityUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What autoscaler should you use for a distributed service running in GKE? Horizontal or Vertical pod autoscaler?

A

Horizontal Pod Autoscaler

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What should you use for storing session information?

A

Memorystore for Redis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the best storage for shopping cart information that can be accessed on each login? BigQuery, Cloud storage, or Firestore?

A

Firestore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What api tool can be public, authenticate, enforces quotas and report metrics? Cloud Run, Cloud Endpoints, Identity-Aware Proxy or GKE Ingress for HTTP(s) Load Balancing

A

Cloud Endpoints

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

For bucket data that might only be accessed annually what are the two best storage options? Archive, Nearline, Coldline, Standard

A

Archive or Coldline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which datastore has zero operational cost when no traffic is hitting it? FIrestore or Cloud Sql?

A

Firestore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which Kubernetes solution can scale down to zero so you don’t have costs when there’s no traffic? GKE, Cloud Run, App Engine, or Compute Engine managed instance group with autoscaling?

A

Cloud Run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which container option supports running containers in Knative? Cloud Run, Compute Engine, GKE, or App Engine?

A

Cloud Run utilizes the Knative Serverless Framework

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which solution allows instances in a private subnet to communicate with public GoogleApis? Carrier Peering, VPC peering, Shared VPC networks or Private Google Access?

A

Private Google Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which cluster mount support read-write-many? Cloud storage bucket mounted by FUSE, persistent disk mounted as shared PersistentVolume, or Filestore mounted as nfs PersistentVolume?

A

Filestore mounted as nfs PersistentVolume

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

If you have a pub/sub topic and are handling large volumes of messages, should you use a pull subscription or a push subscription?

A

pull subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True/False, GOOGLE_APPLICATION_CREDENTIALS env var can be set to an Access Token value for authorization?

A

False, GOOGLE_APPLICATION_CREDENTIALS should be set to the name of a file that contains the access token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which datastore provides high availability across regions and global consistency? Cloud SQL, Cloud Spanner, Cloud Bigtable?

A

Cloud Spanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which provides high speed reads and writes? Cloud Bigtable, Cloud Storage or BigQuery?

A

Cloud Bigtable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which is the most cost effective for 100T byte initial data migration? Partner Interconnect, Dedicated Interconnect , Transfer Appliance?

A

Transfer Appliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Data stores that offer a multi-regional location are: Cloud Storage, Memorystore, Fiirestore, Cloud SQL, Cloud Spanner

A

Cloud Storage, Firestore, Cloud Spanner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

When forwarding messages to https endpoints if you need explicit rate controls, and timeouts longer than 10 min, you should use: Pub/Sub or Cloud Tasks

A

Cloud Tasks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is the preferred way to implement URL discovery on Cloud Run

A

Treat other service URLs as configuration and pass them using environment variables

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the hierarchy of Projects, Resources, Organizations, Folders?

A

Organization -> Folders -> Projects -> Resources

24
Q

Which container solution will not charge you when not handling requests?

A

Cloud Run

25
Q

Where can CloudRun pull containers from?

A

Only from artifact registry

26
Q

Where do jobs from Cloud Run get run?

A

Cloud Scheduler

27
Q

What is the closest equivalent to EC2?

A

Compute Engine

28
Q

How can you autoscale on Compute Engine?

A

managed instance groups (MIG)

29
Q

What is the closest equivalent of S3?

A

Cloud Storage

30
Q

What is the closest equivalent of RDS?

A

Cloud SQL

31
Q

What do you use for big data analysis and interactive querying capabilities?

A

BigQuery

32
Q

What storage offerings are SQL?

A

Cloud SQL, Cloud Spanner,

33
Q

What storage offerings are no sql?

A

BigQuery, BigTable, Firestore, Firebase Realtime Database, Cloud storage

34
Q

What storage should you use for Financial analysis and prediction, IOT processing and analytics, or marketing applications?

A

Cloud BigTable

35
Q

What data store should you use for Mobile and web applications with both online and offline capabilities?

A

Firestore

36
Q

What datastore should you use for Development of apps that work across devices, Ad optimization and personalization, or Third-party payment processing?

A

Firebase Realtime Database

37
Q

What datastore do you use when you plan to use large amounts of data (more than 10TB) and need transactional consistency?

A

Cloud Spanner

38
Q
A

Cloud Spanner

39
Q

What datastore do you use if you are using large amounts of single key data. In particular, it is good for low-latency, high throughput workloads.

A

Cloud Bigtable

40
Q

How can you setup physical connection between your on-premises infrastructure, Google Cloud, and other resources?

A

Cloud Interconnect

41
Q

Which two provide a direct connection to Google Cloud’s network? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect

A

Direct Peering and Dedicated Interconnect

42
Q

Which two provide a connection to Google Cloud’s network through a partner? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect

A

Carrier Peering and Partner Interconnect

43
Q

Which two provides access to Google Workspace services, YouTube, and Google Cloud APIs using public IP addresses? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect

A

Direct Peering and Carrier Peering

44
Q

Which two provide connections use a VLAN that pipes directly into your Google Cloud environment, providing connectivity to internal IP addresses in the RFC 1918 address space? Direct Peering, Dedicated Interconnect, Carrier Peering, Partner Interconnect

A

Dedicated Interconnect and Partner Interconnect

45
Q

How do you configure private communication between VPC networks in the same project?

A

VPC Network Peering

46
Q

How do you configure private communication between VPC networks in different projects?

A

Shared VPC

47
Q

What is the closest equivalent of Route53?

A

Google Cloud DNS

48
Q

What service implements dynamic VPN that allows topology to be discovered and shared automatically, which reduces manual static route maintenance?

A

Cloud Router

49
Q

What is the lowest-cost option, used ideally for data archiving, online backup, and disaster recovery. data that you plan to access less than once a year?

A

Archive Storage

50
Q

You can use what feature in Cloud Storage to move logs to Nearline or Coldline storage classes and delete them after the required retention period has passed?

A

Object lifecycle management

51
Q

What allows instances in the subnetworks to communicate with public Google API endpoints even if the instances don’t have external IP addresses?

A

Private Google Access

52
Q

What allows resources without external IP addresses to create outbound connections to the internet?

A

Cloud NAT

53
Q

T/F - VPCs are region specific?

A

False, VPCs can be deployed across multiple regions

54
Q

If you are transferring data from Azure to GCP should you use Storage Transfer Service or Transfer Appliance

A

Storage Transfer Service, (Transfer appliance only works with on prem)

55
Q

What creates Pod-level firewall rules that determine which Pods and Services can access one another inside your cluster?

A

Network Policy