Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

2 - GCP PCA All In One Review > GCP Networkng > Flashcards

GCP Networkng Flashcards

1
Q

How can I monitor the traffic on the VPC network to see where packets are coming from?

A

Enabling flow logs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the largest network space you can have in a GC VPC?

A

/8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Will the CloudFirewall block traffic between instances in the same network?

A

Yes as the FW rules are applied at the instance level. and at the virtual network level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Will the CloudFirewall block traffic coming into the network?

A

Yes as the firewall rules are applied at the virtual network and instance level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

When you create a GCP network (VPC), will this network (VPC) span more then a single region?

A

Yes, when you create a network (VPC), it spans every region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Is a GCP network (VPC) able to span projects?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is an external IP?

A

It is an IP address available externally and is assigned to the instances network interface.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

By default the external IP address is ephemeral, what dose this mean?

A

It means the external IP address is given an public IP from the GCP global IP pool and this IP is put back in the pool once the instance is rebooted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

I have an external IP that is ephemeral when I stop and start my instance, is the external IP returned to the GCP global pool and do i get a new one on restart?

A

Yes, the address is returned to the pool and you get a new one once the VM is restarted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the two different types of static IP you can reserve?

A

regional for assigning to a instance and global that can be assigned to a load balancer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

When I create firewall rule, can I apply the rule to the entire VPC (global network) ?

A

Yes, the rule will span the entire global VPC network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

When I create firewall rule, can I apply the rule to a group of instances?

A

Yes, you can match the rule based on tags

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Is network load balancing regional or global?

A

The network load balancer is regional or multi-region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the two types of IP addresses in GCP?

A

Static and ephemeral

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

An instance can only use a static IP that has been reserved in the same?

A

Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is cloud interconnect?

A

It refers to the 3 options to connect you on-prem to GC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What options do you have to connect from on-prem to GCP.

A

Cloud VPN
Peering
Dedicated interconnect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is Dedicated interconnect?

A

you connect with google’s network at a colocation, this is an expensive option but supports upto 80 GBper sec, a single link is 10GB at a cost of 1700 per month.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

I need 50GB bandwidth to google, what is my best option?

A

Dedicated interconect, this is where you connect to a colocation, colocation has a CP peering edge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

With Dedicated interconnect, do you pay egress fees?

A

Yes, but at a discount, upto 50%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

With Dedicated interconenct can I have it connect to my VPC or Google over all for say G-Suit?

A

Direct interconnect only supports connecting to a VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is Peering?

A

Peering connects you with google network so you can call the google API and services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Will peering connect to the internet

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the peering speed?

A

10GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What speed is supported by cloud VPN?

A

1.5GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

When using CloudVPN, what options do I have to make it faster?

A

Use a second VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

For CloudVPN what is the protocal?

A

IPSEC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

For CloudVPN what key exchange is suported?

A

IKE1v1 and IKEv2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

With CloudVPN, is client to site supported?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

With CloudVPN is dynamic routs supported?

A

Yes use CloudRouter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

For CloudVPN what is the SLA?

A

99.9%

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Is a VPC a global or regional resource?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Is a subnet a regional or global resource?

A

Regional

34
Q

Is a subnet a a zone bound resource?

A

No it spans zones within a region.

35
Q

Is it possible to share a VPC between projects?

A

Yes

36
Q

Is there a instance limit on a VPC?

A

Yes 7000 instances, you can use a second VPC.

37
Q

In a VPC can I use unicast or broadcast traffic?

A

No.

38
Q

Can I convert manual addressing to automatic?

A

No you can only go from auto to manual

39
Q

is IpPvs supported?

A

no, but ipv6 can be used to reach the LB for resources in the network, this also include the LB for app engine.

40
Q

what are network tags?

A

The primary method of segmenting traffic for instances.

41
Q

Is the firewall regional or attached to the global VPC?

A

Attached to the global VPC, this mean when you setup a firewall rule you attached it to a VPC and it is global.

42
Q

Do you define firewall rules at the subnet or instance level?

A

Both instance and subnet level

43
Q

Is all ingress traffic denied by default?

A

Yes

44
Q

Is all egress traffic denied by default?

A

No

45
Q

Are firewall rules prioritized?

A

Yes, rules are evaluated lowest number first.

46
Q

When you create a VPC what default firewall rules do you get when the VPC is using automatic subnet mode creation?

A

-allow-icmp 65534
-allow-internal 65534
-allow-rdp 65534
-allow-ssh 65534
-deny-all-ingres 65535
-allow-all-egress 65535

47
Q

Are all default rules asigned a low or high priority number?

A

Most all rules get 65K at top end, http and https get 1K at ko end.

48
Q

When you create a VPC with two subnets, can VM 1 in subnet 1 ping VM 2 in subnet 2?

A

Yes, by default you get a default firewall rule to enable traffic that is local between subnets.

49
Q

What is a router?

A

It defines where a packet is sent once it leaves the VM?

50
Q

How would i take two VM and route all traffic to a proxy?

A

Define a route with a tag and asigne the tag to the VM’s

51
Q

For routes what are my next hop options

A

-default internet gateway
- VPN tunnel
-IP
-Instance

52
Q

Are routes global?

A

Yes, they are attached to a VPC (global)

53
Q

What is a host project?

A

I refers to a project that will host a VPC for other projects.

54
Q

What is a service project?

A

It refers to a project that is using a host project VP.

55
Q

What is a standalone project?

A

It is a project that is not using a shared VPC

56
Q

Can I share a hosted projects outside the orgnization?

A

No

57
Q

Can i link a service project with many host projects?

A

No only one host project.

58
Q

Van a project be both a service and host project?

A

No

59
Q

When I create a VPC subnet, is the subnet tied to a zone?

A

No it is independent of the zone, when you deploy an instance, it is at this time you defne in what zone the instance and disk will live.

60
Q

I created a VPC with auto subnet mode, I have two subnets with an instance in each, will I be able to ping without adding a firewall rule?

A

Yes, the following rules are created,
-allow-icmp 65534
-allow-internal 65534
-allow-rdp 65534
-allow-ssh 65534
-deny-all-ingres 65535
-allow-all-egress 65535

61
Q

I created a VPC with custom subnet mode, I have two subnets with an instance in each, will I be able to ping without adding a firewall rule?

A

No, no firewall rules are created.

62
Q

What is a custom subnet?

A

Where you create the subnet and manually enter the required firewall rules.

63
Q

When you create a VPC what default routes do you get?

A

-Default gateway
-A rule to any subnets you create as part of the VPC

64
Q

What are the filters you can use on a firewall rule?

A

-Source port
-Dest port
-Source address
-Dest address
-Portocal

65
Q

How can you group instances so the firewall rule sis applied, is it a label?

A

No, it is a tag, tags are used for networking.

66
Q

I have two VPC and I want to connect both, what options do I have?

A

-CloudVPN
-VPC Peering

67
Q

I have GKE and I want to connect its network to another VPV, what is my best option?

A

VPC peering can be used for this.

68
Q

I have App engine flexible and I want to connect its network to another VPV, what is my best option?

A

VPC peering can be used for this.

69
Q

For VPC peering can i have overlapping subnet ranges?

A

No

70
Q

I have a number of firewall rules and I wnat to see how they effect traffic, how cna i do this?

A

Use firewall logging.

71
Q

I ahve firewall logging turned on, where can I send the logs?

A

Stackdriver
pub/sub
BigQuery

72
Q

I have an external IP that is ephemeral when I reboot my instance, is the external IP returned to the GCP global pool and do I get a new one on restart?

A

The IP is not given back to the pool.

73
Q

I have a network load balancer and instances are not receiving traffic, what would I need to do?

A

Open firewall for the health check from specific ports found in network LB documentation.

74
Q

What protocols are supported by the network load balancer?

A

SSL proxy and TCP

75
Q

Has the network load balancer got sessionAfinity feature?

A

Yes, off by default.

76
Q

What is the Network loadbalancer?

A

It is an L4 LB supporting SSL proxy and TCP, it is single or multi-region.

77
Q

What is the google load balancer?

A

It is an L7 LB and supports only multi-region and HTTP and HTTP(S).

78
Q

Is the network load balancer, internal or external facing?

A

Both, internal between instances and external to receive traffic from the internet.

79
Q

Is the GCP load balancer global?

A

Global, unlike AWS, the load balancer is a global load balancer receiving traffic and distributing it to one or more regional globally

80
Q

Can you use the GCP load balancer for internal VM?

A

No, it is an internet only facing LB

2 - GCP PCA All In One Review (19 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions