Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

GCP PCA > GCP Professional Cloud Architect > Flashcards

GCP Professional Cloud Architect Flashcards

1
Q

What are the General Purpose Machine Families?

A

E2, N2, N2D, N1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the benefits of general purpose machine types in GCP compute?

A

Best price to performance ratio

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the Memory Optimized Machine Families?

A

M2 and M1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the compute optimized machine family designations

A

C2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How is the compute engine naming convention broken down?

A

e2-standard-2

Machine Type Family-Type of Workload-Number of CPU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the two types of compute engine Images?

A

Public (Maintained by google or open source sources)

Custom (created by you for your projects)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

T or F:

Static IP can be switched to another VM instance in same project

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Does a static IP address remain attached to a VM if you stop the instance?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

T or F:

Are are billed for an Static IP when you are NOT using it?

A

Yes/True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are ways to reduce the number of steps for creating a vm instances setting up a HTTP Server?

A

Startup Scripts

Instance Template

Custom Image

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

After Creating an Instance Template, can you update this?

A

No, you need to copy it, and then modify what you need, save this as the new template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which of these is the preferred option to reduce the launch time of a VM instance?

  • Startup Script
  • Custom Image
A

Custom Image. This does not need to run any installation and would be built from a VM that already has been fully configured.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

How can you avoid specifying all the VM instance details every time you create a VM?

A

Create an Instance Template

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does 2 in the Machine Type e2-standard-2 represent?

A

2 vCPU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the prerequisites to be able to create a VM instance?

A
  1. Project
  2. Billing Account
  3. Compute Engines APIs should be enabled
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How do you get dedicated instances that are not shared with other customers?

A

β€œSole Tenant nodes” in the compute engine console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How do you automate VM OS patching across many machines?

A

VM Manager/ OS Patch Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How to prevent internet to a VM

A

Do not assign an external IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are instance groups?

A

Group of VM instances managed as a single entity. Manage similar groups of VMs having a similar life cycle as one unit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are the two types of instance groups?

A

Managed: Identical VMs created using template. Has auto scaling, auto healing, and managed releases

Unmanaged: Different configuration for VMs in same group: Does not offer previous features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Managed Instance Groups have what important features?

A

On instance Crash, MIG launches another instance

Auto scaling instance numbers

Add a LB to distrubute load

Create instances in multiple zones using Regional MIGs

Release new application versions without downtime

Rolling updates

Canary Deployment: Test new version with a group of instances before releasing it across all instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are Auto Scaling metrics?

A

CPU utilization

Load Balancer Utilization

Any other metric from Stack Driver

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the Cool-down period in Auto Scaling?

A

How long to wait before looking at auto scaling metrics again

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are Scale In Controls?

A

Prevent sudden drop in number of VM instances

β€œdon’t scale in by more that 10% or 3 instances in 5 minutes”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What is Autohealing?

A

Configure a health check with initial delay, before looking in on whether an instance needs to be replaced or not.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is the difference between stateless and stateful MIG?

A

Stateless provides serving and batch processing.

Stateful is persistent data or configurations such as DBs or legacy apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

In updating MIG, what are the update tempos?

A

Update Immediately (Proactive)

Update when Instance group is resized (Opportunistic/Selective)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the Rolling Restart/Replace Upgrade Option in MIGs?

A

No change in template but replace/restart existing VMs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Can a MIG contain VMs created with different machine types?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Cloud Load Balancing has what important features?

A
  • Health check, route to healthy instances
  • Auto Scaling based on demand
  • Global Load Balancing with Single Anycast IP
  • Internal Load Balancing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is a restriction of UDP load balancers?

A

They cannot be multi-regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What are the 3 important configurations for Cloud Load Balancers?

A

What is the backend?

What are the host and path rules?

What is different then?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Does a Cloud Load Balancer require a certificate?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

In Cloud Load Balancing, what is SSL Termination/Offloading?

A

If you’re using layer seven, this has HTTPS going to the LB, but continuing the request in HTTP to the backend service over Google internal network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

In Cloud Load Balancing, what is TLS Termination/Offloading?

A

If you’re using layer four, and you’re using security

This layer 4 traffic switches to regular traffic to the backend instead of keeping TLS the whole path.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

In Cloud Load Balancer selection, if you need SSL offloading, what would you select?

A

SSL Proxy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

In Cloud LB selection, if it’s global, or IPv6, what would you need to select?

A

TCP Proxy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

In Cloud LB selection, if you need to preserve client IP addresses from end user, what would you select?

A

Network Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

In Cloud LB External HTTP features, what is the difference between a Proxy and a Pass Through?

A

Proxy load balancers get the request from a client and they transform it or make changes, sending a different request to the backend.

Pass-through, whatever request comes from the end user is sent out to the backend. So the client will be able to see all the details of the request, which is sent by the client as is.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

In Cloud LB, what ports can External HTTP load balance on?

A

HTTP: 80 or 8080
HTTPS: 443

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

In Cloud Load balancing, what type of traffic is an SSL Proxy designed for?

A

Global, External, TCP traffic and an SSL offload

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

In Cloud LB, what are the two main points of an External Network TCP/UDP LB?

A

Regional, External, TCP or UDP, PASS THROUGH, and can listen on any port for services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

In Cloud LB, what is a URL Map?

A

Designate URL specific format to route to specific back end services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

In Cloud LB, if you want to use global routing, what is needed?

A

Premium Networking Tier

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

In Cloud LB, Standard Tier Networking, what is specific to the front end rule?

A

The IP address is going to be regional, only backends

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What are the factors to consider when mentioning β€œScalability?”

A

Growth in:
Users
Traffic,
Data Size

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is Vertical Scaling?

A

Deploying an application/database to bigger instance. Larger resources per individual instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is Horizontal Scaling?

A

Deploying multiple instances of applications/DBs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What dependency does Horizontal Scaling require?

A

Likely to need additional infrastructure such as Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

In Compute Engine, what is live migration?

A

Running instances is migrated to another host in the same zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

In Compute Engine Live Migration, what is SUPPORTED?

A

Supported for instances with local SSDs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

In Compute Engine Live Migration, what is UNSUPPORTED?

A

Not supported for GPUs and preemptible instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

In Compute Engine Live Migration, what is Availability Policy β€œOn Host Maintenance?”

A

What should happen during periodic infra maintenance?

Migrate or Terminate?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

In Compute Engine Features: GPUs are not supported on what machine types?

A

Shared Core or Mem Optimized machine types

Also cannot do Live Migration with a GPU attached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

What are Sustained Use Discounts?

A

Automatic discounts for running VM instances for a significant portion of the billing month.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What does not apply to Sustained Use Discounts?

A

RESTRICTION: Does NOT apply on certain machine types (example: E2 and A2)

RESTRICTION: Does NOT apply to VMs created by App Engine flexible and Dataflow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What are Committed use discounts?

A

Workloads with predictable resource needs. Commit for 1 or 3 years. Up to 70% based on machine time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

What do Committed Use Discounts not apply to?

A

Does NOT apply to VMs created by App Engine flexible
and Dataflow

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

What is a Preemptible VM

A

Short-lived cheaper (up to 80%) compute instances.

Max time you can run one is 24 hours.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What are restrictions on Preemptible Instances?

A

NOT always available
NO SLA and CANNOT be migrated to regular VMs
NO Automatic Restarts
Free Tier credits not applicable

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What are Spot VMs?

A

Latest Versions of Preemptible VMs.

Key difference is that Spot VM does not have a maximum run time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What is GCloud?

A

Command line interface to interact with Google Cloud Resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What Services have specific CLI tools?

A

Cloud Storage -gsutil
Cloud BigQuery - bq
Cloud Bigtable - cbt
Kubernetes - kubectl

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is the structure of the glcoud command structure?

A

gcloud GROUP SUBGROUP ACTION

EX: gcloud compute instances list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

What are the important things to remember about using Cloud Shell?

A

Cloud Shell is backed by a VM instance (automatically provisioned by
Google Cloud when you launch Cloud Shell)

5 GB of free persistent disk storage is provided as your $HOME directory

Prepackaged with latest version of Cloud SDK, Docker etc

(Remember) Files in your home directory persist between sessions, instance is terminated if you are inactive for more than 20 minutes

After 120 days of inactivity, even your $HOME directory is deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What is IAAS

A

Infrastructure as a service.

Only using GCP for infrastructure.

You are responsible for:
Application Code and Runtime
Configuring load balancing
Auto scaling
OS upgrades and patches
Availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

What is PAAS?

A

Platform as a Service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

In PAAS, what is the client responsible for?

A

Client is responsible for:

Configuration (of Application and Services)

Application code (if needed)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

In PAAS, what is the provider responsible for?

A

OS (incl. upgrades and patches)

Application Runtime

Auto scaling

Availability & Load balancing etc..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

What is App Engine used for?

A

Build highly scalable applications on a fully managed platform
using open and familiar languages and tools

PaaS, CaaS, Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

What is Cloud Functions used for?

A

Build event-driven applications using simple, single-purpose
functions.

FaaS, Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

What is Cloud Run used for?

A

Develop and deploy highly scalable containerized applications.

Does NOT need a cluster!

Caas (Serverless)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What languages does App Engine Support?

A

Go, Java, .NET, Node.js, PHP, Python, and Ruby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

What features does App Engine have?

A

Auto LB

Auto Scale

Managed Platform updates

Application health Monitoring

Application versioning

Traffic Splitting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What are the different App Engine Environments?

A

Standard: Apps run in language specific sandboxes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
76
Q

What are the App Engine Restrictions on Java, Python, PHP, and Go on V1?

A

V1: OLD Versions

Restricted network access

Only allow white listed extensions and libraries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
77
Q

What are the App Engine restrictions on languages in V2?

A

V2: Newer Versions

No restrictions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
78
Q

What is App Engine Flexible?

A
  • Application instances run within Docker containers

Makes use of Compute Engine virtual machines

Support ANY runtime (with built-in support for Python, Java, Node.js, Go,
Ruby, PHP, or .NET)

Provides access to background processes and local disks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
79
Q

In App Engine how many applications can you have per project?

A

One app per project

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
80
Q

In App Engine, what does the Application Component Hierarchy contain?

A

Application > Service > Version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
81
Q

In App Engine, can you have multiple versions coexist in the same application structure?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
82
Q

In App Engine, can you create traffic rules to dictate how much traffic goes to what version of service?

A

Yes, you can split this up in order to test out V2 of an application.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
83
Q

In App Engine, can your Scaling go to zero?

A

On Standard, Yes

On Flexible, No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
84
Q

In App Engine, which startup time is faster? Standard or Flexible?

A

Standard is Faster in instance startup time.

Standard = Seconds

Flexible = Minutes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
85
Q

In App Engine, which version supports Rapid Scaling?

Standard or Flexible?

A

Standard supports rapid scaling, this is due to the instance start-up time being in seconds instead of minutes as in Flexible.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
86
Q

In App Engine Flexible, what kind of disks are created?

A

Ephemeral Disks, not permanent storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
87
Q

In App Engine, which version (Standard or Flexible) supports SSH for debugging?

A

Flexible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
88
Q

In App Engine, what is the default way to split traffic?

A

By IP Address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
89
Q

In App Engine, what are the 3 ways to split traffic?

A

IP Address

Random

Cookie

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
90
Q

When working with G Kubernetes Engine, what is the command line prefix?

A

gcloud container

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
91
Q

In GKE, what is the command to expose a cluster to the outside world?

A

kubectl expose deployment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
92
Q

What does GKE create in the background when you create a cluster?

A

Global Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
93
Q

In GKE, what is the difference between Services, and Ingress?

A

Services are sets of pods with network endpoints and can be used for discovery and LB.

Ingresses are collections of rules for routing external HTTP(S) traffic to Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
94
Q

In GKE, where do you configure access to resources like databases?

A

kubectl create configmap

Configmap is where these are stored

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
95
Q

In GKE how do you add a password configuration?

A

kubectl create secret

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
96
Q

In GKE, what is the Master Node’s (Control Plane) function?

A

It’s an API server and handles all communication for K8s cluster from nodes, and outside requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
97
Q

In GKE, what component functions make a Master Node?

A

API Server

Scheduler (deciding placement of pods)

Control Manager - Manages deployments and replica sets

etcd - Distributed database storing the cluster state

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
98
Q

In GKE what are worker nodes?

A

Components that run your pods

Kubelets, manages communication with the master node

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
99
Q

in GKE, what are single zone clusters?

A

Single Zone - Single control plane, nodes running in the same zone.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
100
Q

In GKE, what are Multi-zonal clusters?

A

Multi-zonal - Single contro lplane but noeds are running in multiple zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
101
Q

In GKE, what are Regional Clusters?

A

Regional cluster - replicas of the control pane run in multiple zones of a given region. Nodes also run in same zones where the control plane runs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
102
Q

In GKE, what are Private Clusters?

A

Private Cluster - VPC native cluster nodes only ahve internal IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
103
Q

In GKE, what Alpha Clusters?

A

Alpha Clusters - Created with alpha APIs with early features. used to test new K8s Features

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
104
Q

In GKE what is a pod?

A

It’s the smallest deployable unit in kubernetes

Pod contains one or more containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
105
Q

In GKE, what are the resources all containers in a pod share?

A

Network

Storage

IP address

Ports

Volumes (Shared persistent disks)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
106
Q

IF A Pod status is β€œUnknown” what does that mean?

A

The Master is unable to find out the status of the pod

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
107
Q

In GKE, what is a deployment?

A

Created for each microservice. These represent a microservice with all its releases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
108
Q

In GKE, what is a Replica Set?

A

Ensures that specific number of pods are running for a specific microservice version

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
109
Q

In GKE, what is an ingress?

A

The recommended approach for providing external access to services in the cluster.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
110
Q

In GKE, what does an ingress provide?

A

Provides Load Balanacing

Provides SSL Termination

Control Traffic by defining rules on the ingress resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
111
Q

In GKE, what is a Container Registry?

A

You can secure your container images.

Analyze for vulnerabilities and enforce deployment policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
112
Q

If you want to keep your costs low and optimize your GKE implementation, what should you consider?

A

Consider Preemptible VMs,

Appropriate region,

Committed use discounts.

E2 machine types are cheaper than N1.

Choose the right environment to fit your workload type (Use
multiple node pools if needed).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
113
Q

In GKE if you want an efficient, completely auto scaling GKE solution, what should you consider?

A

Configure Horizontal Pod Autoscaler for deployments and
Cluster Autoscaler for node pools

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
114
Q

In GKE if you want to execute untrusted third-party
code in Kubernetes Cluster, what should you do?

A

Create a new node pool with GKE Sandbox. Deploy
untrused code to Sandbox node pool.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
115
Q

In GKE, if your pod stays in β€œpending” status, what is the likely cause?

A

Probably Pod cannot be scheduled
onto a node(insufficient resources)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
116
Q

In GKE, if my pod stays waiting What is the likely cause?

A

Most probably failure to pull the docker image.

Permissions to pull or network access to the image repository

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
117
Q

In GKE, if a pod becomes unhealthy. Which of these will identify and replace the pod?

A

ReplicaSet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
118
Q

In GKE, How do we store sensitive configuration (passwords) in Kubernetes?

A

Secrets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
119
Q

If you want to execute code when an event happens (Google Pub/Sub), what service would you use?

A

Cloud Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
120
Q

In Cloud Functions, what are you paying for when running the code?

A

Pay only for what you use
Number of invocations
Compute time of the invocations
Memory and CPU provisioned

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
121
Q

In Cloud Functions what is the default Time out?

A

60 minutes
1 Hour
3600 seconds

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
122
Q

In Cloud Functions, what are events triggered from?

A

Cloud Storage

Cloud Pub/Sub

HTTP POST/GET/DELETE/PUT/OPTIONS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
123
Q

What kind of scaling do Cloud Functions do?

A

Horizontal Scaling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
124
Q

What kind of work are Cloud Functions not ideal for?

A

Not ideal for long running processes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
125
Q

What is Cloud Run?

A

β€œContainer to Production in Seconds”

Built on top of an open standard - Knative

Fully managed serverless platform for containerized applications

ZERO infrastructure management

Pay-per-use (For used CPU, Memory, Requests and Networking

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
126
Q

What does Cloud Run for Anthos provide?

A

Provides the ability to run K8 clusters anywhere.

Cloud

Multi-Cloud

On Premises

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
127
Q

In Cloud Functions Gen 1 how many requests can a Function Instance handle?

A

One at a time.

This means a new function instance will be spun up to handle each new request

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
128
Q

In Cloud Functions Gen 2, how many request can a single Function Instance handle?

A

Can handle multiple requests at the same time.

Max = 1000 (One Thousand)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
129
Q

What are some best practices with Cloud Functions?

A

To avoid cold starts, set min no of instances (increases cost)

Minimize dependencies (loading dependencies increases initialization time)

Configure max no of instances (protect from abnormally high request
levels)

Use Cloud Endpoints (or Apigee or API gateway) for versioning

Use Cloud Run (& Cloud Functions gen 2) revisions for safer releases:

Configure which revisions should receive traffic and how much

You can rollback to a previous revision if needed
Use Secret Manager to securely store secrets (ex: API keys)

Use Individual Service Accounts for each function

Grant roles/cloudfunctions.invoker role to invoke a cloud function

Manage dependencies using your language specific tool (npm, pip,..)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
130
Q

What is β€œData in Use” state?

A

Active data processed in non persistent state, such as data in RAM.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
131
Q

What is Symmetric Encryption?

A

Encryption algorithms use the same key for encryption and decryption

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
132
Q

What is Cloud KMS?

A

Key Management Service

Create and manage cryptographic keys, symmetric and asymmetric

Control their use in your applications and GCP service

Allowed to store keys created on premises.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
133
Q

What is the difference between Block Storage and File Storage?

A

Block storage is like your HDD.

File storage are for files shared by multiple virtual servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
134
Q

Block storage is also known as?

A

Persistent Disk, network block storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
135
Q

What are the two different versions of Persistent Storage?

A

Zonal: Data replicated in one zone

Regional: Data Replicated in Multiple Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
136
Q

What are the two versions of Block Storage?

A

Persistent Disks

Local SSDs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
137
Q

With Local SSDs, what are two performance selection recommendations?

A

NVMe-enabled

Multi-queue SCSI

138
Q

What are the disadvantages of Local SSDs?

A

Ephemeral storage

Cannot detach and attach to another VM

139
Q

What is a Persistent Disk (PD)?

A

Attached to VM as a network drive

Lifecycle Separate from VM instance

I/O Speed Lower (network latency)

Snapshots Supported

Permanent storage

140
Q

What are the different types of Persistent Disk (PD)?

A

PD Standard - HDD

PD Balanced - SSD

PD SSD - SSD

141
Q

What is Sequential IOPS?

A

Big Data Workloads are needing sequential reads, and not random reads.

142
Q

What are the steps to mounting a Persistent Disk on a VM?

A

Attach Disk to VM

Format Disk

Mount the Disk

143
Q

What is the difference between a Machine Image and an Image

A

An image contains an operating system (boot persistent disk)

Machine image is everything contained to create a VM instance. Config, metadata, permissions, data from disks

144
Q

What is Cloud Filestore?

A

Shared Cloud File Storage

Suitable for high perf workloads

145
Q

True or False:

Cloud Storage provides REST API acces to modify objects?

146
Q

What are the storage classes in Cloud Storage?

A

Standard - Frequent usage

Nearline - Read or Mod once a month

Coldline - Read or mod once a quarter

Archive - Less than once a year

147
Q

In Cloud Storage, what is Object Lifecycle Management?

A

Moves files based on set conditions to different types of storage classes to reduce costs

148
Q

In Cloud Storage, Object Lifecycle Management, what direction can you migrate objects?

A

Regional > Nearline > Coldline > Archive

Only can move in the direction of longer term storage classes.

149
Q

In Cloud storage, how can you meet compliance needs?

A

Bucket Lock:

Create a retention policy.

150
Q

What are limitations once Bucket Lock retention policy is set?

A

Cannot remove retention policy

Cannot reduce retention period

Cannot delete the bucket unless all objects in bucket have age greater that retention period

151
Q

What is the Storage Transfer Service?

A

Petabyte scale data transfers from on-premises, or other hyper-scalers. Fault tolerant.

152
Q

What is a Transfer Appliance?

A

It’s a custom server delivered. Use when your data size is greater than 20TB.

153
Q

What is Cloud Storage FUSE?

A

Enables file system access to cloud storage.

Allows mounting of cloud storage buckets as file systems in Mac and Linux

154
Q

In Cloud Storage, if you wanted to transfer 2 TB of data from Azure Storage to GC Storage, what would you use?

A

Use Cloud Storage Transfer Service.

155
Q

In Cloud Storage, if you have regulatory compliance, and an object should not be modified for 2 years, what would you use?

A

Configure and lock Data Retention Policy

156
Q

In Cloud storage, what are Cache-Control, Content-Disposition, and Content-Type are examples of?

A

Fixed-key metadata

157
Q

TRUE or FALSE: Cloud Storage is serverless and auto-scaling.

158
Q

TRUE or FALSE: Cloud Storage supports partial updates for an object

159
Q

Which Cloud Storage - Storage Class would you recommended for data expected to be accessed once in a quarter?

A

Coldline Storage

160
Q

Which feature of Cloud storage can be used to avoid accidental deletion of files?

A

Object Versioning

161
Q

How do you provide time-limited read or write access to objects in a Cloud Storage Bucket?

A

Signed URL

162
Q

In Cloud IAM, what are Identities?

A

A GCP User (Google Account or Externally Authenticated User)

A Group of GCP Users

An Application running in GCP

An Application running in your data center

Unauthenticated users

163
Q

In Cloud IAM, what are Roles?

A

A set of permissions (to perform specific actions on specific resources)

Roles do NOT know about members. It is all about permissions!

164
Q

In IAM, how do you assign permissions to a member?

A

A Policy is assigned (bound/bind) a role to a member

165
Q

What are IAM Roles?

A

Permissions

Perform some set of actions on a set of resources

166
Q

What are the three types of Basic Roles in IAM?

A

Viewer

Editor

Owner

167
Q

In IAM policy, how are roles assigned to users?

A

IAM Policy Documents

168
Q

In IAM, how is member type identified?

A

There is a prefix, eg:

user, serviceaccount, group, or domain

169
Q

What are the different Service account types in IAM?

A

Default Service Account

User Managed

Google Managed Service Account

170
Q

What are the three different type of credentials in IAM?

A

OAuth 2.0 access tokens
OpenID Connect ID tokens
Json Web Tokens (JWTs)

171
Q

What is an Access Control List?

A

Define who has access to your buckets and objects, as well as what level of access they have.

172
Q

Ho are IAM permissions and ACL permissions different when it comes to Storage buckets?

A

IAM permissions apply to all objects within the bucket

ACLs can be customized to specific accesses to different objects

173
Q

In IAM, if you wanted an application on prem to access cloud storage, how would you set this up?

A

Service account with a User Managed Key

174
Q

IN IAM, if you wanted to allow a user limited time to access to your objects, what would you use?

A

Signed URL

175
Q

In IAM, if you needed to customize access to a subset of objects in a bucket, how would you set this up?

A

Use an Access Control List

176
Q

In Databases, what is RPO

A

Recovery Point Objective

Max acceptable period of data loss

177
Q

In Databases, what is RTO?

A

Recovery Time Objective

Acceptable down time

178
Q

In Database Consistency, what are the different types of consistency?

A

Strong Consistency - Synchronous

Eventual Consistency - Asynchronous (a little lag)

Read-after-Write Consistency - Inserts immediately available. Updates have Eventual Const.

179
Q

In Databases, what is a Hot Standby?

A

Automatically synchronize data
Have a standby ready to pick up load
Use automatic failover from master to standby

180
Q

In Databases, what is a Warm Standby?

A

Automatically synchronize data
Have a standby with minimum infrastructure
Scale it up when a failure happens

181
Q

In Databases, with Reporting and Analytics Applications, what options increase performance of the DB?

A

Vertically scale the database - increase CPU and memory

Create a database cluster (Distribute the database) -
Typically expensive

Create read replicas - Run read only applications against read replicas

182
Q

In databases, what is ACID?

A

Atomic
Consistency
Isolated
Durable

ACID database transaction model ensures that a performed transaction is always consistent.

183
Q

In Databases, what is BASE?

A

Basically
Available
Soft State
Eventually Consistent

184
Q

What are the different categories of Databases?

A

OLTP - Online Trans. Process
OLAP - Online Analytical Proc
Document
Key Value
Graph
In Memory

185
Q

In Databases, what is the main difference between OLTP and OLAP databases?

A

OLTP DBs use row storage

OLAP DBs use Columnar Storage

186
Q

In Databases, what does NoSQL stand for?

A

Not only SQL

Provides flexible schema

187
Q

What is Cloud Firestore?

A

Managed serverless NoSQL document DB.

ACID, SQL-like queries

Small to Medium DBs

188
Q

What is Cloud BigTable?

A

Managed, scalable, NoSQL wide column DB

NOT serverless, need instance

189
Q

What is Cloud Spanner?

A

Relational DB with unlimited scale (multiple PBs) and 99.999% availability for
global applications with horizontal scaling

190
Q

What is BigQuery?

A

Relational OLAP DB, Columnar storage with predefined schema. Datawarehousing &
BigData workloads

191
Q

What is Cloud Memorystore?

A

In Memory DBs and Caches, needing microseconds of responses

192
Q

What is Cloud Dataflow?

A

Used to export data from BigTable to CloudStorage

193
Q

In Databases, does Cloud Spanner offer read replicas?

A

No, scales horizontally for reads and writes.

Cloud SQL provides an option for read replicas

194
Q

Which NoSQL Database allows you to create multiple indexes on a table?

A

Cloud Datastore/Firestore

195
Q

In Networking, what is the Cloud VPC?

A

Virtual isolated private network in GCP

196
Q

In Networking, can a VPC contain subnets in more than one region?

A

Yes.

These are global resources

197
Q

In a VPC, how do you separate public resources from private resources?

A

Create separate Subnets

198
Q

In VPCs, what is the differences between Auto and Custom mode?

A

Auto: Subnets auto-created in each region

Custom: No subnets auto-created

199
Q

What is a CIDR Block?

A

Classless Inter-Domain Routing Blocks

Consists of a starting IP address, and a range

200
Q

Are firewall rules stateful or stateless?

A

Stateful.

If incoming is allowed, outgoing is automatically allowed.

201
Q

What are the two lowest default implied Firewall rules?

A

Allow all egress

Deny all ingress

202
Q

What are the Default VPC’s four additional firewall rules?

A

Allow incoming traffic from VM instances in same network (default-allow-internal)

Allow Incoming TCP traffic on port 22 (SSH) default-allow-ssh

Allow Incoming TCP traffic on port 3389 (RDP) default-allow-rdp

Allow Incoming ICMP from any source on the network default-allow-icmp

203
Q

How would your organization’s multiple project resources be able to talk to other?

A

Create a Shared VPC

204
Q

What is VPC Peering

A

Allows connection of VPC networks across different organizations.

205
Q

What option would you enable on a subnet to allow VM’s in a subnet to connect to Google APIs using private IPs?

A

Enable Private Google Access

206
Q

True or False:

Cloud Monitoring Workspace can monitor GCP projects, and AWS accounts.

207
Q

In Cloud Monitoring Virtual Machines, what are the monitored default metrics?

A

CPU

Disk Traffic

Network Traffic

Uptime Confirmation

208
Q

What is Cloud Logging?

A

Real time log management and analysis tool

Allows to store, search, analyze and alert on massive volume of data

Exabyte scale, fully managed service

209
Q

In Cloud Logging, how would you set up to ingest logs from on-premises?

A

Use Cloud Logging API

210
Q

In Cloud Logging, what is the Access Transparency Log?

A

Captures Actions performed by GCP team on your content (NOT supported by all services):

ONLY for organizations with Gold support level & above

211
Q

What are Cloud Audit Logs?

A

Logs of who did what, when, and where.

212
Q

What are the types of Cloud Audit Logs?

A

Types of Audit Logs:

Admin
Data Access
System Event
Policy Denied

213
Q

What are the two types of Log Buckets?

A

_Required: Holds Admin activity, System Events &
Access Transparency Logs (retained for 400 days)

Cannot delete or change retention policy on bucket

_Default: All other Logs (30 Days)

Cannot delete

Can edit retention settings

214
Q

What is Cloud Trace?

A

Distributed tracing system for GCP: Collect latency data from supported Google Cloud Services.

215
Q

What is Cloud Debugger?

A

Capture state of a running application and inspect the state of the application directly in the GCP environment

Take snapshots of variables and call stack

216
Q

What is Cloud Profiler?

A

How to identify performance bottlenecks in production

Statistical, low-overhead profiler

Continuously gathers CPU and Memory usage from production systems

Connect profiling data with application source code

Two major components:
Profiling agent (collects profiling information)

Profiler interface (visualization

217
Q

What is Error Reporting?

A

Real-time exception monitoring:

Aggregates and displays errors reported from cloud services (using stack
traces)

Centralized Error Management console

218
Q

What would you use Cloud Trace for?

A

You need to trace a request across multiple microservices

219
Q

In GCP, what is the organizational resource hierarchy?

A

Org > Folders > Projects > Resources

220
Q

In Billing, what are the two export options to review billing information in depth?

A

Big Query

Cloud Storage

221
Q

In IAM, what is a good practice with sensitive operations?

A

Have separation of duties, requiring two people to work on the task.

222
Q

In IAM, what is Corporate Directory Federation? Google Cloud Directory Sync?

A

Federate Cloud Identity or google workspace with your external identity provider. AD/Azure AD, etc

223
Q

What is an Organization Policy Service?

A

Not IAM, however, a policy that dictates the organization constraints and permissions

224
Q

What does Org Policy focus on?

A

Focuses on the β€œwhat” can be done on specific resources

225
Q

What level can IAM policy be set?

A

Any level.

Policy is inherited from the above level.

226
Q

What are the two Cloud Big Query Roles?

A

Admin

Data Owner

Data Editor

Data Viewer

Job User

User

227
Q

In IAM , you want to give permanent access to a sub set of objects in cloud Storage Bucket?

228
Q

In, IAM, yo uwant to give access to the entire bucket in Cloud Storage?

A

Use IAM Role

229
Q

If you want to provide limited time access to a specific object in Cloud Storage Bucket, what would you use?

A

Create a Signed URL

230
Q

In IAM, if you want to give access to a set of resources to your dev team?

A

Create a Group with your development team as members. Bind correct Predefined Roles to this group.

231
Q

With SSHing into Linux VMs, what are you three options?

A
  1. Console SSH Button - Ephemeral SSH keypair creation
  2. Gcloud - gcloud compute ssh
  3. Use custom SSH keys. Meta data managed or OS login profile
232
Q

When troubleshooting VM start up, what are the common things to check?

A
  1. Quota Errors
  2. Is the Boot Disk Full?
  3. Check Serial Port output
  4. Does your disk have a valid file system?
233
Q

When moving VMs between zones in the same region, what are the known restrictions?

A

Cannot move:

  1. Instances that are part of a MIG
  2. Instances attached with Local SSD
  3. Instances in Terminated status
  4. Moving across regions
234
Q

If you have to move a VM across different Regions, what would your steps be?

A
  1. Create snapshot of persistent Disks
  2. Use snapshot and create in new zone
  3. Create new instance in the destination zone
235
Q

What does Pub/Sub do?

A

Logging service that picks up logging for processing when ready

Advantages:

Decoupling: Publisher (Apps) don’t care about who is listening

Availability: Publisher (Apps) up even if a subscriber (Logging Service) is down

Scalability: Scale consumer instances (Logging Service) under high load

Durability: Message is not lost even if subscriber (Logging Service) is down

236
Q

True or False:

Pub/Sub auto scales based on usage?

237
Q

What is Pub/Sub’s primary use case?

A

Event ingestion and deliver for streaming analytics pipeline.

238
Q

In Pub/Sub, what is the publisher?

A

Sender of a message.

Sent by making HTTPS requests

239
Q

In Pub/Sub, what is the Subscriber?

A

Receiver of messages

240
Q

What kind of Subscribers are there in Pub/Sub?

A

Pull - Subscriber pulls the messages when ready

Push - Messages are sent to subscribers. HTTPS post sent to webhooks

241
Q

In Pub/Sub, what is dead lettering?

A

Configuration of max attempts to deliver a message. When this is hit, the message is republished to the specific dead letter topic.

242
Q

What is Pub/Sub Lite?

A

Zonal Messaging service optimized for cost.

243
Q

In Pub/Sub, what can you add to enable message de-duplication?

A

Add Dataflow.

244
Q

What is Cloud Dataflow?

A

Pub/Sub Deduplication service that maintains list of message IDs for a time period.

Can bulk convert files and bulk compress files

245
Q

What is Cloud Dataflow based on?

A

Apache Beam

246
Q

True or False

Cloud Dataflow is serverless

247
Q

True or False

Cloud Dataflow cannot Auto Scale?

248
Q

What is Cloud VPN?

A

Used to connect on-premise resources to GCP network over internet.

Routes through Public routes

Encrypted Traffic

249
Q

What are the two types of Cloud VPN solutions

A

HA VPN - only Dynamic routing and (BGP) supported

Classic VPN - Single external IP address

250
Q

In Classic VPN Cloud VPN, what kind of routing is supported?

A

Static routing: Policy-based or Route-based

251
Q

In Cloud VPN, what is required on the client on-premise side?

A

A peer gateway

252
Q

In Cloud VPN, High Availability, what is the restriction

A

Regional Resource

253
Q

What is Cloud Interconnect?

A

High speed, highly available, low-latency private connection into
Google Cloud from your company’s on-premises network

254
Q

Which Cloud Interconnect option has higher bandwidth?

Dedicated or Partner?

255
Q

What is a main drawback of Dedicated Interconnect on Cloud VPN?

A

Longer setup time.

256
Q

What is a third option for hybrid connectivity?

A

Direct Peering, connecting customer network to google network.

257
Q

What does Cloud Interconnect do?

A

Enables Dynamic Routing (Automatic route update when network topology changes) for your Cloud VPN connections.

258
Q

What is BigQuery?

A

Exabyte scale modern Datawarehousing solution

Relational

Serverless

259
Q

True or False, BigQuery can be configured to query data without storing it in BigQuery?

A

True

Cloud Storage

Cloud SQL

BigTable

Google Drive

260
Q

How are charges made for BigQuery?

A

Charged by the amount of data scanned.

260
Q

What is a cost saving method for reducing BigQuery costs forscanned data?

A

Reduce the size of the data by creating temporary table partitions

Or Cluster related data

261
Q

What are the types of data importation into BigQuery?

A

Batch import (free)

Streaming Import (Expensive)

262
Q

What is the BigQuery Data Transfer Service?

A

Service to import from

google SaaS apps

External Cloud storage provider

Data Warehouses - eg. Teradata, Amazon Redshift

263
Q

What are the streaming quota limitations for BigQuery?

A

IF you are NOT populating insertId:

Maximum bytes per second - 1 GB per second, per project (REMEMBER per project - NOT per table)

ELSE (i.e. you are using insertId)

Maximum rows per second per project
US and EU multi-regions: 500,000, Other locations: 100,000

per table limitation: 100,000
Maximum bytes per second: 100 MB

264
Q

What are 4 cost optimization best practices with BigQuery?

A

Estimate your queries before running

Avoid Streaming Inserts

Expire Data Automatically

Consider Long Term Storage option

265
Q

What is Cloud Dataproc?

A

Managed Spark and Hadoop service:

Variety of jobs are supported:
Spark, PySpark, SparkR, Hive, SparkSQL, Pig, Hadoop

Perform complex batch processing

266
Q

What are the Cluster Modes of Dataproc?

A

Multiple Cluster Modes:

Single Node /
Standard/
High Availability (3 masters)

Use regular/preemptible VMs

267
Q

What option would you recommend to import data from Amazon S3, Amazon Redshift, or an on-premise Teradata installation into BigQuery?

A

BigQuery Data Transfer Service

268
Q

If you are running complex Machine Learning and AI workloads on your Hadoop and Spark clusters, and you want to move these workloads to Google Cloud. What service would you recommend?

A

Cloud Dataproc

269
Q

What is the Data Life Cycle?

A

Ingest: Stream or Batch ingest

Store: Durably and cost-efficiently store data in a convenient format

Process and analyze: Convert data to information (normalizations or
aggregations)

Explore and visualize: Flexibility to play with data/information. Get and
share insights.

270
Q

What are the different Data Lifecycle ingestion methods?

A

Streaming: Pub/Sub

Batch

Database Migration

271
Q

What is Dataprep?

A

Clean and prepare data
Fully managed, No-Ops

Usecases: Clean data on-boarded from external sources, Prepare data for ML
Visual approach for non-programmers

272
Q

What is Cloud Data Loss Prevention?

A

Scan, discover, classify, and report on data in Cloud Storage, BigQuery, and Datastore
(mask, tokenize, and transform sensitive elements)

273
Q

What is Dataflow?

A

Flexible ETL pipeline. Managed, no ops, batch and streaming options

274
Q

What is Cloud Datalab?

A

Web based tool to explore, analyze and visualize data
Based on Jupyter notebooks (Use Python, SQL queries etc)
Support for popular data-science toolkits - pandas, numpy, and scikit-learn

275
Q

What is Cloud Data Studio?

A

Dashboarding and visualization live charts and graphs based on data in Cloud SQL, BigQuery etc

276
Q

What is Cloud Data Catalog?

A

Data discovery and metadata management

Unified view of all datasets
Tag sensitive data using Cloud Data Loss Prevention (DLP)

277
Q

What Service Manages IOT registration, authentication, and authorization of devices?

278
Q

Which service can be used to clean data on-boarded from external sources?

A

Cloud Dataprep

279
Q

Which service can be used to mask, tokenize, and transform sensitive elements in your data stored in Cloud Storage, BigQuery, and Datastore?

A

Cloud Data Loss Prevention

280
Q

Which service can be used to build flexible batch and streaming pipelines?

A

Cloud Dataflow

281
Q

Which service enables you to run Jupyter notebooks to explore, analyze and visualize your data running Python programs and SQL queries?

A

Cloud Datalab

282
Q

Which of these services can be used to create dashboards and visualization around data stored in BigQuery?

A

Cloud Data Studio

283
Q

Is Memcached persistent or ephemeral?

A

Ephemeral storage. If the node in the cluster crashes, that data is lost.

284
Q

What are the two service levels of Memcache service?

A

Shared Memcache: Free, best effort

Dedicated: Fixed cache capacity dedicated to your app

285
Q

What is the Waterfall Development Life Cycle?

A

Software dev in multiple long phases.

286
Q

What are the Phases of Waterfall Development Lifecycle?

A

Requirements
Design
Implementation
Testing
Deployment

287
Q

What is Agile Software Development?

A

Software development in smaller iterations.

288
Q

What are the Agile Software Principles?

A

Individuals and interactions over processes and tools

Working software over comprehensive documentation

Customer collaboration over contract negotiation

Responding to change over following a plan

Total of 12

289
Q

What is DevOps CI and CD?

A

Continuous Integration and Continuous Development

290
Q

What is Google Cloud Deployment Manager?

A

Deploy infrastructure from the management template, similar to AWS Cloud Formation

291
Q

What language can be used for Cloud Deployment Manager?

A

Python

JinJa2 (recommended only for very simple scripts

292
Q

What is Cloud Marketplace (Cloud Launcher)?

A

Central repo of easily deployable apps & datasets
kSimilar to App Store/Play Store for mobile applications

293
Q

In Site Reliability Engineering, what is the best practice regarding SLO vs. SLAs?

A

Have stricter internal SLO than your external (contract) SLAs

294
Q

In SRE, what does DiRT stand for?

A

Disaster Recovery Testing at google.

Plan and execute outages for a defined period of time.

295
Q

In DevOps, what is Spinnaker?

A

Multi Cloud continuous delivery platform

Release software changes with high velocity and confidence

Supports deployments to Google Compute Engine, Google Kubernetes Engine,
Google App Engine and other cloud platforms

Supports Multiple Deployment Strategies

296
Q

What is an open-source solution to provision infrastructure using Infrastructure as Code?

297
Q

What Metric is used to manage development velocity in SRE?

A

Error Budgets

298
Q

What are recommended options to Handling Excess Loads?

A

Load Shedding

Reduce Quality of Service

299
Q

What is a tool used during Resilience Testing?

A

Simian Army to perform Chaos Testing

300
Q

What deployment strategy allows you to perform zero-downtime deployments without additional infrastructure?

A

Canary Deployment

301
Q

What deployment strategy givess the ability to test if your users like a feature in production?

A

A/B Testing

302
Q

What is the COPPA compliance certification?

A

COPPA: Children’s Online Privacy Protection Act of 1998

Special requirements on websites created for children under the age of 13

303
Q

What is the HIPPA Compliance certification?

A

Health Insurance Portability and Accountability Act of 1996
Data privacy and security requirements for organizations handling protected health information
(PHI)

304
Q

What is GDPR Compliance certification?

A

General Data Protection Regulation (GDPR):

Strengthens personal data protection in Europe

305
Q

What is the PCI DSS compliance certification?

A

Payment Card Industry Data Security Standards

Enhance card-holder security

306
Q

What are the different approaches for a Cloud Migration?

A

Rehosting (β€œlift and shift”)

Re-platforming Few adjustments to suit the cloud

Example: Containerizing

Repurchasing: Move to a new, cloud-native product Move to a new database

Refactoring Example: Serverless Computing Most expensive

Retiring End of service

Retaining Do NOT move to Cloud Stay on-premisesk

307
Q

What are the phases of Cloud Migration Planning?

A

Phase 1: Assess the workloads to be migrated
Phase 2: Plan the foundation
Phase 3: Deploy the workloads
Phase 4: Optimize your environment

308
Q

What is a service that you can use to protect against DDoS attacks?

A

Cloud Armor on your Load Balancer

309
Q

What is OWASP?

A

Open Web Application Security Project.

310
Q

What is GCP Cloud Scheduler?

A

Fully managed, enterprise-grade scheduler

Schedule all kinds of jobs
Batch, big data jobs, cloud infrastructure operations etc

311
Q

What is Cloud Emulator?

A

Develop GCP applications in your local machine without
connecting to GCP.

Setup local development environment with Cloud Emulators

312
Q

What does Cloud Emulator support the emulation of?

A

Cloud Bigtable
Cloud Datastore
Cloud Firestore
Cloud Pub Sub
Cloud Spanner

313
Q

What is Cloud Identity Platform?

A

Customer identity and access management

314
Q

What is the difference between IAM and Cloud Identity Management?

A

IAM is for Employees and Partner Authorization.

Cloud Identity is for Customer Identity Management

315
Q

If you want to enable β€œLogin using facebook/twitter” for your application, what service would you use?

A

Identity Platform

316
Q

What is Eventarc?

A

Loosely coupled services that react to state changes and require no infra management.

Simplifies event-driven architectures in GCP.

317
Q

What are the three pillars of observability? to measure the internal state of a system?

A

Logs, Metrics, and Traces

318
Q

What is OpenTelemetry?

A

Collection of technologies (tools, APIs, SDKs) to collect
and export telemetry - metrics, traces, and logs

319
Q

What is Service Directory?

A

Helps microservices find one another.

Register/resolve services using DNS, HTTP, and gRPC

320
Q

What is Google Game Servers?

A

Agones + Kubernetes

(Does this still exist?)

321
Q

Your company has decided to make a major revision of their API in order to create better experiences for their developers. They need to keep the old version of the API available and deployable, while allowing new customers and testers to try out the new API. They want to keep the same SSL and DNS records in place to serve both APIs.
What should they do?
A. Configure a new load balancer for the new version of the API
B. Reconfigure old clients to use a new endpoint for the new API
C. Have the old API forward traffic to the new API based on the path
D. Use separate backend pools for each API path behind the load balancer

A

D. Use separate backend pools for each API path behind the load balancer

322
Q

Your company plans to migrate a multi-petabyte data set to the cloud. The data set must be available 24hrs a day. Your business analysts have experience only with using a SQL interface.
How should you store the data to optimize it for ease of analysis?
A. Load data into Google BigQuery
B. Insert data into Google Cloud SQL
C. Put flat files into Google Cloud Storage
D. Stream data into Google Cloud Datastore

A

Correct Answer: A πŸ—³οΈ
BigQuery is Google’s serverless, highly scalable, low cost enterprise data warehouse designed to make all your data analysts productive. Because there is no infrastructure to manage, you can focus on analyzing data to find meaningful insights using familiar SQL and you don’t need a database administrator.
BigQuery enables you to analyze all your data by creating a logical data warehouse over managed, columnar storage as well as data from object storage, and spreadsheets.
Reference:
https://cloud.google.com/bigquery/

323
Q

The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud.
Which three practices should you recommend? (Choose three.)
A. Port the application code to run on Google App Engine
B. Integrate Cloud Dataflow into the application to capture real-time metrics
C. Instrument the application with a monitoring tool like Stackdriver Debugger
D. Select an automation framework to reliably provision the cloud infrastructure
E. Deploy a continuous integration tool with automated testing in a staging environment
F. Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable

A

Correct Answer: ADE πŸ—³οΈ
References:
https://cloud.google.com/appengine/docs/standard/java/tools/uploadinganapp https://cloud.google.com/appengine/docs/standard/java/building-app/cloud-sql

Community vote distribution
CDE (43%)
ADE (32%)
ACE (25%)

324
Q

An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a better tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs.
What should you do?
A. Direct them to download and install the Google StackDriver logging agent
B. Send them a list of online resources about logging best practices
C. Help them define their requirements and assess viable logging tools
D. Help them upgrade their current tool to take advantage of any new features

A

C. Help them define their requirements and assess viable logging tools Most Voted

Community vote distribution
C (53%)
A (47%)

325
Q

You need to reduce the number of unplanned rollbacks of erroneous production deployments in your company’s web hosting platform. Improvement to the QA/
Test processes accomplished an 80% reduction.
Which additional two approaches can you take to further reduce the rollbacks? (Choose two.)
A. Introduce a green-blue deployment model
B. Replace the QA environment with canary releases
C. Fragment the monolithic platform into microservices
D. Reduce the platform’s dependency on relational database systems
E. Replace the platform’s relational database systems with a NoSQL database

A

A. Introduce a green-blue deployment model Most Voted

C. Fragment the monolithic platform into microservices Most Voted

326
Q

To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines
(VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department.
Which two steps should you take? (Choose two.)
A. Use the - -no-auto-delete flag on all persistent disks and stop the VM
B. Use the - -auto-delete flag on all persistent disks and terminate the VM
C. Apply VM CPU utilization label and include it in the BigQuery billing export
D. Use Google BigQuery billing export and labels to associate cost to groups
E. Store all state into local SSD, snapshot the persistent disks, and terminate the VM
F. Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM

A

A. Use the - -no-auto-delete flag on all persistent disks and stop the VM Most Voted

D. Use Google BigQuery billing export and labels to associate cost to groups Most Voted

327
Q

Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. The data from the motion detector includes only a sensor ID and several different discrete items of information. Analysts will use this data, together with information about account owners and office locations.
Which database type should you use?
A. Flat file
B. NoSQL
C. Relational
D. Blobstore

A

Correct Answer: B πŸ—³οΈ
Relational databases were not designed to cope with the scale and agility challenges that face modern applications, nor were they built to take advantage of the commodity storage and processing power available today.
NoSQL fits well for:
βœ‘ Developers are working with applications that create massive volumes of new, rapidly changing data types ג€” structured, semi-structured, unstructured and polymorphic data.

328
Q

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address.
You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly.
What should you do?
A. Ensure that a firewall rules exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
B. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
C. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
D. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

A

Correct Answer: C πŸ—³οΈ
The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services running on instances are configured appropriately. If you run health checks and serve traffic on the same port, but decide to switch ports at some point, be sure to update both the backend service and the health check.
Backend services that do not have a valid global forwarding rule referencing it will not be health checked and will have no health status.
Reference:
https://cloud.google.com/compute/docs/load-balancing/http/backend-service

329
Q

You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine. The script is printing errors that it cannot connect to
BigQuery.
What should you do to fix the script?
A. Install the latest BigQuery API client library for Python
B. Run your script on a new virtual machine with the BigQuery access scope enabled
C. Create a new service account with BigQuery access and execute your script with that user
D. Install the bq component for gcloud with the command gcloud components install bq.

A

Correct Answer: B πŸ—³οΈ
Community vote distribution
C (83%)

330
Q

Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords.
What authentication strategy should they use?
A. Use G Suite Password Sync to replicate passwords into Google
B. Federate authentication via SAML 2.0 to the existing Identity Provider
C. Provision users in Google using the Google Cloud Directory Sync tool
D. Ask users to set their Google password to match their corporate password

A

Correct Answer: C πŸ—³οΈ
Provision users to Google’s directory
The global Directory is available to both Cloud Platform and G Suite resources and can be provisioned by a number of means. Provisioned users can take advantage of rich authentication features including single sign-on (SSO), OAuth, and two-factor verification.
You can provision users automatically using one of the following tools and services:
Google Cloud Directory Sync (GCDS)

Community vote distribution
B (73%)
C (27%)

331
Q

Question #12Topic 1
Your company has successfully migrated to the cloud and wants to analyze their data stream to optimize operations. They do not have any existing code for this analysis, so they are exploring all their options. These options include a mix of batch and stream processing, as they are running some hourly jobs and live- processing some data as it comes in.
Which technology should they use for this?
A. Google Cloud Dataproc
B. Google Cloud Dataflow
C. Google Container Engine with Bigtable
D. Google Compute Engine with Google BigQuery

A

Correct Answer: B πŸ—³οΈ
Cloud Dataflow is a fully-managed service for transforming and enriching data in stream (real time) and batch (historical) modes with equal reliability and expressiveness – no more complex workarounds or compromises needed.
Reference:

332
Q

Question #13Topic 1
Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users.
This behavior was not reported before the update.
What strategy should you take?
A. Work with your ISP to diagnose the problem
B. Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application
C. Roll back to an earlier known good release initially, then use Stackdriver Trace and Logging to diagnose the problem in a development/test/staging environment
D. Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and Logging to diagnose the problem

A

Correct Answer: C πŸ—³οΈ
Stackdriver Logging allows you to store, search, analyze, monitor, and alert on log data and events from Google Cloud Platform and Amazon Web Services
(AWS). Our API also allows ingestion of any custom log data from any source. Stackdriver Logging is a fully managed service that performs at scale and can ingest application and system log data from thousands of VMs. Even better, you can analyze all that log data in real time.
Reference:

333
Q

Question #14Topic 1
A production database virtual machine on Google Compute Engine has an ext4-formatted persistent disk for data files. The database is about to run out of storage space.
How can you remediate the problem with the least amount of downtime?
A. In the Cloud Platform Console, increase the size of the persistent disk and use the resize2fs command in Linux.
B. Shut down the virtual machine, use the Cloud Platform Console to increase the persistent disk size, then restart the virtual machine
C. In the Cloud Platform Console, increase the size of the persistent disk and verify the new space is ready to use with the fdisk command in Linux
D. In the Cloud Platform Console, create a new persistent disk attached to the virtual machine, format and mount it, and configure the database service to move the files to the new disk
E. In the Cloud Platform Console, create a snapshot of the persistent disk restore the snapshot to a new larger disk, unmount the old disk, mount the new disk and restart the database service

A

Correct Answer: A πŸ—³οΈ
On Linux instances, connect to your instance and manually resize your partitions and file systems to use the additional disk space that you added.
Extend the file system on the disk or the partition to use the added space. If you grew a partition on your disk, specify the partition. If your disk does not have a partition table, specify only the disk ID. sudo resize2fs /dev/[DISK_ID][PARTITION_NUMBER] where [DISK_ID] is the device name and [PARTITION_NUMBER] is the partition number for the device where you are resizing the file system.
Reference:
https://cloud.google.com/compute/docs/disks/add-persistent-disk
Community vote distribution

334
Q

Question #15Topic 1
Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used.
How should you design your architecture?
A. Create a tokenizer service and store only tokenized data
B. Create separate projects that only process credit card data
C. Create separate subnetworks and isolate the components that process credit card data
D. Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data
E. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor

A

Correct Answer: A πŸ—³οΈ
Reference:
https://www.sans.org/reading-room/whitepapers/compliance/ways-reduce-pci-dss-audit-scope-tokenizing-cardholder-data-33194
Community vote distribution
A (100%)

335
Q

You have been asked to select the storage system for the click-data of your company’s large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute. With bursts of up to 8,500 clicks per second. It must have been stored for future analysis by your data science and user experience teams.
Which storage infrastructure should you choose?
A. Google Cloud SQL
B. Google Cloud Bigtable
C. Google Cloud Storage
D. Google Cloud Datastore

A

Correct Answer: B πŸ—³οΈ
Google Cloud Bigtable is a scalable, fully-managed NoSQL wide-column database that is suitable for both real-time access and analytics workloads.
Good for:
βœ‘ Low-latency read/write access
βœ‘ High-throughput analytics
βœ‘ Native time series support
Common workloads:
βœ‘ IoT, finance, adtech
βœ‘ Personalization, recommendations
βœ‘ Monitoring
βœ‘ Geospatial datasets
βœ‘ Graphs
Incorrect Answers:
C: Google Cloud Storage is a scalable, fully-managed, highly reliable, and cost-efficient object / blob store.
Is good for:
βœ‘ Images, pictures, and videos
βœ‘ Objects and blobs
βœ‘ Unstructured data
D: Google Cloud Datastore is a scalable, fully-managed NoSQL document database for your web and mobile applications.
Is good for:
βœ‘ Semi-structured application data
βœ‘ Hierarchical data
βœ‘ Durable key-value data
βœ‘ Common workloads:
βœ‘ User profiles
βœ‘ Product catalogs
βœ‘ Game state
Reference:
https://cloud.google.com/storage-options/
Community vote distribution
B (94%)
6%

336
Q

You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend.
What should you do?
A. Write a lifecycle management rule in XML and push it to the bucket with gsutil
B. Write a lifecycle management rule in JSON and push it to the bucket with gsutil
C. Schedule a cron script using gsutil ls ג€”lr gs://backups/** to find and remove items older than 90 days
D. Schedule a cron script using gsutil ls ג€”l gs://backups/** to find and remove items older than 90 days and schedule it with cron

A

Correct Answer: B πŸ—³οΈ
Community vote distribution
B (100%)

337
Q

Question #18Topic 1
Your company is forecasting a sharp increase in the number and size of Apache Spark and Hadoop jobs being run on your local datacenter. You want to utilize the cloud to help you scale this upcoming demand with the least amount of operations work and code change.
Which product should you use?
A. Google Cloud Dataflow
B. Google Cloud Dataproc
C. Google Compute Engine
D. Google Kubernetes Engine

A

Correct Answer: B πŸ—³οΈ
Google Cloud Dataproc is a fast, easy-to-use, low-cost and fully managed service that lets you run the Apache Spark and Apache Hadoop ecosystem on Google
Cloud Platform. Cloud Dataproc provisions big or small clusters rapidly, supports many popular job types, and is integrated with other Google Cloud Platform services, such as Google Cloud Storage and Stackdriver Logging, thus helping you reduce TCO.
Reference:
https://cloud.google.com/dataproc/docs/resources/faq

338
Q

Question #19Topic 1
The database administration team has asked you to help them improve the performance of their new database server running on Google Compute Engine. The database is for importing and normalizing their performance statistics and is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD persistent disk.
What should they change to get better performance from this system?
A. Increase the virtual machine’s memory to 64 GB
B. Create a new virtual machine running PostgreSQL
C. Dynamically resize the SSD persistent disk to 500 GB
D. Migrate their performance metrics warehouse to BigQuery
E. Modify all of their batch jobs to use bulk inserts into the database

A

Correct Answer: C πŸ—³οΈ
Community vote distribution

Answer is C because persistent disk performance is based on the total persistent disk capacity attached to an instance and the number of vCPUs that the instance has. Incrementing the persistent disk capacity will increment its throughput and IOPS, which in turn improve the performance of MySQL.

339
Q

Question #20Topic 1
You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading.
Where should you store the data?
A. Google BigQuery
B. Google Cloud SQL
C. Google Cloud Bigtable
D. Google Cloud Storage

A

Correct Answer: C πŸ—³οΈ
Google Cloud Bigtable is a scalable, fully-managed NoSQL wide-column database that is suitable for both real-time access and analytics workloads.
Good for:
βœ‘ Low-latency read/write access
βœ‘ High-throughput analytics
βœ‘ Native time series support
Common workloads:
βœ‘ IoT, finance, adtech
βœ‘ Personalization, recommendations
βœ‘ Monitoring
βœ‘ Geospatial datasets
βœ‘ Graphs
Reference:
https://cloud.google.com/storage-options/

GCP PCA (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions