IAM

Question 1

What geographical types of resources are there?

Answer 1

Zonal
Regional
Multi-regional (App engine, cloud datastore, cloud storage, cloud bigquery)

Question 2

What is the Resource hierarchy in GCP, how is policy inherited and how are overlapping IAM policies solved?

Answer 2

Organization, Folder, Project, resource, policies are inherited down in the resource hierarchy and should a conflict arise between any of these Resources the most generous policy wins out

Question 3

What are the components of a IAM policy?

Answer 3

Who
Can do what
On which Resource

Question 4

What kinds of roles are there?

Answer 4

Primitive (Owner, Editor, Viewer)
Predefined roles (Specific to Resources)
Custom roles (Roles defined by users)

Question 5

What is the Organization Policy Service, describe its constraint types and give examples

Answer 5

The OPS is a service that allows the definition of policies made up of constraints to the use of resources or certain configurations of them.
It complements IAM policies.
There are 2 types of constraints list and boolean.
An example of a list constraint would be blocking publicIpAccess to a set of VMs
An example of a boolean constraint would be blocking the creation of service accounts

Question 6

What are Identities?

Answer 6

Identities can be either service-accounts or users

Question 7

What types of service-accounts are there, how do they differ?

Answer 7

user-managed and google-managed, google-managed is usually created automatically by resources

Question 8

What types of billing accounts are there, how do they differ?

Answer 8

self-serve and invoice, self-serve is billed automatically to a card or some other method whilst invoice is only manually paid by the GCP customer.

Question 9

Can billing data be exported, if so to where and which roles are allowed to do so?

Answer 9

Yes, to big query and cloud storage, the billing account cost manager and billing account administrator can perform this task.

Question 10

What are the roles of cloud billing, describe them

Answer 10

Billing Account Administrator - Can do all
Billing Account Cost Manager - Can set budgets, see and analyze spending and export data
Billing Account User - Can link billing account to projects as well as use promotions and credits
Billing Account Creator - Can create billing accounts
Billing Account Viewer - Can view costs and transactions
Billing Manager - Can link and unlink a billing account to a project

Question 11

What is Google Cloud Operations?

Answer 11

Former stackdriver its a set of services for monitoring, debugging, logging and tracing apps and resources