M1 - Google Cloud Fundamentals: Core Infrastructure Flashcards
What are the 5 equally important traits of Cloud Computing from Google’s perspective?
1) Customers get computing resources that are on -demand and self-service.
2) Customers get access to those resources over the internet, from anywhere.
3) The provider of those resources allocates them to users out of that pool.
4) The resources are elastic–which means they’re flexible, so customers can be.
5) Customers pay only for what they use, or reserve as they go.
What are the three waves described in the history of Cloud Computing?
First -Colocation
Second - Virtualized Data Center
Third - Container Based Architecture
IaaS delivers__________
delivers on-demand infrastructure resources via the cloud, such as raw compute, storage network capabilities.
_____________bind code to libraries that provide access to the
infrastructure application needs. This allows more resources to be focused on application logic.
PaaS
___________ deploy containerized microservices based application in a fully - managed environment.
Cloud Run
________________manages event-driven code as a pay-as-you go service.
Cloud Run Functions
_________provides the entire application stack, delivering an entire cloud-based application that customers can access and use.
SaaS - All the google applications that are part of the google workspace environment are examples of SaaS.
Google Infrastructure locations
North America, Europe, South America, Asia, Australia.
___________ measures the time a packet of information takes to travel from its source to its destination.
Latency
_____________represent independent geographic areas, and are composed of zones. For
example, London, or europe-west2, is a __________that currently comprises three different
zones.
Regions
Google Cloud currently supports _____zones in ___regions, although this number is
increasing all the time.
121
40
Google’s data centers
were the first to achieve
___________certification
ISO 14001
The hardware infrastructure layer comprises three key Infrastructure features:
1) Hardware design and provenance.
2) Secure boost stack.
3) Premises security.
The service deployment level comprises:
Encryption of inner-service communication.
What does encryption of inter-service communication mean?
Google’s infrastructure provides cryptographic privacy and integrity for remote procedure call (“RPC”) data on the network. Google’s services communicate with each other using RPC calls. The
infrastructure automatically encrypts all infrastructure RPC traffic which goes between data centers. Google has started to deploy hardware cryptographic accelerators that will allow it to extend this default encryption to all infrastructure RPC
traffic inside Google data centers.
User identitiy layer
Intelligently challenges users for additional
information based on certain risk factors.
Users can use secondary factors when signing in,
including Factor (U2F) open standard.
Storage services layer
Encryption at rest.
Using centrally managed keys, encryption is
applied at the layer of these storage services.
Google also enables hardware encryption support in hard drives and SSDs.
The internet communication layer is comprised by:
Google front end and Denial of Service protection.
The Google operational security layer is comprised by:
Intrusion detection, reducing insider risk, employee Universal Scond factor user, software development practices.
Whats is Google frontend/whats its function?
Google Front end ensures that all registered services use TLS connections incorporating the correct certificates and following best practices. Google frontend is an Infrastructure service.
What is Denial of Service (DoS) protection?
The one technology that reduces the risk of any DoS impact of an application running behind GFE.
_____________ and ________________ give the ability to mix and match microservices running across different clouds.
Kubernetes and Google Kubernetes Engine.
______________________ lets customer monitor workloads across multiple cloud providers.
Google Cloud Observability.
When it comes to GCP billing, there are two types of quotas (both applied at the project level) these are:
rate quotas and allocation quotas.
__________quotas reset after a specific time.
Rate
___________quotas govern the number of resources you can have in your
projects. For example, by default, each Google Cloud project has a quota
allowing it no more than 15 Virtual Private Cloud networks.
Allocation