Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Google Cloud PCA > Networking > Flashcards

Networking Flashcards

1
Q

Google Front End

A

Reverse proxy that protects backend Google services.
Authenticates, assures integrity, and encrypts traffic.
Once traffic passed to GFE, under purview of GCP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the two network service tiers GC offers?

A

Premium - cold potato routing

Standard - hot potato routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is meant by cold potato routing?

A

GC will hold on to traffic within Google network for as long as possible before passing to public internet.

GC will hand off to edge POP closest to user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Google Front End (GFE)

A

Reverse proxy that protects backend Google services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Default route

A

System-generated route that defines path for traffic that needs to leave VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Subnet

A

Logical subdivision of RFC 1918 IP space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are VPCs and subnets global or regional resources?

A

VPCs are global

Subnets are regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What’s the difference between an auto mode VPC network and custom mode VPC network?

A

Auto mode - default network created when you create a project. Each region automatically gets a /20 subnet.

Custom mode - does not come with any subnets or IP ranges so admin has full control to define.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What’s the difference between regions and zones?

A

Region is collection of zones.

Zone is isolated location within a region, typically a single data center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What’s a useful application of network tags?

A

Strings that are used by FIREWALLS and ROUTES to apply to specific VM instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

T/F: you can modify the primary IP range for your subnet.

A

F. You can expand the IP address range of your subnet once you’ve created, but you do so by adding an alias IP range.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Private Google Access

A

Allows instances without external IP addresses to access resources outside of the network from within GC services, i.e. GCS, Cloud Source Repos.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Private Service Access

A

Allows you to connect to Google or third-party services located on OTHER VPC NETWORKS hosted by Google or third parties.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the difference between Private Google Access and Private Service Access?

A

Private Google Access allows you to access assets/resources from outside your network via GC services.

Private Service Access allows you to access third-party services without leaving GC’s network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Shared VPC

A

Allows you to connect resources from different projects to a single VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

T/F: in a shared VPC model, billing is attributed to the host project.

A

F. One benefit of using a shared VPC is that organizations can centrally manage network resources while individual BUs own their portions of the bill.

17
Q

VPC Peering

A

Allows two separately managed VPCs to communicate with each other.

18
Q

T/F: there is more latency between two resources across peered VPCs than between two resources within the same VPC.

A

F

19
Q

Cloud VPN

A

Allows you to connect any of your peer networks to VPC securely through an IPSec-encrypted tunnel.

VPNs create secure connections over non-secure connections.

20
Q

Name two use cases for Cloud DNS

A

Cloud DNS can act as

  • An authoritative DNS server for public domains with Internet visibility
  • A DNS server for private zones only visible within a private network.
21
Q

What is the difference between Dedicated and Partner Interconnect?

A

Dedicated Interconnect provides a direct, dedicated physical connection between your on-prem network and GCP.

Partner Interconnect provides a connection between your on-prem and VPC networks through a supported service provider.

22
Q

What are the different bandwidth constraints between Cloud VPN and Cloud Interconnect?

A

Cloud VPN supports up to 3 Gbps per tunnel

Cloud Interconnect supports up to 10 Gbps for Partner and 100 Gbps for Direct

23
Q

What are the different types of Cloud Load Balancers?

A

Internal (TCP/UDP, HTTP)

External (

24
Q

What are the different types of Cloud Load Balancers?

A

Internal (TCP/UDP, HTTP)

External (TCP/UDP network, TCP proxy, SSL proxy, HTTP)

25
Q

What might be the reason VM instances sitting behind a load balancer keep restarting?

A

Firewall rule not configured to allow traffic from internal LB to hit backend VM instances for health checks.

26
Q

What kinds of resources does Cloud CDN cache store content from?

A

VM instances and storage buckets

Google Cloud PCA (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions