Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

GCP > Networking > Flashcards

Networking Flashcards

1
Q

Lowest priority for firewall rule

A

65,535

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

VPC implied rules (2)

A

Block all incoming traffic

Allow all outgoing traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Default rules for VPC default network (4)

A

default-allow-internal

default-allow-ssh (TCP port 22)

default-allow-rdp (TCP on port 3389)

default-allow-icmp (ping)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Cloud Router

A

Software defined dynamic routing GCP uses to advertise IP address ranges to destinations OUTSIDE VPC network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Cloud Router provides routing services for…(4)

A

Dedicated Interconnect
Partner Interconnect
HA VPN
Classic VPN tunnels that use dynamic routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Auto mode VPC subnets fit within CIDR block..

A

10.128.0.0/9

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

VPC network peering works with which IaaS (3)

A

Compute Engine
App Engine Flexible
GKE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Hybrid network implementation options (3)

A

Cloud VPN
Cloud Interconnect
Direct Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Cloud VPN gateways (2)

A

HAVPN

Classic VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cloud VPN - max network bandwidth per tunnel

A

3 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Dedicated Interconnect - bandwidth options

A 
10 Gbps (up to 8 x 10 for 80 Gbps)
100 Gbps (up to 2 x 100 for 200 Gbps)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Partner Interconnect - VLAN attachment size options

A

50 Mbps - 50 Gbps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Cloud Router used for … (3)

A

HA VPN
Cloud Interconnect
Router Appliance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Direct Peering

A

Used to access Workspace services from on prem

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Private Service Connect for Google APIs

  • Clients
  • Connection
  • Supported services
  • Usage
A

GCP resources without external IP and on premises systems

Connect to a Private Service Connect endpoint in VPC network which forwards request to Google APIs and services

Supports most Google APIs and services

Allows private consumption of services across VPC networks that belong to different groups, teams, projects, orgs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Private Service Connect for Google APIs with Consumer HTTPS service controls

  • Clients
  • Connection
  • Supported Services
  • Usage
A

GCP resources without external IP and on prem systems
Connect to internal HTTP load balancer in VPC network which forwards request to Google APIs and services
Supports selected regional Google APIs and services

Connect to regional Google APIs and services using HTTP(S) Internal Load Balancer

Option to use URL mapping to limit access to specific APIs

17
Q

Private Google Access

  • Clients
  • Connection
  • Supported services
  • Usage
A

GCP resources without external IPs
Connect to standard external IP or Private Google Access domains and VIPs for Google APIs and services via network’s default internet gateway
Supports most GCP APIs and services

Access to external IP addresses used by App Engine and third party App Engine based services

18
Q

Private Google Access for On-Prem Hosts

  • Clients
  • Connection
  • Supported services
  • Usage
A

On prem hosts with or without external IP
Connect to Google APIs and services through Cloud VPN tunnel or Cloud Interconnect via one of the Private Google Access-specific domains and VIPs
Access Private Google Access domains specified

Connect from on prem to Google APIs and services through VPC

19
Q

Private Service Access

  • Clients
  • Connection
  • Supported services
  • Usage
A

GCP VM instances with or without external IP
Connect to GCP or third party managed VPC network through a VPC Network Peering connection
Some GCP and third party services

Connects instances in your VPC network to service producer’s VPC network via VPC Network Peering connection.

(use IPv4 range allocated for service producers)

20
Q

Serverless VPC Access

A

Allows serverless environment (Cloud Run, App Engine, Cloud Functions) to connect to your VPC network

Serverless environment sends requests to VPC network using internal DNS and internal IP address

21
Q

Advanced traffic management capabilities

A

Traffic steering
- route based on HTTP parameters (host, path, headers)

Traffic actions
- request based and response based actions (redirects and header transformations)

Traffic policies
- fine tune behavior (advanced load balancing algorithm)

22
Q

Backend Service (5 features)

A

Configuration determines load balancing behavior

  • Direct traffic to correct backend
  • Distribute traffic according to balancing mode
  • Determine which health check is monitoring backend
  • Specify session affinity
  • Determine if services are enabled (Cloud CDN, Cloud Armor, Identity-Aware Proxy)
23
Q

Load balancer for Cloud CDN

A

External HTTP load balancer

24
Q

External UDP/TCP Network Load Balancer

  • Regional or global
  • How distribute traffic
  • Use Case
A

Regional

Pass through
Distributes external traffic among VM instances
Packets pass through from client to backend (no backend service)

Use Cases:

  • Forward packets from internet unproxied - need client source IP preserved
  • Migrate existing pass through load blancer
25
Q

Internal TCP/UDP Load Balancer

  • Regional or global
  • How distribute traffic
  • Use Cases
A

Regional backends and frontends. **Global access supported

Pass through
Frontend forwarding rule to backend service (instance groups or NEGs)

3 tier web app - between frontend and middleware
Next hop from server to gateway

26
Q

Internal HTTP(S) Load Balancer

  • Regional or global
  • How distribute traffic
  • Use Cases
A

Regional only

Forwarding rule specifies internal IP, port, regional target HTTP proxy
Frontend - internal IP, proxy-only subnet
URL map to determine routing

Private Service Connect for Google APIs and consumer HTTP service
Modernizing monolith legacy app (place in front of monolith to distribute subset of traffic to new microservices)

27
Q

Regional External HTTPS Load Balancer

  • How distribute traffic
  • Use Cases
A

External forwarding rule to Envoy proxies in same region as load balancer
to regional backend service

Use advanced networking features for external HTTP traffic while using standard tier network

28
Q

SSL Proxy Load Balancer

  • Regional or global
  • How distribute traffic
  • Use cases
A

Regional and standard or global and premium

Premium:

  • Adverise load balancer global anycast IP
  • GFE directs request to healthy backend instance groups or NEG in region closest to user

Standard:
- Advertise load balancer’s external IP from POP in same region as forwarding rule

Offload SSL processing, control SSL features with SSL policies, terminate TLS in globally distributed locations to minimize latency

29
Q

Global External HTTP Load Balancer

- How traffic is distributed

A

Requests routed to GFE closest to client (or in same region as load balancer if regional)
External forwarding rule specifies external IP, port, and target HTTP Proxy
Target HTTP proxy authenticates clients using SSL certs
Backend service distributes to healthy backend

30
Q

Load balancer for Cloud CDN

A

External HTTP

31
Q

Load balancer for Private Service Connect for Google APIs and Consumer HTTP Service

A

Internal HTTP

32
Q

Standard API operations (5)

A 
List
Get
Create
Update
Delete
33
Q

IPs in each subnet reserved for Google (4)

A

First address - Network
Second address - Gateway
Second to last - Potential future use by Google
Last - Broadcast

34
Q

Cloud VPN max network bandwidth per tunnel

A

3 Gbps

35
Q

K8 Networking Modes (2)

A

VPC native cluster
- Uses alias IPs to route traffic between pods

Routes-Based cluster
- Google Cloud routes to route traffic between pods

36
Q

Packet Mirroring

A

Clones traffic to and from VM instances and forwards for inspection

37
Q

Network Intelligence Center (4) modules

A

Network topology map
Connectivity tests
Performance dashboard
Firewall insights

38
Q

Traffic Director

A

Fully managed, HA control plane for service mesh

GCP (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions