36767455
Description
Flashcards by Thomas Gooch, updated more than 1 year ago
|
Created by Thomas Gooch
about 2 years ago
|
|
| Question | Answer |
| GKE: difference btw standard and autopilot | standard puts user in charge of orchestration of clusters, while autopilot lets GKE manage cluster orchestration |
| GKE: cmd for creating cluster | gcloud container clusters create |
| gcloud container vs kubectl | gcloud container is a the container level kubectl is at the deployment level |
| what are the two (2) types of App Engine implementations? | Standard and Flexible |
| app engine: application | the container of all resources - services, code, metadata... everything only one (1) per project |
| storage classes for buckets | standard, nearline, coldline, and archive |
| Which of the following are included as preconfigured global resources on GCP? | Disk images Disk snapshots Networks |
| This type of VPC network provides users with complete control over its subnets and IP ranges in the GCP? | Custom mode |
| Which of the following load balancers are supported on GCP? | Server-side load balancer |
| Which of the following are supported protocols as a part of health checks for the cloud load balancer in the GCP? | HTTPS gRPC |
| whats a role in IAM? | A role is a set of permissions *specific actions on specific resources |
| What is a Policy in IAM? | A policy binds a role to a member |
| what are the three (3) types of roles within IAM? | primitive, predefined, and custom |
| Within GCP, the HA VPN API contains an option for REDUNDANCY_TYPE that represents the number of interfaces you configure for the external VPN gateway resource. Which of the following values is supported when there are two external VPN interfaces? | The HA VPN API contains an option for REDUNDANCY_TYPE, which represents the number of interfaces you configure for the external VPN gateway resource. gcloud commands automatically infer the following values of REDUNDANCY_TYPE from the number of interfaces you provide in the interface ID when you configure an external VPN gateway resource: One external VPN interface is SINGLE_IP_INTERNALLY_REDUNDANT Two external VPN interfaces are TWO_IPS_REDUNDANCY Four external VPN interfaces are FOUR_IPS_REDUNDANCYanswer |
| In GCP, when you’re applying Identity and Access Management (IAM) to an instance, what is the term for acting in place of other members and resources? | answer |
| Within GCP, when you are configuring the maximum transmission unit (MTU) setting on a peer VPN gateway, the peer device must not exceed _____ bytes. | 1460 |
| _______ lets users easily integrate vision detection features, including image labeling, face and landmark detection, optical character recognition (OCR), and tagging of explicit content on the GCP. | Explanation: Cloud Vision lets you easily integrate vision detection features, including image labeling, face and landmark detection, optical character recognition (OCR), and tagging of explicit content. Google Cloud offers a managed service called machine learning services. Machine Learning APIs: https://cloud.google.com/docs/overview/cloud-platform-services |
| In a GCP Kubernetes cluster, what must be created with Stackdriver to monitor a Kubernetes cluster instance? | In a GCP Kubernetes cluster, what must be created with Stackdriver to monitor a Kubernetes cluster instance? |
| In GCP, a high availability (HA) VPN tunnel is supported on which of the following types of gateways? | answer |
| Which GCP database service requires the administrator to configure a failover replica to make it highly available? | answer |
| When would scaling up an instance group be relevant? | anser |
| Within GCP, which of the following provides enterprise-grade services to Google Cloud? | Explanation: Cloud Interconnect: If you need to encrypt traffic to Google Cloud, or you need a lower throughput solution, or you are experimenting with migrating your workloads to Google Cloud, you can choose Cloud VPN. For more information, see the Cloud VPN overview. If you need an enterprise-grade connection to Google Cloud that has higher throughput, you can choose Dedicated Interconnect or Partner Interconnect. We recommend using Cloud Interconnect over Direct Peering and Carrier Peering, which you would use only in certain circumstances. For a quick summary, you can compare the features of Direct Peering with Cloud Interconnect and Carrier Peering with Cloud Interconnect. https://cloud.google.com/network-connectivity/docs/how-to/choose-product#cloud-interconnect |
| When setting up a virtual private network (VPN) between an external network and GCP, what is the minimum number of components to configure to have automatic updates when network topology changes occur? | When setting up a virtual private network (VPN) between an external network and GCP, what is the minimum number of components to configure to have automatic updates when network topology changes occur? |
| What can a Cloud Engineer do to make sure unnecessary data is not stored in the datastore? | What can a Cloud Engineer do to make sure unnecessary data is not stored in the datastore? |
| When you are managing billing within Google Cloud Marketplace for a Kubernetes app within an organization, how many IAM roles are supported? | When you are managing billing within Google Cloud Marketplace for a Kubernetes app within an organization, how many IAM roles are supported? |
| Within GCP, a Cloud Router interface connects to exactly which of the following GCP resources? | Within GCP, a Cloud Router interface connects to exactly which of the following GCP resources? |
| Which of the following protocols are supported by Google Cloud Platform Compute Engine for IP Forwarding? | Which of the following protocols are supported by Google Cloud Platform Compute Engine for IP Forwarding? |
| Which GCP Storage product is good for data analytics, rendering and media processing, application migrations, and web content management? | Google Cloud provides a variety of storage services including consistent, scalable, large-capacity data storage in Cloud Storage. Google Cloud uses persistent disks on Compute Engine for use as a primary storage of instances. GCP Cloud Storage comes in several flavors: Standard Cloud Storage, Cloud Storage Nearline, Cloud Storage Coldline, and Cloud Storage Archive. Finally, Google Cloud offers fully managed NFS file servers in Filestore. Storage Services: https://cloud.google.com/docs/overview/cloud-platform-services https://cloud.google.com/products/storage |
| _____ is a managed Spark and Hadoop service that lets an administrator or users take advantage of the open-source data tools for batch processing, query, streaming, and machine learning. | Dataproc is a managed Spark and Hadoop service that lets you take advantage of open-source data tools for batch processing, querying, streaming, and machine learning. Dataproc automation helps you create clusters quickly, manage them easily, and save money by turning off clusters when you don't need them. With less time and money spent on administration, you can focus on your jobs and your data. https://cloud.google.com/dataproc/docs/concepts/overview |
| What is the main purpose for DataFlow? | answer |
| ____ analysis helps an administrator or user determine effective routes, taking applicable routes and routing order into consideration. | Route analysis helps you determine effective routes, taking applicable routes and routing order into consideration. Routes are listed by destination IP range, so you can tell which applicable route will be used to send traffic to a given destination range. https://cloud.google.com/vpc/docs/using-routes |
| Which Google Kubernetes Engine kubectl command is used to start a deployment? | You use the kubectl run command to start a deployment when using Google Kubernetes Engine. https://cloud.google.com/kubernetes-engine/docs/concepts/deployment https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-architecture#nodes https://kubernetes.io/docs/reference/kubectl/cheatsheet/ |
| In GCP, when you’re applying Identity and Access Management (IAM) to an instance, what is the command to get a list of permissions that can be applied on a target resource via the command line? | gcloud iam list-testable-permissions |
| Within GCP, when you are configuring the maximum transmission unit (MTU) setting on a peer VPN gateway, the peer device must not exceed _____ bytes. | The MTU of the peer VPN device must not exceed 1460 bytes. You must enable prefragmentation on your device, which means that packets must be fragmented first, then encapsulated. For more information, see maximum transmission unit (MTU) considerations. https://cloud.google.com/network-connectivity/docs/vpn/how-to/configuring-peer-gateway |
| Once a project team is defined in Google Cloud Deployment Manager, there are four roles. Which of the following provides read and write access to all types of registry resources? | Explanation: Once a project team is defined in Google Cloud Deployment Manager, the four roles include Deployment Manager Editor, Deployment Manager Type Editor, Deployment Manager Type Viewer, and Deployment Manager Viewer. As defined in the documentation, the best answer that provides read and write access to all Type Registry resources is the Deployment Manager Type Editor. https://cloud.google.com/deployment-manager/docs, https://cloud.google.com/deployment-manager/docs/fundamentals, or https://cloud.google.com/deployment-manager/docs/access-control |
| While managing an instance in GCP, administrators notice a slow response time when issuing commands to a server. Which command is used to reboot the machine? | Explanation: The reset command can be used to restart a virtual instance running on GCP. As noted in the documentation, when you reset an instance, none of the instance properties change. The instance retains its IP address, its persistent disk, its machine type, etc. Any data stored in memory is reset unless you back up the data. https://cloud.google.com/compute/docs/instances/stop-start-instance |
| In GCP, a high availability (HA) VPN tunnel is supported on which of the following types of gateways? | Peer VPN Gateway HA VPN Gateway |
| _____ is a feature of Google Cloud Platform that lets an administrator or user inspect the state of an application, at any code location, without stopping or slowing down the running app. | Cloud Debugger is a feature of Google Cloud Platform that lets you inspect the state of an application, at any code location, without stopping or slowing down the running app. Cloud Debugger makes it easier to view the application state without adding logging statements. You can use Cloud Debugger with any deployment of your application, including test, development, and production. The debugger adds less than 10ms to the request latency only when the application state is captured. In most cases, this is not noticeable to users. https://cloud.google.com/debugger/docs/ |
| What can a Cloud Engineer do to make sure unnecessary data is not stored in the datastore? | App Engine calculates storage costs based on the size of entities in the Datastore, the size of Datastore indexes, the size of tasks in the task queue, and the amount of data stored in Blobstore. Here are some things you can do to make sure you don't store more data than necessary: Delete any entities or blobs your application no longer needs. Remove any unnecessary indexes to reduce index storage costs. The other two options are not feasible options to manage the datastore. https://cloud.google.com/appengine/docs/standard/python/console/managing-resources and https://cloud.google.com/appengine/docs/standard/php/config/appref |
| When you are managing billing within Google Cloud Marketplace for a Kubernetes app within an organization, how many IAM roles are supported? | You answered this question incorrectly. The correct answers are highlighted.× Explanation: To manage billing for your organization, you must have the correct Identity and Access Management (IAM) roles or permissions for Cloud Billing, which are Viewer, Editor, Service Account User, and Service Account Key Admin. More details on these roles can be found in the following links: https://cloud.google.com/marketplace/docs/manage-billing and https://cloud.google.com/marketplace/docs/manage-deployments |
| Within GCP, a Cloud Router interface connects to exactly which of the following GCP resources? | You must have an existing Cloud Router before you can do the following: Create a VLAN attachment for Dedicated Interconnect Create a VLAN attachment for Partner Interconnect Create a VPN tunnel connected to an HA VPN gateway Create a Cloud NAT gateway When you create a Cloud Router, you can choose the Google-side ASN. If you don't specify an ASN, Google Cloud chooses an ASN for you. However, you must manually specify the ASN of your on-premises (peer) router in the configuration settings for Cloud Router. Google Cloud provides how-to guides that helps users create and manage networks. https://cloud.google.com/network-connectivity/docs/router/how-to/configuring-bgp https://cloud.google.com/network-connectivity/docs/router/concepts/overview |
| Which of the following protocols are supported by Google Cloud Platform Compute Engine for IP Forwarding? | Explanation: For virtual hosting by IPs, virtual private networks (VPN), and load balancing, Compute Engine supports protocol forwarding for the following protocols: AH: Specifies the IP Authentication Header protocol ESP: Specifies the IP Encapsulating Security Payload protocol ICMP: Specifies the Internet Control Message Protocol SCTP: Specifies the Stream Control Transmission Protocol TCP: Specifies the Transmission Control Protocol UDP: Specifies the User Datagram Protocol Note: This is an exhaustive list of supported protocols. Only protocols that appear here are supported for protocol forwarding. https://cloud.google.com/compute/docs/protocol-forwarding |
| When you’re setting up GCP Cloud Storage, what is the command to change the default storage class from the command line? | When you upload an object to the bucket, if you don't specify a storage class for the object, the object is assigned the bucket's default storage class. Use the gsutil defstorageclass set command as follows: gsutil defstorageclass set STORAGE_CLASS gs://BUCKET_NAME https://cloud.google.com/storage/docs/changing-default-storage-class#gsutil https://cloud.google.com/appengine/docs/standard/python/console/managing-resources and https://cloud.google.com/appengine/docs/standard/php/config/appref |
| cmd to get info on current PROJECT | gcloud compute project-info describe |
| how to find policy for project? | gcloud projects get-iam-policy <projId> |
| 3 options for scaling in App Engine | Auto, Basic, and Manual |
| 3 options for splitting traffic in App Engine | ip, cookie, and random |
| when using cookie for splitting traffic in App Engine, what is the cookie name? | GOOGAPPUID |
| name the three relational database types in GCP | CloudSQL, Cloud Spanner, BigQuery |
| what is cloud sql intended for? | if you were to use MySQL, Postgresql, or sql server. use Cloud SQL Web apps, BI, e-commerce *MINIMUM Horizontal Scaling |
| what is Cloud Spanner intended for? | think massive and efficient for a global scale. financial enterprise, ERP consistency, redundancy, integrity, and speed significantly expensive |
| what is Big Query intended for? | data warehousing and big data analytics think millions of rows per minute petabytes baby! |
| name the three NoSQL database types in GCP | Cloud Datastore, Cloud Firestore, and Bigtable |
| what is Datastore intended for? | data is unstructured user profile, catalog data |
| what is Cloud Filestore intended for? | NoSQL supporting document model, for storing, synchronizing and querying at near real-time mobile, web, IoT global scale |
| what is Big Table intended for? | a "wide-column" NoSQL db petabyte scale replication, high availability, resilience Advertising tech, fintech |
| In a GCP Kubernetes Cluster, what purpose does Cloud Monitoring (Stackdriver) perform? | Notifications, monitoring, and logging |
| If an administrator or users _____ an instance with a specified IP address, the address goes back into the unallocated address pool. | Delete |
| An error message is returned if you try to use an image that is no longer available. Which of the following is the GCP term for this? | Obselete |
| _______ combines the managed infrastructure of Google Cloud with the power and flexibility of TensorFlow. | AI Platform |
| In a GCP Kubernetes Cluster, where does a user/administrator enable Stackdriver logging and monitoring services? | Advanced Options |
| In GCP, when you’re estimating cost for BigQuery, on-demand queries are charged based on number of bytes read. Which of the following options can be used to estimate costs before running a query? | Client Libraries Google Cloud Pricing Calculator dryRun parameter using API |
| What parameters of a deployment are set in the Create Deployment page in the Google Cloud Console? | Container image, Cluster name, and Application name |
| When you’re managing images in GCP, what might be the source of images? | Disks, snapshots, or cloud storage files |
| Within GCP, Google Cloud Deployment Manager contains _____, which are essentially parts of the configuration file that has been abstracted into individual building blocks? | Templates |
| Within GCP, when you’re using a Dedicated Interconnect, what is the maximum number of 10-Gbps circuits supported? | 80GB |
| Within GCP, when a user/administrator deploys a virtual machine (VM) from Cloud Marketplace, the deployment is created with several default ____ , which are ways to organize deployments. | Labels |
| A GCP administrator/user is creating a Kubernetes Engine cluster to deploy multiple Pods inside the cluster. All container logs must be stored in BigQuery for later analysis. Using Google-recommended practices, which two approaches should be used? | 1.Use the Stackdriver Logging export feature to create a sink to BigQuery. Specify a filter expression to export log records related to your Kubernetes Engine cluster only. 2.Turn on Stackdriver Logging during the Kubernetes Engine cluster creation. |
| A ____ runs the services necessary to support the Docker containers that make up your cluster’s workloads. | Node |
| Within GCP, the HA VPN API contains an option for REDUNDANCY_TYPE that represents the number of interfaces you configure for the external VPN gateway resource. Which value is supported when there is one external VPN interface? | SINGLE_IP_INTERNALLY_REDUNDANT |
| Without using Dataproc, it can take from ___ to ___ minutes to create Spark and Hadoop clusters on-premises or through IaaS providers. | 5,30 |
| In GCP, by default, the Monitoring agent collects which of the following? | Disk, CPU, network, and process metrics |
| Objects stored in the GCP Cloud Storage have metadata associated with them. What are examples of Fixed-Key metadata for objects that users can change with sufficient permission? | Cache-Control Content-Disposition Object Holds |
| Which command is used to create a VPC from the command line in GCP? | gcloud compute networks create |
| In GCP, when you’re applying Identity and Access Management (IAM) to an instance, what is the minimum amount of time recommended to wait before using the service account? | 60 seconds |
| While managing an instance in GCP, administrators notice the START command is not working. When would this be the case? | The instance is in a TERMINATED state. |
| Which IP address is restricted by Google Cloud Platform? | 199.36.153.4 Restricted ranges include Google public IP addresses and commonly reserved RFC ranges. Of the available IP addresses, the only restricted option is 199.36.153.4 because it is the Private Google Access–specific virtual IP address range. |
| Within GCP, a VPC network’s ______ IP addresses are accessible from the user’s on-premises network. The user does not need a NAT device or VPN tunnel to reach _____ IP addresses. | Internal, internal |
| an instance is a single VM, a template is global and is a template for creating identical VM instances, a VM image is replicable instance, and VM from the marketplace is created with deployment manager |
Want to create your own Flashcards for free with GoConqr? Learn more.