Misc Flashcards
1
Q
What is Cloud Memorystore?
A
in memory cache service (managed Redis Service)
2
Q
What are some key points of Cloud Memorystore ? (5)
A
- Managed Redis service for caching frequently used data
- Sub-millisecond access
- Can be configured for high availability
- Can be used with Compute Engine, App Engine and Kubernetes Engine
- 1GB to 300 GB of memory
3
Q
What is Cloud Firestore?
A
Managed NoSQL database service designed for highly scalable web and mobile apps.
4
Q
What are some key points of Cloud Firestore? (3)
A
- Uses the document data model
- Designed for storing, synchronizing and querying data across distributed applications like mobile apps.
- Supports transactions and provides multi-regional replication
5
Q
What is Cloud Filestore?
A
Shared file system for use with Compute Engine and Kubernetes Engine
6
Q
What are some key points of Cloud Filestore? (4)
A
- Based on NFS
- Suitable for applications that require operating system-like file access
- exists independently of the VMs or applications that access those files
- can support a high number of IO operations per second
- variable storage capacity
7
Q
What is Cloud Armor?
A
It delivers defense at scale against infrastructure and application DDoS attacks.
8
Q
What are the key points of Cloud Armor? (5)
A
- allow or restrict access based on IP
- predefined rules to counter cross-site scripting attacks
- counter SQL injection
- restrict access based on geolocation of incoming traffic
- define rules at level 3 (network) and level 7 (application)
9
Q
What is Cloud CDN?
A
a Content Delivery Network - allows low latency response by caching content on a number of servers around the world.
10
Q
What is Cloud Interconnect?
A
a service for connecting existing networks to GCP
11
Q
What are three key points of Cloud Interconnect?
A
- traffic between your on-premise network and your VPC doesn’t traverse the public internet
- two options dedicated and partnered
- standard Google VPN services can be used if you don’t mind using the public internet
12
Q
What are the two options for Cloud Interconnect, and what are they different?
A
- Dedicated - direct access
a direct connection is maintained between an on-premise or hosted data center and a Google colocation facility - Partnered - peered
a third party network provider provides connectivity between company’s data center and google.
13
Q
What is Cloud SDK?
A
a command line interface for managing GCP resources.
14
Q
What client libraries exist for Cloud SDK?
A
Java, Python, Node.js, Ruby, Go, .NET and PHP
15
Q
What is Cloud Trace?
A
a distributed tracing system for collecting latency data from an application
16
Q
Key points of Cloud Trace?
A
- shows where applications are spending their time (bottlenecks)
- traces are generated when Cloud Trace is called from an application
- you can create reports that filter trace data according to report criteria
17
Q
What is Cloud Status?
A
provides status information on the services that are a part of GCP
The dashboard lists services and uses icons to display their statuses
18
Q
What is Cloud AutoML?
A
allows a developer with no experience to develop machine learning tools
19
Q
What is Cloud Machine Learning Engine?
A
for building and deploying scalable machine learning systems
20
Q
What is Cloud Natural Language Processing?
A
for analyzing human language and extracting information from text
21
Q
What is Cloud Vision?
A
an image analysis platform
22
Q
Billing account key points? (5)
A
- store info on how to pay for resources used.
- associated with one or more projects
- all projects must have a billing account associated with it.
- can have similar structure to resource hierarchy
- can be exported to BigQuery or Cloud Storage file (CSV or JSON)
23
Q
What are the two types of billing accounts?
A
- self-service : paid by debit, credit or bank account automatically
- invoiced - invoices sent to customers
24
Q
What are the 4 roles associated with billing accounts and what are their permissions?
A
- Billing Account Creator - can create new self-service billing accounts
- Billing Account Admin - manages billing accounts but cannot create them
- Billing Account User - allows user to link projects to a billing account
- Billing Account Viewer - view billing account cost and transactions
25
Billing budgets and alerts - key points (5)
1. you can be sent a notice when a certain percentage of your budget has been spent in a month
2. that amount can be a set amount or based on the previous month's amount
3. the three default percentages are 50%, 90% and 100%, but you can add more.
4. alert will be sent via email, but can also be sent to Cloud Pub/Sub
5. Since more than one project can be associated with a billing account, the alert amount needs to take into account the amount spent on all projects in the account
26
Block Storage key points (6)
1. uses fixed size blocks (4kb and up)
2. available on disks attached to a VM
3. persistent - exists independently of VM
4. ephemeral - exists only while VM is running
5. faster than object storage
6. used by File system and databases
27
What is Cloud Dataprep?
allows exploration and preparation of data for analysus
28
How are gcloud commands formatted?
1. start with a group to indicate a resource (e.g compute)
2. followed by a subgroup to indicate what type of group resource you are working with (e.g instances)
3. after a subgroup, usually a verb and then parameters
gcloud compute instances create [instance name] --zone us-central1a
29
What are the three components of the GCP resource hierarchy?
1. Organization
2. Folder
3. Project
30
Key points of an organization
1. it's the root of the hierarchy
2. typically responds to a company or organization
3. to create you need to use G Suite or Cloud Identity
4. a single Cloud Identity is associated with at most one organization
5. when G Suite or Cloud Identity creates a billing account, GCP creates an organization resource
31
Key points of a folder resource
1. an organization contains folders
2. a folder can contain projects or other folders
3. folders typically built around services provided by projects and/or the company's internal structure (departments)
32
Key points of a project
1. projects are where we create resources and use GCP services
2. anyone with the resourcemanager.projects.create IAM permission can create a project (this permission is given to everyone by default)
3. organizations have a project quota which can be increased by contacting google
33
What management tools does GCP have?
1. Stackdriver - collects metrics, logs and event data
2. Monitoring - extends Stackdriver by collecting performance data from GCP and external services
3. Logging - store, analyze and alert on log data from GCP and AWS
4. Error Reporting - aggregates crash information in a centralized interface
5. Trace - captures latency data
6. Debugger - inspect the state of running code, inject commands, view stack variables
7. Profiler - collect CPU and memory utilization
34
Networking in GCP key points (3)
1. GCP can have internal and external addresses
2. Your internal GCP network is defined as a VPC
- internal addresses are only accessible from your VPC
- external addresses are available from the internet
3. External addresses can be assigned to a device for a long time (static) or only while the VM is running and released when the VM is stopped (ephemeral)
35
Organization Policy Service key points
1. controls access to an organization's resources
2. lets you specify limits on the ways resources can be used
3. defined in terms of constraints on a resource (boolean)
- allow or deny a set of values
- deny a value and its child values
- allow all allowed values
- deny all values
4. can define policies with constraints and attach it to an object in the resource hierarchy
5. policies are inherited and cannot be overwritten by objects lower in the hierarchy
6. policies are managed through Organization Policies in IAM & admin
7. multiple policies can be in effect for a folder or project
36
What is preemptible?
It means that the machine in question could be shut down at any time if the resources it is consuming are needed elsewhere. This is a much cheaper option.
37
What is a service account?
A service account can be assigned to an application so that the application can run without giving users access to the underlying resources. (e.g giving the service account database access so that it can run queries for users without giving users access to the database)
38
Key points of a service account
1. Sometimes treated as a resource and sometimes treated as an identity.
2. Two types, user manages and GCP managed
3. Users can create up to 100 service accounts per project
4. GCP automatically creates some service accounts when certain products are created
5. service accounts can be managed as a group of accounts at the project level or at the individual account level
39
Key points of a VM
1. a Virtual Machine is an abstraction of a physical server which is essentially a program that emulates a physical server and provides CPU, memory storage and other services you would find on a typical physical server
2. it is run within a security-hardened hypervisor
- it runs on windows or linux
- can run multiple OSes while keeping them isolated from each other.
- each instance of a guest OS is a VM instance
3. they are predefined or customizable
