Quickhits Flashcards
1
Q
APIs enabled by default (14 of them)
A
BigQuery APIBigQuery Storage APICloud Datastore APICloud Debugger APICloud Logging APICloud Monitoring APICloud SQLCloud StorageCloud Storage APICloud Trace APIGoogle Cloud APIsGoogle Cloud Storage JSON APIService Management APIService Usage API
2
Q
Dataproc and Dataflow
A
Cloud Dataflow uses the Apache Beam framework and can process streamed data. Cloud Dataproc is for Spark/Hadoop and doesn’t handle streamed data.
3
Q
get information about a GKE cluster
A
kubectl get deployment [Deployment Name] -o yaml
4
Q
What do you use when dealing with stack traces
A
Stackdriver Error Reporting
5
Q
Should you log to stdout and stderr on GCE for Stackdriver
A
No it is not the recommended way, write to a log file instead and configure Stackdriver to use that.
6
Q
What role allows modification of an App engine cookie time
A
App Engine Admin
7
Q
What is the maximum size of an object in GCS
A
5 TiB
8
Q
What the limit to the size of object names.
A
This limit is 1024 bytes.
9
Q
Maximum payload size for a GCS JSON API call
A
10MB.
10
Q
What are the bandwidth limits for GCS
A
200 Gbps for each region from Cloud Storage to Google services. 50 Gbps per-project, per-region default bandwidth quota for Google services accessing a bucketEgress to Cloud CDN is exempt from these quotas.
11
Q
GCS Minimum storage duration
A
Standard Storage : NoneNearline Storage : 30 daysColdline Storage : 90 daysArchive Storage : 365 days
12
Q
GCS Retrieval Fees
A
Standard Storage : $0 per GBNearline Storage : $0.01 per GBColdline Storage : $0.02 per GBArchive Storage : $0.05 per GBAbout Doubles
13
Q
Sample Storage Fees (differs by region)
A
Standard Storage: $0.023Nearline Storage: $0.013 1/2 standardColdline Storage: $0.006 .05 of NearlineArchive Storage: $0.0025 .05 of Archive
14
Q
If you want to use JSON to send structure logging to Cloud Logging from the command line, what must you do
A
Pass –payload-type=json
15
Q
How do you list the name of the currently active account
A
gcloud auth lists
16
Q
How do you linke a project to a billing account?
A
gcloud beta billing links a project to a billing account, in GUI it is automatic
17
Q
How are credentials pass to Cloud Functions
A
As Environment Variables - i.e. key value pairs
18
Q
What is the minimum number of service accounts an instance needs
A
The default instance account can be removed from an instance leaving none
19
Q
What was Cloud Logging previous known by?
A
previously Stackdriver Logs
20
Q
What email address is used for the default App Engine service
A
PROJECT_ID@appspot.gserviceaccount.com
21
Q
How many keys can you configure for a service account?
A
You may generate a small number of keys per service account to facilitate key rotation. Primarily used for outside services and so that you can rotate to new keys. 10 is the max.
22
Q
How do you enable to Compute API
A
Via the command line but a quicker way is to navigate to the Compute Engine of the console which automatically enables the GCE API.
23
Q
How do you configure authentication for using Cloud Shell
A
You do not have to configure authentication to be able to use Cloud Shell
24
Q
How does the “Defaults” project affect API inheritance
A
‘There is no such thing as a “defaults” project
25
What does “Metadata-Flavor: Google” do
This header indicates that the request was sent with the intention of retrieving METADATE VALUES, rather than unintentionally from an insecure source, and lets the metadata server return the data you requested.
26
What does legacyBucketWriter do
Grants permission to create, replace, list and delete objects
27
What is the command for generating a Kubernetes Secret from a file of key value pairs
kubectl create secret generic --from-file=.env.staging
28
What is Data Studio
Visualize your data through highly configurable charts and tables.Easily connect to a variety of data sources.Tell your data story with charts, including line, bar, and pie charts, geo maps, area and bubble graphs, paginated data tables, pivot tables, and more.
29
What is a limitation of roles/compute.storageAdmin
Grants permissions to create, modify, and delete disks, images, and snapshots, but not view the contents of Storage Buckets
30
What does the following dokubectl diff -f ./my-manifest.yaml
Compares the current state of a cluster with the contents of the manifest file
31
Can you expand a IP-Subnet in GCP?
Yes you can, provided there aren't conflicts. https://cloud.google.com/sdk/gcloud/reference/compute/networks/subnets/expand-ip-range
32
What is gvisor
gVisor is a userspace re-implementation of the Linux kernel API that does not need elevated privileges. In conjunction with a container runtime such as containerd , the userspace kernel re-implements the majority of system calls and services them on behalf of the host kernel.
33
What does Datastore Emulator do and how do you install it
Provides local emulation of the production Datastore environment, installed by gcloud components install cloud-datastore-emulator
34
How do you list the components available for installation in gcloud
gcloud components list
35
How can you manage GKE locally
By installing kubectl locallygcloud components install kubectl
36
What does roles/browser allow
To view the hierarchy of the GCP org structure
37
What does the following dokubectl config use-context
Allows you to access multiple clusters by using configuration files
38
What are some resource types that Deployment Manager can deploy
Compute EngineManaged InstancesGKEBigQueryCloud SQLAnd many more
39
How do you deploy a docker files
Create Docker image from it, upload to Container Registry then deploy from kubectl using that
40
What is Google Datastore
A time series NoSQL database
41
What does gcloud iam roles listdo?
It lists the IAM roles available
42
What do these roles doCompute AdminCompute Image UserCompute Instance AdminCompute OS Admin LoginCompute Storage AdminCompute Security Admin
Compute Admin - Full controlCompute Image User - Permission to list and read images without having other permissions on the image. Compute Instance Admin - Permissions to create, modify, and delete virtual machine instances. This includes permissions to create, modify, and delete disks, and also to configure Shielded VM settings. Compute OS Admin Login - Access to log in to a Compute Engine instance as an administrator user. Compute Storage Admin - Permissions to create, modify, and delete disks, images, and snapshots. Compute Security Admin - Permissions to create, modify, and delete firewall rules and SSL certificates, and also to configure Shielded VM settings.
43
What is a Shielded VM
Shielded VMs are virtual machines (VMs) on Google Cloud hardened by a set of security controls that help defend against rootkits and bootkits.
44
Does GCP allow migration of App Engine Standard apps to a new zone/region
No, it does not. Each Cloud project can contain only a single App Engine application, and once created you cannot change the location of your App Engine application.
45
What does the following dogcloud iam roles describe
It list information about the role along with the included permissions
46
What 3 IAM roles can run BigQuery queries?
roles/bigquery.adminroles/bigquery.jobUserroles/bigquery.user
47
For compute engine, what is the combined total limit for all metadata entries?
512KB
48
Are metadata entries case sensative?
Yes
49
What are the size limits for metadata entries
metadata key - 128 bytesmetadata value - 256 KB
50
For metadata fields, what are valid boolean values
TRUE Y, Yes, 1FALSE N, No, 0
51
How do you delete a GAE
You don't. The currently is no way to delete an existing app in GAE, or change its initial configuration, such as region. If such changes are needed you will have to spin up a new project.However you can disable the app by going top App Engine -> Settings -> Disable Application
52
What are the 7 layers for the OSI TCP/IP model
1) Physical2) Data Link3) Network4) Transport5) Session6) Presentation7) Application
53
Which App Engine flavor allows custom code
App Engine Flexible allows custom code and languages. Runs in a Docker Container
54
What is Cloud Run
a managed compute platform that enables you to run containers that are invocable via requests or events.
55
Does Cloud SQL support user defined functions
No, Cloud SQL does not support user defined functions but it does support user defined proceduresBigQuery does support user defined functions
56
Does BigQuery support UDF (User Defined Functions)
Yes, BigQuery does support UDFs.
57
What is Cloud Spanner
Spanner is a distributed, globally scalable SQL database service that decouples compute from storage,
58
How do you calculate number of IPs from a CIDR
Starting at 32, which gives 1 IP, the number of IPs double as the number decreases.32 - 131 - 230 - 429 - 828 - 1627 - 32
59
Can you set IAM permissions at the folder level in the organizational hierarchy?
Yes
60
Where would you migrate a Apache HBase workload to.
Cloud Bigtable, NoSQL database
61
BigtableBigQueryCloud Spanner
Cloud Bigtable. A fully managed, scalable NoSQL database BigQuery stores data using a columnar storage format that is optimized for analytical queries. (BI)Fully managed relational database with unlimited scale, strong consistency and up to 99.999% availability.
62
Cloud Run
For running managed highly scalable containerized applications
63
What would you use to migrate MySQL, PostgreSQL or SQL Server data bases to GCP
Database Migration Services
64
What does Striim do?
A service that provides automated connectors to build data streams from multiple sources into backend databases.
65
Datastream
a serverless change data capture (CDC) and replication service.Analogous to Apache Beam
66
gcloud command to expand a subnets IP range
gcloud compute networks subnets expand-ip-range NAME --prefix-length=PREFIX_LENGTH
67
BigQuery pricing
Analysis Pricing (data processing) and Storage pricing.Active storage $0.02 per GBLong-term storage $0.01 per GBQueries (on-demand)$5 per TBThe first 1 TB per month is free.Data IngestionBatch Loading Free using the shared slot pool.Streaming inserts (tabledata.insertAll) $0.01 per 200 MB. Individual rows are calculated using a 1 KB minimum size.BigQuery Storage Write API $0.025 per 1 GB The first 2 TB per month are free.Batch exports Free using the shared slot pool.Streaming reads (BigQuery Storage Read API) $1.1 per TB read 300 TB of data per month free
68
How much is BigQuery fixed rate pricing?
$2500 per month, does not include storage
69
What does a GKE DaemonSet, do.
A DaemonSet ensures that all (or some) Nodes run a copy of a Pod. As nodes are added to the cluster, Pods are added to them.
70
What is GKE StatefulSet
StatefulSet is the workload API object used to manage stateful applications and provide storage persistence for your workload
71
What is a GKE Ingress Object?
An API object that manages external access to the services in a cluster, typically HTTP. May provide load balancing, SSL termination and name-based virtual hosting.
72
Whats the difference between GKE AutoPilot and GKE Standard
Autopilot: GKE provisions and manages the cluster's underlying infrastructure, including nodes and node pools, giving you an optimized cluster with a hands-off experience.Standard: You manage the cluster's underlying infrastructure, giving you node configuration flexibility.
73
What are the 4 types of Cloud Storage Triggers
google.storage.object.finalize (default)google.storage.object.deletegoogle.storage.object.archivegoogle.storage.object.metadataUpdate
74
How do you grant access to Pub/Sub
Pub/Sub uses Identity and Access Management (IAM) for access control.Grant access on a per-topic or per-subscription basis, rather than for the whole Cloud project.Grant access with limited capabilities, such as to only publish messages to a topic, or to only consume messages from a subscription, but not to delete the topic or subscription.Grant access to all Pub/Sub resources within a project to a group of developers.
75
What is the gcloud command for creating a DB
gcloud sql instances create INSTANCE
76
Does BigQuery Data Transfer Service for Cloud Storage support versioning
No, if you include a generation number in the Cloud Storage URI, then the load job fails.
77
Is loading a compressed JSON file into BigQUery, faster or slower than loading an uncompressed file
It is slower, BigQuery cannot read compressed data in parallel.
78
What is the format for data and timestamp fields when loading CSV and JSON files into BigQuery?
YYYY-MM-DD and hh:mm:ss
79
What is the maximum gzip file size for loading into BigQuery?
4 GB.
80
What are the 4 emulators available to Google Cloud SDK
BigTable, Datastore, Firestore, and Cloud Pub/SubExample commandsgcloud components install cloud-datastore-emulatorgcloud beta emulators datastore start [flags]
81
What is Data Studio
Data Studio is a free tool that turns your data into informative, easy to read, easy to share, and fully customizable dashboards and reports. Use the drag and drop report editor
82
Does a server behind a GFE HTTPS load balancer require a valid certificate
NoWhen a GFE connects to backends that are within Google Cloud, the GFE accepts any certificate your backends present. GFEs do not perform certificate validation. For example, the certificate is treated as valid even in the following circumstances:The certificate is self-signed.The certificate is signed by an unknown certificate authority (CA).The certificate has expired or is not yet valid.The CN and subjectAlternativeName attributes don't match a Host header or DNS PTR record.
83
Which Cloud Storage classes offer low latency
All storage classes offer low latency (time to first byte typically tens of milliseconds) and high durability.
84
What are GKE Deployments
GKE Deployments are a declaration of what you want. Functionally, a Deployment uses ReplicaSets to make sure that the right configuration and number of pods are deployed to the cluster.
85
What are the three deployment lifecycles
A Deployments lifecycle can be in one of three states: progressing, completed, or failed.
86
Are predefined roles fine-grained?
Yes, predefined roles are fine-grained enough to set permissions for specific roles requiring sensitive data access.
87
Which is faster, BigQuery or BigTable?
Bigtable because it provides high-speed reads and writes, accommodates a simple schema, and is cost-effective
88
What is Cloud Foundation Toolkit (CFT)?
It provides a series of reference templates for Deployment Manager and Terraform which reflect Google Cloud best practices.
89
What are the 3 ways to protect a budget and what are their uses
1) Set up budgets and alerts in your project.Will notify but not prevent excessive resource consumption.2) QuotasQuotas will prevent resource consumption from exceeding specified limits.3) Export the billing reports, and analyze them with BigQueryAllows for analyzing the root cause for going over the budget but will not prevent overspend.
90
What is the maximum cache size for Apigee Edge
512KB
91
What is the maximum cache size for Cloud CDN
5TB
92
When would you use Identity-Aware Proxy (IAP)
Use IAP when you want to enforce access control policies for applications and resources. IAP works with signed headers or the App Engine standard environment Users API to secure your app.
93
What benefits does Virtual Private Network Service Controls provide
1) Can create granular access control policies in Google Cloud based on attributes like user identity and IP address.2) Can define a security perimeter around Google Cloud resources such as Cloud Storage buckets, Bigtable instances, and BigQuery datasets to constrain data within a VPC and control the flow of data.3) Can enforce a security posture across numerous Google Cloud services and projects.
94
How do you init a gcloud without it opening a web browser
Pass the --console-only flaggcloud init --console-only
