Google Cloud Platform (GCP) Skills Flashcards
7 cards from real GCP practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Google Cloud Platform (GCP) Skills flashcards as text
Which GCP managed service is purpose-built for running Apache Spark and Hadoop workloads?
Answer: Dataproc
Cloud Dataproc is a managed service for running Apache Spark, Hadoop, Hive, and Pig workloads with fast cluster creation and per-second billing.
What is the function of Cloud Armor in GCP?
Answer: Provides DDoS protection and WAF rules for external HTTP(S) load balancers
Cloud Armor is GCP's managed DDoS mitigation and Web Application Firewall service that integrates with the external HTTP(S) load balancer.
A team wants to enforce that all GCP projects in their organization must have a specific label. Which tool enforces this policy?
Answer: Organization Policy Service
The Organization Policy Service lets you set constraints across your entire GCP resource hierarchy, including requiring specific labels on projects.
What is 'VPC Service Controls' used for in GCP?
Answer: Creating a security perimeter around GCP services to prevent data exfiltration
VPC Service Controls creates a logical perimeter around supported GCP services (e.g., BigQuery, Cloud Storage), blocking access from outside the perimeter even for authorized users.
Which Compute Engine feature ensures a VM restarts on a different host if the underlying hardware fails?
Answer: Automatic restart
The 'automatic restart' setting causes Compute Engine to restart a VM on another host if the VM terminates due to hardware or system failures.
In Cloud Functions (2nd gen), what is the maximum allowed memory per function instance?
Answer: 16 GB
Cloud Functions 2nd gen supports up to 16 GB of memory per instance, a significant increase over 1st gen's 8 GB limit.
What does 'customer-managed encryption keys' (CMEK) allow in GCP?
Answer: Customers control their own encryption keys stored in Cloud KMS instead of Google-managed keys
CMEK lets you provision and manage your own encryption keys in Cloud KMS, giving you control over key rotation, access, and revocation for GCP services.