GCP Google Cloud Platform (GCP) Skills 5 — Questions and Answers
Question 1: Which GCP service provides real-time stream processing using Apache Beam pipelines?
- Dataproc
- Dataflow (Correct answer)
- Pub/Sub
- Datastream
Correct answer: Dataflow
Cloud Dataflow is a fully managed service that executes Apache Beam pipelines for both batch and real-time stream data processing.
Question 2: What is the purpose of Identity-Aware Proxy (IAP) in GCP?
- Encrypts all API traffic between GCP services and the internet
- Controls access to web applications based on user identity and context without a VPN (Correct answer)
- Provides OAuth2 token management for service accounts
- Scans inbound traffic for SQL injection and XSS attacks
Correct answer: Controls access to web applications based on user identity and context without a VPN
IAP enforces access control at the application layer based on Google identity and group membership, enabling zero-trust access without requiring a VPN.
Question 3: Which GCP load balancer type supports global anycast IP and routes traffic to the nearest healthy backend?
- Regional internal TCP/UDP load balancer
- External HTTP(S) load balancer (global) (Correct answer)
- Regional external TCP proxy load balancer
- Internal HTTP(S) load balancer
Correct answer: External HTTP(S) load balancer (global)
The global external HTTP(S) load balancer uses a single anycast IP address and Google's global network to route requests to the closest healthy backend.
Question 4: A startup wants to deploy a web app on GCP with minimal ops overhead and automatic scaling including scale-to-zero. Which is the best choice?
- Compute Engine with managed instance group
- Google Kubernetes Engine Autopilot
- Cloud Run (Correct answer)
- App Engine Standard
Correct answer: Cloud Run
Cloud Run is the most operationally simple option, supporting scale-to-zero, automatic scaling, and container-based deployment with no infrastructure management.
Question 5: What is the role of Cloud DNS in a GCP architecture?
- Provides DDoS protection at the DNS layer for GCP endpoints
- Manages scalable, reliable DNS zones and record sets for domains (Correct answer)
- Translates private IP addresses to public IPs for internet access
- Routes users to the nearest CDN edge node based on DNS queries
Correct answer: Manages scalable, reliable DNS zones and record sets for domains
Cloud DNS is a highly available, low-latency managed DNS service that lets you publish and manage DNS records for your domains on Google's global infrastructure.
Question 6: Which command correctly authenticates the gcloud CLI using Application Default Credentials for local development?
- gcloud auth login
- gcloud auth application-default login (Correct answer)
- gcloud config set account
- gcloud iam service-accounts keys create
Correct answer: gcloud auth application-default login
The command 'gcloud auth application-default login' sets up Application Default Credentials (ADC) so client libraries and SDKs authenticate automatically during local development.
Question 7: What happens to data in a Cloud Memorystore (Redis) instance if the instance is deleted?
- Data is automatically backed up to Cloud Storage before deletion
- All data is permanently lost unless a manual backup was created (Correct answer)
- Data is retained in a read-only snapshot for 30 days
- Data is migrated to a Cloud Firestore collection automatically
Correct answer: All data is permanently lost unless a manual backup was created
Cloud Memorystore for Redis is an in-memory store; deleting the instance destroys all data unless you explicitly created a snapshot or RDB export beforehand.
GCP Google Cloud Platform (GCP) Skills 5
Which GCP service provides real-time stream processing using Apache Beam pipelines?