GCP Associate Cloud Engineer 练习

GCP is a suite of cloud services for compute, storage, networking, data, and machine learning. It is not an OS, database, or browser.

A project groups resources, permissions, and billing settings. VMs, buckets, and networks live inside a project.

A region is a geographic location containing zones. Zones are isolated data centers within a region.

A zone is an isolated data center within a region. Distributing resources across zones improves availability.

The Console is the web UI for managing GCP resources. gcloud is the CLI, and mobile apps are additional tools.

gcloud is the CLI for creating and managing GCP resources. It complements the Console and APIs.

Cloud Shell provides a browser terminal with gcloud and other tools ready to use. It is not a marketplace, bucket, or dashboard.

A billing account pays for resource usage and is linked to one or more projects. It is not a VM, firewall, or DNS.

A service account authenticates applications, VMs, and services to Google Cloud APIs. It is not a password, billing, or network object.

IAM controls who can access resources and what they can do. The other expansions are not official.

Compute Engine provides virtual machines. Cloud Storage stores objects, GKE runs Kubernetes, and BigQuery is analytics.

A VM instance is a virtual machine with configurable resources. Buckets, firewalls, and DNS zones are separate objects.

A machine type defines vCPUs and memory for a VM. OS, disk, and network are separate choices.

Persistent disks are durable block storage for VMs. Object storage, snapshots, and caches are different.

Instance groups manage collections of VMs. Managed groups support autoscaling and health checks.

Autoscaling adjusts instance counts based on metrics. Disk resizing, backups, and key rotation are separate operations.

Managed instance groups run identical VMs with autoscaling, health checks, and auto-repair. They are not storage, firewall, or DNS groups.

Cloud Functions runs single-purpose functions in response to events. Compute Engine is VMs, and databases and load balancers are separate.

Cloud Run runs containers serverlessly and scales automatically. It is not VMs, BigQuery, or DNS.

GKE is Google Kubernetes Engine for container orchestration. The other expansions are not official.

App Engine is a PaaS that runs applications without infrastructure management. Compute Engine is IaaS, and Cloud Storage is object storage.

Preemptible VMs are cheaper but can be terminated by Google. They are suitable for fault-tolerant batch workloads.

Cloud Storage stores objects such as images, files, and backups. It is not a database, VM, or load balancer.

A bucket is the container that holds objects and defines location and access. It is not a VM, firewall, or billing object.

Storage classes such as Standard, Nearline, Coldline, and Archive balance cost with access frequency. They are not machine types, rules, or records.

Cloud SQL provides managed MySQL, PostgreSQL, and SQL Server. BigQuery is a warehouse and Firestore is NoSQL.

Cloud Spanner offers strong consistency and horizontal scaling across regions. It is not a file system, queue, or balancer.

Firestore is a flexible, scalable NoSQL document database. Cloud SQL is relational, Cloud Storage is objects, and BigQuery is analytics.

BigQuery is a serverless data warehouse for analytics on large datasets. It is not compute, messaging, or content delivery.

Cloud Bigtable is a scalable NoSQL wide-column database for large analytical workloads. It is not relational, document, or object storage.

Cloud Filestore provides managed NFS file storage for workloads such as GKE and Compute Engine. It is not object, block, or warehouse storage.

A snapshot is a backup of a persistent disk at a point in time. Images are VM templates, and buckets are object containers.

Cloud CDN caches content at global edge locations to reduce latency. DNS, load balancing, and firewalls are separate.

A VPC provides isolated networking for GCP resources. It is not a VM, bucket, or DNS zone.

A subnet is a segment of a VPC address space. VMs, firewalls, and load balancers are separate resources.

Firewall rules control ingress and egress traffic by IP, port, and tags. They are not billing, storage, or machine settings.

Cloud Load Balancing spreads traffic across instances and regions. It is not a VM, DNS record, or firewall.

Cloud NAT lets private instances reach the internet without public IPs. It is not load balancing, VPN, or DNS.

Cloud VPN creates encrypted tunnels between on-premises networks and VPCs. It is not load balancing, DNS, or firewall.

Cloud Interconnect provides dedicated, higher-bandwidth connections to Google. VPN uses the internet, and DNS and CDN are different.

Cloud DNS hosts zones and records and resolves names. Load balancing, firewalls, and VPNs are networking services but not DNS.

Global load balancing uses anycast IPs to route users to the nearest healthy backend. It is not a VM IP, DNS, or firewall.

VPC peering connects two VPC networks so they can communicate privately. It is not internet access, firewall, or load balancing.

A role bundles permissions that can be granted to users or service accounts. It is not a VM, billing, or firewall.

An IAM policy binds roles to members at a resource level. It is not networking, storage, or machine configuration.

Custom roles let you grant only the permissions you need. They are not machine types, firewalls, or budgets.

Cloud KMS creates and manages cryptographic keys. It is not compute, load balancing, or DNS.

Cloud IAP controls access to applications based on identity and context. It is not a firewall, VPN, or monitoring tool.

Cloud Armor protects applications from DDoS and web attacks. DNS, load balancing, and key management are separate.

VPC Service Controls creates a security perimeter to reduce data exfiltration risk. It is not a VPC, firewall, or storage class.

Organization Policies set constraints on resources across projects. They are not billing, DNS, or machine configuration.

Cloud Monitoring collects metrics and sends alerts. Logging stores logs, and DNS and storage are separate.

Cloud Logging stores and queries application and platform logs. Monitoring handles metrics, and firewalls and load balancers are networking.

Alerting policies monitor conditions and send notifications. They are not firewalls, budgets, or DNS.

Cloud Trace analyzes latency across requests. Logging stores logs, Debugger inspects code, and Scheduler runs cron jobs.

Cloud Scheduler runs jobs on a schedule. Load balancers distribute traffic, queues decouple messages, and databases store data.

Compute Engine, GKE, Cloud Run, and Cloud Functions are all compute services on Google Cloud.

Cloud Storage, Cloud SQL, Firestore, and Cloud Bigtable are all storage or database services.

Preemptible VMs can be terminated by Google at any time, usually within 24 hours, so they are not guaranteed.

Cloud Storage stores objects, Cloud SQL is a managed relational database, BigQuery is a warehouse, and Cloud Functions is serverless compute.