Google Cloud Certified Professional Cloud Architect All-in-One Exam Guide

2021·3.49 MB·English

by  Iman Ghanizada

Cover Page: i
About the Author Page: i
Title Page Page: iii
Copyright Page Page: iv
Dedication Page: v
Contents at a Glance Page: vi
Contents Page: viii
Acknowledgments Page: xv
Introduction Page: xvi
Chapter 1 Introduction to the Professional Cloud Architect Certification Page: xxvi
Reasons to Take the Professional Cloud Architect Exam Page: 1
Prerequisite Knowledge Page: 4
Case Studies Page: 8
Mountkirk Games Page: 8
Dress4Win Page: 9
TerramEarth Page: 11
General Tips on Taking Technical Certification Exams Page: 13
How to Use the Supplementary Resources Page: 15
Chapter Review Page: 16
Questions Page: 17
Answers Page: 19
Chapter 2 Overview of Cloud Computing and Google Cloud Page: 21
Overview of Cloud Computing Page: 23
Google Cloud vs. Other Clouds Page: 26
Security First Page: 26
Open Cloud Page: 27
Analytics and Artificial Intelligence Page: 27
Global Data Centers and Network Page: 27
Principles of System Design Page: 27
A 10,000-Foot Overview of GCP Page: 29
Compute Solutions Page: 30
Storage Solutions Page: 31
Database Solutions Page: 32
Data Analytics Page: 33
Networking Solutions Page: 34
Operations Solutions Page: 37
Developer Tools Page: 37
Hybrid Cloud and Multi-Cloud Solutions Page: 38
Migration Solutions Page: 38
Security and Identity Solutions Page: 39
Interacting with the GCP Page: 40
Google Cloud Console Page: 40
Command-Line Interface Page: 40
Exercise 2-1: CLI Example Page: 41
Client Libraries Page: 42
Business and Technical Context for the Google Cloud Architect Page: 42
Assessing Business Requirements Page: 42
Assessing Technical Requirements Page: 44
Chapter Review Page: 47
Additional References Page: 48
Questions Page: 48
Answers Page: 51
Chapter 3 Cloud Identity Page: 53
Setting Up a Cloud Identity and Admin Account Page: 53
Security Principles in the Cloud Page: 55
The AAA Security Model Page: 55
Least Privilege and Separation of Duties Page: 56
Cloud Identity Overview Page: 58
Managing Users in Cloud Identity Page: 58
How Users Authenticate to GCP Page: 60
2-Step Verification Page: 61
Security Auditing Page: 62
Chapter Review Page: 62
Additional References Page: 63
Questions Page: 64
Answers Page: 66
Chapter 4 Resource Management Page: 69
Cloud Resource Manager Overview Page: 70
Organization Hierarchy Page: 70
Organization, Folders, Projects, and Resources Page: 71
Organization Policies Page: 76
Best Practices Page: 76
Exercise 4-1: Creating a Project Page: 77
Chapter Review Page: 77
Additional References Page: 79
Questions Page: 79
Answers Page: 82
Chapter 5 Cloud Identity and Access Management Page: 84
Cloud IAM Overview Page: 86
Members, Roles, and Policies Page: 87
Google Accounts Page: 89
Groups Page: 89
Service Accounts Page: 89
IAM Roles Page: 91
IAM Policies Page: 93
IAM Conditions Page: 94
Accounting and Technical Compliance Page: 95
Chapter Review Page: 96
Additional References Page: 97
Questions Page: 97
Answers Page: 99
Chapter 6 Networking Page: 101
Networking Deep Dive Page: 102
Google’s Global Network Page: 102
Network Tiers Page: 104
Virtual Private Cloud, Subnets, Regions, and Zones Page: 105
Subnet Ranges and IP Addressing Page: 107
Routes and Firewall Rules Page: 110
Private Access Page: 113
Cross-Project Communication Page: 114
Cloud DNS Page: 117
Connectivity to Your Cloud Page: 118
Cloud Router Page: 119
Cloud VPN Page: 119
Cloud Interconnect Page: 121
Cloud Load Balancing Page: 123
Overview Page: 124
Cloud CDN Page: 125
Network Security Page: 125
Network Security Principles Page: 126
Google Front End Page: 127
Firewalls Page: 128
Cloud Armor Page: 131
Cloud NAT Page: 131
VPC Service Controls Page: 132
Identity-Aware Proxy Page: 132
Network Logging Page: 133
Chapter Review Page: 135
Additional References Page: 137
Questions Page: 137
Answers Page: 140
Chapter 7 Compute and Containers Page: 142
Google Compute Engine Page: 144
Virtual Machine Instances Page: 144
Images Page: 149
Instance Templates and Instance Groups Page: 150
Storage Options Page: 150
OS Login Page: 151
Google App Engine Page: 151
App Engine Flex vs. App Engine Standard Page: 152
Google Kubernetes Engine Page: 153
Cluster Architecture Page: 154
Configuration Page: 155
Node Upgrades Page: 156
Cloud Functions Page: 156
Cloud Run Page: 157
API Management Page: 157
Apigee Page: 158
Cloud Endpoints Page: 158
Secure Your APIs Page: 158
Chapter Review Page: 159
Additional References Page: 160
Questions Page: 160
Answers Page: 163
Chapter 8 Storage, Databases, and Data Analytics Page: 165
Storage Page: 166
Google Cloud Storage Page: 167
Cloud Filestore Page: 169
Persistent Disk Page: 170
Local SSD Page: 170
Databases Page: 171
Cloud SQL Page: 171
Cloud Spanner Page: 173
Cloud Bigtable Page: 173
Cloud Firestore Page: 174
Cloud Memorystore Page: 174
Data Analytics Page: 175
BigQuery Page: 175
Cloud Dataproc Page: 176
Cloud Dataflow Page: 177
Cloud Pub/Sub Page: 177
Data Security Page: 178
Data Classification Page: 178
Cloud DLP Page: 180
Encryption Page: 180
Chapter Review Page: 181
Additional References Page: 182
Questions Page: 183
Answers Page: 185
Chapter 9 DevOps Page: 187
The DevOps Philosophy Page: 188
Continuous Integration and Continuous Deployment Page: 189
Continuous Integration Page: 190
Continuous Deployment Page: 191
Infrastructure as Code Page: 192
Deployment Strategies Page: 193
Blue-Green Deployment Page: 194
Rolling Deployment Page: 194
Canary Deployment Page: 194
A/B Deployment Page: 194
Deployment Tools Page: 195
Google Cloud Deployment Manager Page: 195
Cloud Build Page: 195
Cloud Source Repositories Page: 196
Container Registry Page: 196
Chapter Review Page: 196
Additional References Page: 198
Questions Page: 198
Answers Page: 200
Chapter 10 Cloud Operations Page: 201
Cloud Logging Page: 203
Log Types Page: 205
Cloud Trace, Cloud Profiler, and Cloud Debugger Page: 207
Cloud Monitoring Page: 207
Workspaces Page: 208
Monitoring Agent Page: 208
Uptime Checks Page: 209
Metrics and Alerts Page: 209
Dashboards Page: 210
The Importance of Resilience Page: 210
Chapter Review Page: 212
Additional References Page: 213
Questions Page: 214
Answers Page: 216
Chapter 11 Security Page: 218
Security Fundamentals Page: 221
CIA Triad Page: 222
Control Categories Page: 222
Control Functions Page: 223
Asset × Threat × Vulnerability = Risk Page: 224
Security Modernization Page: 225
Compliance Page: 226
Infrastructure Security Highlights Page: 229
Identity Security Page: 229
Resource Management Security Page: 229
IAM Security Page: 230
Network Security Page: 231
Application Layer Security Page: 232
Data Security Page: 232
DevOps Security Page: 233
Security Operations Page: 234
Cloud Asset Inventory Page: 236
Security Command Center Page: 236
Chapter Review Page: 238
Additional References Page: 239
Questions Page: 240
Answers Page: 242
Chapter 12 Billing, Migration, and Support Page: 244
Billing Fundamentals Page: 246
Cost Control Page: 247
Migration Planning Page: 248
Resource Quotas vs. Capacity Page: 248
Transferring Applications and Data Page: 249
Training and Enablement Page: 250
Google Cloud Support Page: 251
Chapter Review Page: 252
Questions Page: 253
Answers Page: 255
Closing Thoughts Page: 255
Appendix A Objective Map Page: 255
Appendix B About the Online Content Page: 255
System Requirements Page: 255
Your Total Seminars Training Hub Account Page: 255
Privacy Notice Page: 255
Single User License Terms and Conditions Page: 255
TotalTester Online Page: 255
Technical Support Page: 255
Glossary Page: 255
Index Page: 255