If you want to enable snapshots IAM role, what do you need?
Compute Storage Admin Rights
What are some security concerns with keys?
They are long living and hard to keep track of
How does a web browser decide whether to open or download a file in cloud?
Based on it’s content-type metadata
If you want to do some easy job that starts once a day, what service should you ask for?
Try to get preemptible or spot compute engine VMs
If you want to see where your application/resource went, where should you check?
The project in gcloud’s active config
So just get their list
If you have mission critical instances that you want to make sure doesn’t go down, what should you turn on?
Automatic restart = ON
On-host maintenance = Migrate
instance template + (managed) instance group
If you want something deleted after a certain time, what should you configure?
A lifecycle policy
If you want to give a client a minimum amount of time to something, what should you use?
Use a signed URL since it can give a period of time to a user for a limited time
What’s a good way to develop infrastructure as code that you can easily start up?
Cloud Deployment Manager Templates
If you want to grant permission from a resource to another project, where do you grant those permissions?
You grant access to a resource from the resource itself
If you want to split traffic to a new version, should you make a new service for it or a new revision?
A new revision because if you made a new service, it messes up traffic for it
If you have a video game and need traffic from it, should you create a external or internal load balancer?
External since it will be coming from the public
What logs record every object that is read?
Data access audit logs
If a third party needs access to a google account, what should you do?
Generate SSH key pairs and add their public key to the VM
If you have a ready to go app that was previous in a sandbox test environment and want to push it to live, what should you do?
Create a new project using gcloud and deploy the app in it
If you want to dynamically provision many VMs from a config file, what service would you use?
Deployment Manager
If you want high availability with support point in-time recovery, should you enable failover replicas or binary logging option and why?
Binary logging option because it saves the timestamp of the crash so you can get gud later
