Google Cloud Managed Storage Services Basics
9 Questions
100 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the best way to use Google Cloud managed services from an application running in GKE?

  • Create a new service account, give it a Cloud IAM role with least privilege, embed the credential in the container image, and use the credential in API calls to the service.
  • Create a new service account, give it a Cloud IAM role with the Owner primitive role, store its credential in a Kubernetes secret, and use the credential in API calls to the service.
  • Create a new service account, give it a Cloud IAM role with least privilege, store its credential in a Kubernetes secret, and use the credential in API calls to the service. (correct)
  • Reuse the existing Compute Engine service account, give it a Cloud IAM role with the Owner primitive role, store its credential in a Kubernetes secret, and use the credential in API calls to the service.
  • Kubernetes storage classes are related to the storage classes offered by Cloud Storage.

    False

    Which Cloud Storage storage class offers the least expensive per-gigabyte per-time storage charges?

  • Coldline (correct)
  • Nearline
  • Multi-regional
  • Regional
  • If you need a SQL database that can scale beyond tens of terabytes, which of these Google Cloud managed storage services should you consider?

    <p>Cloud Spanner</p> Signup and view all the answers

    If you need a NoSQL database that is easy to use as storage for MapReduce operations, which of these Google Cloud managed storage services should you consider?

    <p>Cloud BigTable</p> Signup and view all the answers

    What step must you take in order to allow an application running inside a Pod in a GKE cluster to access a Google Cloud managed storage service in a secure and controlled manner?

    <p>The application must be provided with the credentials for a Google IAM account with the permissions required to access the Google Cloud service.</p> Signup and view all the answers

    Which approach follows the Google recommended practice for accounts used by an application to access managed Google Cloud services?

    <p>Create a separate Google Cloud Service Account for each application and assign permissions to those accounts.</p> Signup and view all the answers

    What Google Storage solution best matches the requirements for archiving systems that need to be kept for up to 5 years and audited quarterly?

    <p>Cloud Storage - Nearline</p> Signup and view all the answers

    How should you provide the credentials to applications deployed in GKE clusters so that they are protected?

    <p>Use Kubernetes secrets to manage and protect the credentials.</p> Signup and view all the answers

    Study Notes

    Using Google Cloud Managed Storage Services with GKE

    • Utilize a new service account with least privilege and store credentials in a Kubernetes secret for secure API access to Google Cloud services from GKE applications.
    • Kubernetes storage classes are not related to Cloud Storage's storage classes.
    • Coldline storage class offers the lowest per-gigabyte storage charges among Google Cloud Storage options.
    • For SQL databases scaling beyond tens of terabytes, consider using Cloud Spanner.
    • Cloud BigTable is suitable for NoSQL database needs, especially for MapReduce operations.
    • To enable secure application access to Google Cloud services, provide the application with credentials for a Google IAM account that has the necessary permissions.
    • The best practice is to create separate Google Cloud Service Accounts for each application and assign specific permissions accordingly.
    • For regulatory compliance archives requiring periodic audits, use Google Storage - Nearline, which is suitable for infrequent access yet requires long-term storage.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Description

    This quiz covers the integration of Google Cloud Managed Storage Services with Google Kubernetes Engine (GKE). Learn best practices such as using service accounts, secure credential storage, and choosing the right storage class for your applications and databases. Test your knowledge on the features and applications of various Google Cloud storage options.

    More Like This

    Missed Questions
    41 questions

    Missed Questions

    ExemplaryEducation avatar
    ExemplaryEducation
    Google Drive cloud storage
    5 questions

    Google Drive cloud storage

    EnergySavingQuantum avatar
    EnergySavingQuantum
    Google Cloud Storage Quiz
    16 questions

    Google Cloud Storage Quiz

    UnlimitedFoxglove avatar
    UnlimitedFoxglove
    Cloud Storage Management Quiz
    31 questions
    Use Quizgecko on...
    Browser
    Browser