Pass Your Google Cloud Certification Easy!

Prepare with top-notch Google Cloud certification practice test questions and answers, vce exam dumps, study guide, video training course from ExamCollection. All Google Cloud certification exam dumps & practice test questions and answers are uploaded by users who have passed the exam themselves and formatted them into vce file format.

Virtual Machines

3. Virtual Machines Console Walkthru

Welcome back. So now that you saw a virtual machine being created, let's just do a quick little tour of the view engine in GCP because I think it's important for you to get the feel and understand how some of the things come together in GCP because it's not totally obvious in some cases. So let's go ahead and go over to the Google Cloud Platform. Of course, go over to Compute Engine. Now I'm in VM instances, and you can see that I have two instances here. One is started, the other is not. So out of curiosity, I'm over here and I'm looking to see what's going on. I can see that under the VMI I've got the default network instance. I'm allowing http traffic now over here; you can see that the instance name for the boot disc is here. It's 10 GB, and it is a standard persistent disk. Now, availability policies—again, you could set those appropriately. And then if you go down here you couldenable when you configure the virtual machine, enable theseaccesses for these specific Google Cloud services. And then over here if you go over to Rest,you also get the response from the GCT reference. So you copy the code if you so choose. It's pretty cool. Okay, so let's go over here, and I want to edit this virtual machine. So if you go here and you can seeenable connecting, you connect via a serial port. Again, it's not like you have physical access, but you can at least connect to the command line if you so choose. Now you can see the machine type. I've got it set to use a shared CPU. And again, you could select whatever you so desired. Just remember that there's a cost for this when you're running them, and if you don't need that much power then don't select it. So much memory and customization Now I'm using the free account, so I don't get up to 64 cores. Of course, zone is central, and then I added a label, and so you go add a label. So let's say down the road you're in a large-cloud environment and you have 1,000 virtual machines running. You want an easy way to find their network interface. You can see I'm on the default page. The external IP is in a thermal address, which I can create if necessary, or none at all. Leave that alone. I can also add additional discs as well. So if I did, I could create a disk, and again, I could go attach it to that. So remember, you've got the standard persistent disk. So, what does standard persistent mean? That data is kept available. Then it's the same with SSD. Now the question is, do you need general storage or do you need performance? And again, that's a cost decision. You'll want to make sure you know. Then, if I wanted, I could attach a snapshot or a blank disc to go source image. I could go ahead and select the images that are available. So you could see that OS was sent there. Core OS. You could use Google Container Engine as well. So let's say my developers develop something in Google Container Engine, and I want to see how well the images actually work and to actually run the application in production. I go ahead and import the container, configure the image, and use that as a source and basically run off of that. If I said shoes, that's pretty neat. Again, you could select whatever you want for that. I'm just going to leave that as ten. You sent OS encryption; I can encrypt it, or I do not need to. So I'm going to call this boot camp, and I'll gocreate, and then it'll take a couple seconds or a minute, not too long, and it looks like it's done. Now this is the availability policy that we talked about. I want to make sure we get this because once again, there's a lot of confusion from what I have seen around availability policies and when to use what. Again, just pay attention to those. Now, for example, if you select automatic restart again, that's going to allow the virtual machine to restart on a crash or maintenance event. But remember that if you turn it off yourself, that's not going to do that. Now, what about if there is host maintenance? You have the choice to set it to migrate or to completely terminate your call. And then you could add metadata. Again, if you say choose, you want to find it easier, document it, sign it to a specific project, whatever. And then here, you could use the default Compute Engine account. Or you could also use the App Engine. Again, if your developers are using this, you may want to allow them access that way. And so this is essentially just an instance type. Again, you could see that there isn't much to it. It's fairly straightforward overall. So that will take a minute. I'm going to go back to instance groups here or go over to instance groups because I want to cover this as well. Because I believe one of the areas on the test that I believe may be lacking in quality—again, perhaps I should speak for myself—I didn't find a lot of content in the real architect course. So I wanted to cover this just because for those folks that do take the test, you understand the difference between a managed and an unmanaged instance group. It's very simple. It's just that again, if you don't study the content, it may not be totally clear to you. Okay, instance group name—whatever you want to call it. Put it in the description. Go over here. You could select multi zones.So for example, if you want high availability, leave it as multi-zone if you want single-zone availability. So basically, you could have it in the same zone, but again, you won't have H A.You could choose whatever zone you want. I'm going to send us east. One B. And so is this going to be managed or is this not going to be managed? and it tells you exactly what the differences are. And again, it says autoscaling and autohealing enrollment updates are not supported. Now clarify: if you're going to use dissimilar virtual machine instances, then effectively you need to use an unmanaged instance group in most cases. So again, be cautious with the way you set up your Zonal resources because it's more than possible to go in and create a VM and realise that you selected this one configuration and it's got this type of processor on it, and then you just realise that it's got a different revision of the processor on the next one, and guess what? It may not just work. Pay attention to that, and you've got to create an instance template. Now, when you create an instance template, you have the option of using a default or creating a custom one. Same thing here: I'm just going to use one vCPU. I could customise this. So for example, I could select the number of cores up to two. Let's say how much memory. I could extend memory as well, and the CPU platform could be automatic. Now again, this is where, I guess, the proof goes into the pudding, as Grandma used to say. When you're thinking about setting up a managed instance group, you need to pay attention to the processor types. This could affect your platform. Choose machine type, for example. So you choose that. Make sure you take a look at this documentation, and again, it tells you what's valid and what isn't. It goes into extending memory and tells you about the limitations that there may be as well. I won't go into everything there, but take a look at it. I'm going to just cancel it. I'm not going to bother with that for the time being. I'm going to cancel here, and again, I could go manage or unmanage as well. So I'll just leave that there for you. So you go ahead and play around with creating an instance group. But remember, the main goal of an instance group is typically to provide auto scaling, load balancing, and additional features that are needed for failover multi-zonal configuration instant templates. So you go over here to create a template as well. And if you want, again, you'll see that it's very similar to creating a VM. Go over here, select what you want to do, and go over here, down to management. Now this is where you get to throw in your startup information. So, for example, if you have specific software to install, you want to set up a VDI environment or whatever. You could post a script in there, and it would run during the runtime. Metadata Availability now, you could use apreemptive, as we spoke about, you coulduse a preemptible availability process. It is cheaper; you can leave it on or off; it's cheaper. However, if Google requires the resources, they can simply turn off the compute engine. Again, you could have it restart if there is a failure. And then what about maintenance as well? Now, if you go over to Disks again, you can see the ve it on or off; itAgain, a lot of this comes down to what you're doing and the complexity you want to get into. Now again, you want to turn on IP forwarding. If you've got applications that are basically collecting or receiving data, make sure that's on so you can show IP address ranges, et cetera. So again, I won't bore you with creating this again. And when you do create a template VM, it tells you its effective cost, for example, per month. Now, disc types, so you can see that there are four types, and again, standard persistent disk. You can create a disc over here if you want; it could be SSD as well. It also created image snapshots, so on and so forth. I could create a source image. Let's say I want to create it for Red Hat Linux and I want 100 gigs. It tells you how many IOPS you'll get read and write, as well as what the sustained input might be for that configuration. Then I go ahead and get that created. You'll see that it'll pop up here in about a minute, and you'll want to create your disc types judiciously because again, in a large corporate environment, not everyone needs to have all kinds of disc space. So again, there's a cost to that, and just be aware of that. So when you're partitioning the persistent disk, again, you don't want to make it too small so that they run out of space, but then don't create it too big either so that they have too much space. Snapshots Now, you go ahead and take a snapshot. Again, it'll tell you what you have over here. Create a snapshot. It has very simple images. So this tells you the available images. So you can see that these are all the available images, and once again, you can choose which ones you want. For example, you could choose Red Hat, which is very popular. You could select, like, a Red Hat image and then go ahead and create an image. You could use the source disk; I think it was disc three; that's 100 gigabytes. And then I could go ahead and use imageand then these are the images that are available,for example, and then it warns you that ifyou haven't used the API before with this config,it lets you know that's not fully configured. Then I go back. You can see that that project has been enabled. So yeah, feel free to play around with this. Go ahead and refresh then I This is committed. Use discounts. Now the committed use discounts allow you to commit to specific machine types ahead of time for up to three years. So it's one or three years right now. So you go over here to purchase, and it tells you the total. So again, the pricing is going to vary based on the region. Now you can see that one year was 21 days and three years were 15 days. You go ahead and then select the machine family and number of cores, and then you go ahead and purchase. That purchase discount will be granted to you once you're done. Then you go over to the details. That tells you the discount is going to cancel; I don't need to do that. Metadata. I'll go ahead and add metadata. Remember, metadata is data about data. Go over here. I get to add one. I can say GCP boot camp. I need to spell default properly. And then zone value is I'll just say local just forthe fun of it and then you can save it. Again, you want to use the metadata judiciously because, again, if you don't use it judiciously, what can happen is that you really lose track of where resources are if you really can't locate them appropriately. A more complex configuration is health checks. Now, a health check will basically just make sure your instances are up and running. You can now monitor with stackoverflow, which is another topic we'll go over. But again, you create a health check, and you could do that a few different ways. Zones, so it basically just lists the zones that are available for resource operations on the compute engine. This tells you the requests that are available. Quotas: we talked about quotas earlier. And then settings. This allows you to set your default location to whatever you so choose. And then you could also enable usage reports so that you could download a CSV of account usage and then copy it over to a bucket, for example. That's the end. Let's continue on.

4. Demo - Create A VM Instance

So we're back at the GCP dashboard, and so let's go to Compute Engine. Let's go configure a VM right now. So let's go ahead and go to Compute Engine. Now, before I go right over to the Compute Engine dashboard, there are many different ways to get to the Compute Engine. You can go over here to Resources, go over here to the Compute Engine section of the dashboard, or go over here and type in Compute Engine as well. So we're over here. Compute engine. What we'd like to do is create a virtual machine. Now, you'll see up here there is an area called "Create Instance." So we go create an instance, and we're going to leave the default name. Now remember, when you do create a name, I'm just going to go ahead and leave this just as an exercise. So if I put in caps, let's say, or anything like that, you'll see that it's not going to let me leave it. In other words, it'll stay red. But if I go back and just leave like instance one, I'm going to change it to two, which is how it was set to begin with. Leave that alone. So when you're naming your virtual machines, here's sort of my best advice. You want to name this in a unique manner for your project. So it could be for a specific department like development, operations, legal, whatever. Try to name it unique for the project. Remember, you're creating this under a project, and the project, as we spoke about earlier, is a way for you to manage your Google Cloud Platform resources. This is important to understand because the same instance name may exist in a different project or region. Just be aware of that. You can see in this zone that we are on US East. I'm going to leave it as D. And if I go over here, you can see that it gives me the estimated billing, or what it would cost to run this virtual machine per month based on the configuration that I have as of right now. So let's say I want to go to AMICRO, and you can see that this changes significantly. But if I want to have a specific vCPU configuration with additional memory, like a performance configuration, you'll see that the price will go up considerably. So again, just be aware of that. If you go custom, you can configure this up to 64 cores for the price. This is actually pretty cool. I like how they have the slide where you could actually change the number of cores and adjust that based on that. also play with the memory as well. And then you could also do what's called "expand memory," where it'll automatically extend the memory for you if needed. And then there are different configurations that you could use based on the machine type you're using. It will default to the specific processor configuration. Also, if you want to do something similar to mine, you'll typically need something called a GPU. And this GPU has a very powerful processing capability that you're going to typically use for analysing data, for example. So again, play around with this if this is of interest to you. And so let's go ahead and boot the disk. So you go ahead and change your boot disk. Here, you go ahead and select specific images that Google has predefined, or you could go in and then create your own images. You could import them in any way you want, including as snapshots or from an existing disk. Let's say, for example, you have additional machine images on the east coast and you want to import them from the east coast to the west. That's what that's for. So I'm going to go ahead and leave this the way it is. I'm going to let firewall access occur here for HTTP traffic. I could then scroll down, and you'll see that you could add basic capabilities around performance and security, create tags, and all that. But for the time being, let's go ahead and just kick off the VM here. But one of the things you do want to do is create, essentially, a label. Now this label is going to identify, for example, this VM. And let's say I want tolook for specific virtual machines. And so, for example, let's go—I just had a brain fart there. Let's go ahead and create another tag for like let'ssay, let's call this AWS import images, let's say. And so you go ahead and create a value. It could be whatever value you want to create to identify it. And so you go ahead and leave that there. So that way, you can do a search, for example, up here for that specific virtual machine metadata. You go in and create metadata as well as preemptability. This is basically where the virtual machine could be turned off due to system demands or turned on—basically off—if it's not being utilized. And so I go to create, and it's going to go ahead and create that instance. Now, it's very easy to spend an hour and a half just going through all the options with the virtual machine. But the good part is, for the cloud architect courses, you're not going to need to know all the fancy details. We just want you to know basically what some of the basic options are for creating a virtual machine, how to set up the firewall, and areas like that. OK, well let's go ahead and continue on.

Virtual Networking

1. Virtual Networking with GCP

You have the core data centers, the edge point of presence, the POPs, and then the edge caching and service needs. Now, if we go over here to the browser, and the link will also be in the reference section, we can scroll down here and see that we have the current regions and the planned regions, as well as the resources and what's available in each region and zone. Now if we go back up here, again, the goal wasjust to make sure that you're aware of the locations andthen we go over to Network and then you can seethis is where you could see like the edge point ofPresence and then the CBN points of Presence. Again, if you're a media company, then, of course, having a content delivery platform could make the difference between being profitable and not being profitable. So again, designing your network is very importantto do it properly the first time. And then just another note: Google does have submarine cables and then the current network infrastructure as well. So let's go back to the PowerPoint. Again, just do understand that there are three key elements, and I'm going to talk more about these in a minute. Now. virtual network objects. You're going to want to know these for the task. There was a question that asked about identifying what was considered a virtual network object and being able to correctly identify that. So again, just know projects, networks, subnetworks, regions, zones, IP addresses, virtual machines, firewalls, and Ruts. For example, organisations would not be network objects, nor would a file share or anything of that nature be okay. So I wanted to also cover networking from a very basic standpoint because again, it just seemed like they really wanted you to know GCP networking really well. Now you can have an internal IP, and this is allocated by DHCP. It's renewed every 24 hours. And again, the virtual machine name and IP address are registered with the DNS. If you need an external IP, that is, if you need to route outside of the GCP network, you should go ahead and assign that an address so that it will be a permanent address. It is reserved. So it is a static address, and you're billed for that address whether or not you reuse it with the VM or not. So the VM also doesn't know the external IP, it's just mapped. So basically, what you're doing is mapping the internal IP address to the external IP address. And again, this is all accounted for in the Google DHCP services. And on the test, what you can expect is a question that is going to make sure that you understand how to attach an external IP address to a virtual machine. Now again, don't get confused. You can't directly provision the external IP from the virtual machine; you get a provision from the internal IP to the external. So you're linking these up, essentially, which is what you're doing. Again, depending on how the question was answered or asked and how you answered it on the test, this could be tricky. So just be aware of that. And again, just a quick review there's.global, regional, and zonal resources. Do you understand that specific resources are global, and there is another handy chart in the link section on resources for you to look at, regional or zonal, and I have a different section under Manage Resources where I cover this a little bit in detail? Supported Protocols Now again, you want to know the supportive protocols for the virtual machines. It is TCP, UDP, or ICMP. Again, TCP, UDP, or ICMP support only IPV 4. Every virtual machine instance belongs to a network. So basically, anytime that you create a VM instance, if you don't assign it to a network, it'll be assigned to the default network if you don't provision it to a network. So again default network is used sort of already havethat there and then legacy and Subnet as well. Now why would you want to use a subnet? Again, it's basic networking in the sense that a subnet is a way to group similar or related resources together. And so again, if you want to create virtual machines or you want to add specific storage targets, then again, this is a good way to do that. You could define IP addresses in two ways: automatic or custom. Remember that. Define IP in how many ways? Two ways. It's automatic and custom. Routing. Now, for the test, I know most people are familiar with routing, and I'm not here to discuss routing protocols and everything related to OSPF, BGP, or anything else; you don't need to know that. But again, there are a couple of points that came up in the test, and I want to make sure you get them with routing control, flow of data, and directing traffic where you want it. So you want to use that for that main reason, and then the default routes can work in most cases. But again, if you need a custom route, you can do that as well. So for the test, just think of those two things and you'll be fine. Firewalls: now with firewalls, again, you have to know what tags are. You could group virtual machines, tags are user to findand again we'll do a demo on that as well. When you do tagging, you can apply that to all the VMs or just one, whatever you need to do. However, it is not strictly limited to an IP topology. Again, the firewall rules are pretty flexible. Firewall rules are again a global resource. You want to have them forcontrolling traffic, incoming right priority. But then you could also have egress as well. Now the default allows ingress only, and it matches the IPC to ranges. And again, the three tags that you want to know are ICMP, SSH, and RDP. So support allows for ingress only. Now, this is one of those things that you need to know for the task because, again, I was caught off guard by this one. Again, you need to know that it permits ingress, not denies it. So, if traffic is coming in, it allows it, but it does not have the ability to deny it. So remember that this is a little tricky. Again, just be aware of that. So default allows ingress only if it matches the destination, the cedar ranges for the protocols, the ports, the target, and billing. So with billing, it's again an area that you'll see on the test. Again, I saw at least one question on billing. And for billing, you want to know that for egress, you're going to be charged based on the region. You'll also be billed for traffic egress from one region to another. And again, the rates can be very different, and then you'll also be charged for traffic between zones within a region as well. Now, when you're taking the test, the way the billing questions were addressed is that they're more scenario based.And so one of the questions came off as customers': "So and so is trying to migrate from one region to another region, and they want to do this in a manner that is going to reduce costs." And so again, they give you different options to address that. And so with the billing, it's very important to understand that anything that goes basically outside of the GCP is charged. Anything that goes in is generally not charged. Now again, that's a little different for specific services, but overall, most traffic going in is not charged. Now, VM traffic in a single zone is not charged to GCP services. Again, like I said, it depends. So if you're running a big query and doing a lot of searches and queries, then you have a certain limit that is included, and if you exceed that limit, that's a different story. And lastly, it's very important to know what a bastion host is. There was a question about a bastion host, and why do you want one? So one of the main reasons to have a bastion host is that you want to use a bastion host to basically have a jump-on or jump-off point. So you need a way to connect to the GCP without worrying about having to scale. For example, like with SSH, that can be a challenge. SSH doesn't scale well. Also, it could be used for site-to-site VPN and then for the NAT gateway. So you'll see a question on Bastion Host and just realise that you have an inbound connection. Your Bastion host would be a second instance. here, and then you would connect to your primary instance via that route. So again, that's the main gist of what I want to make sure that you're aware of for the basics of virtual networking. Now, again, you know what a bastion host is. Again, know why you're billed for some traffic and then why you're not billed for other traffic as well. And again, this is an exercise. And just knowing the basics and realising what the basics are when you take the exam Again, have a bastion host, especially if you have a corporation that has a fair number of service connections, or a fair number of users trying to connect to the GCP platform. Okay, with that said, I think I reiterated the points well enough. Let's continue on to the next module.

2. Demo – VPC

So let's go ahead and create a V PC.So we go over here to the console. We want to go over to networking and then go to VPC networks. So now that I'm in the VPC networks, I go over here and I create a VPC network. So I want to call this something that is unique and then optional. Just say "class demo." I can go creative, create acustom, or I could create automatic. Now again, you have two options here. The question is, do you need specific addresses or an address range set up or not? If you want to make a VPC quickly and you don't have any special requirements set up as of yet for addressing or firewall rules or anything, then, again, automatic should work just fine. Now I go over here. What I want to do is make sure that, by default, when you create a network, all those ports for ingress are actually turned off. So you've got to enable those. You want to allow the specific IP addresses that you want. Again, if you have specific compliance security requirements, you should probably avoid going auto. I'm just doing this for a class demo, justto show you play around with this and figureit out if this works or not. So I go create, and you can see that, down here, it's still doing something. You can see up here that it is updating. So we'll give it a second, and then we'll refresh it. It should be just about there. It doesn't take that long, usually. There it is. And so you can see that the boot camp has been created, and it has created an IP range for each zone here. as you see. Again, I can go over to boot camp. It tells me that this is the range here, this is the VPC network, so on and so forth. I go over to edit, and it allows me to enable private Google access or to disable it. And again, I could just leave it in this case; there's no need to enable it. Again, now you can see that there are four firewall rules that have been applied as well for the inquest that we had set. So again, this is a good default VPC. Just to get you started, especially if you're just doing labs, this is good enough. But again, if you're in a corporate environment and you need to set up specific security requirements or specific IP ranges, then just go custom. That's really the only way you're going to be able to get it to work. With that said, let's continue on and talk about external IP addresses. Next.

ExamCollection provides the complete prep materials in vce files format which include Google Cloud certification exam dumps, practice test questions and answers, video training course and study guide which help the exam candidates to pass the exams quickly. Fast updates to Google Cloud certification exam dumps, practice test questions and accurate answers vce verified by industry experts are taken from the latest pool of questions.