Professional Cloud Architect Google Cloud Certification Guide: Build a solid foundation in Google Cloud Platform to achieve the most lucrative IT certification, 2nd Edition

Description

Become a Professional Cloud Architect by exploring the essential concepts, tools, and services in GCP and working through practice tests designed to help you take the exam confidently Key FeaturesPlan and design a GCP cloud solution architectureEnsure the security and reliability of your cloud solutions and operationsAssess your knowledge by taking mock tests with up-to-date exam questionsBook Description Google Cloud Platform (GCP) is one of the industry leaders thanks to its array of services that can be leveraged by organizations to bring the best out of their infrastructure. This book is a comprehensive guide for learning methods to effectively utilize GCP services and help you become acquainted with the topics required to pass Google's Professional Cloud Architect certification exam. Following the Professional Cloud Architect's official exam syllabus, you'll first be introduced to the GCP. The book then covers the core services that GCP offers, such as computing and storage, and takes you through effective methods of scaling and automating your cloud infrastructure. As you progress through the chapters, you'll get to grips with containers and services and discover best practices related to the design and process. This revised second edition features new topics such as Cloud Run, Anthos, Data Fusion, Composer, and Data Catalog. By the end of this book, you'll have gained the knowledge required to take and pass the Google Cloud Certification – Professional Cloud Architect exam and become an expert in GCP services. What you will learnUnderstand the benefits of being a Google Certified Professional Cloud ArchitectFind out how to enroll for the Professional Cloud Architect examMaster the compute options in GCPExplore security and networking options in GCPGet to grips with managing and monitoring your workloads in GCPUnderstand storage, big data, and machine learning servicesBecome familiar with exam scenarios and passing strategiesWho this book is for If you are a cloud architect, cloud engineer, administrator, or any IT professional looking to learn how to implement Google Cloud services in your organization and become a GCP Certified Professional Cloud Architect, this book is for you. Basic knowledge of server infrastructure, including Linux and Windows Servers, is assumed. A solid understanding of network and storage will help you to make the most out of this book. Table of ContentsGCP Cloud Architect ProfessionalGetting Started with Google Cloud PlatformGoogle Cloud Platform Core ServicesWorking with Google Compute EngineExploring Google App Engine as a Compute OptionManaging Kubernetes Clusters with Google Kubernetes EngineDeploying Cloud-Native Workloads with Cloud RunManaging Cloud-Native Workloads with AnthosRunning Serverless Functions with Google Cloud FunctionsNetworking Options in GCPExploring Storage and Database Options in GCP – Part 1Exploring Storage and Database Options in GCP – Part 2Analyzing Big Data OptionsPutting Machine Learning to WorkSecurity and ComplianceGoogle Cloud Management OptionsMonitoring Your InfrastructureCase StudiesTest Your Knowledge Cover Title Page Copyright and credits Dedication Foreword Contributors About the reviewers Preface Section 1: Introduction to GCP Chapter 1: GCP Cloud Architect Professional Understanding the benefits of being a certified architect Registering for the exam What to expect from the exam Online proctored exams Suggested hints and tips Summary Further reading Chapter 2: Getting Started with Google Cloud Platform Introducing the cloud Understanding GCP GCP differentiators GCP locations Resource manager Summary Further reading Chapter 3: Google Cloud Platform Core Services Understanding computing and hosting services Exploring storage services Getting to know about networking services Going through big data services Understanding machine learning services Learning about identity services Summary Further reading Section 2: Manage, Design, and Plan a Cloud Solution Architecture Chapter 4: Working with Google Compute Engine Deploying our first GCE instance Deployment options Region Zone Boot disk Snapshots Existing disks Labels Confidential VM service Container Deletion protection Reservations Metadata Startup scripts Preemptibility Availability policy Automatic restart Shielded VM Deletion rule Node affinity labels GPUs and TPUs Instance templates and instance groups Setting the location Port name mapping Autoscaling Autohealing Containers on Compute Engine Running a simple Windows container on Compute Engine A quick look at Google Cloud VMware Engine Use cases Quotas and limits IAM roles Pricing Summary Further reading Chapter 5: Exploring Google App Engine as a Compute Option App Engine components Choosing the right location Working with App Engine Environment types App Engine standard environment Flexible environment Deploying an App Engine application Versions Splitting traffic Migrating traffic Firewall rules Settings Custom domain SSL certificates Scaling Cron jobs Memcache IAM Quotas and limits Pricing Summary Further reading Chapter 6: Managing Kubernetes Clusters with Google Kubernetes Engine An introduction to microservices Containers Kubernetes Kubernetes architecture Kubernetes objects Google Kubernetes Engine GKE Autopilot Node pools Container-Optimized OS (COS) Storage GKE cluster management Creating a GKE cluster IAM Kubernetes role-based access control Artifact Registry Cloud Build Best practices for building containers Quotas and limits Pricing Summary Further reading Chapter 7: Deploying Cloud-Native Workloads with Cloud Run Using Cloud Run Cloud Run containers Cloud Run triggers Deploying to Cloud Run Deploying a new revision Mapping custom domains IAM roles Quotas and limits Pricing Summary Further reading Chapter 8: Managing Cloud-Native Workloads with Anthos Anthos components Anthos clusters Anthos Connect Agent Fleets (formerly environs) Anthos cluster deployment options Anthos clusters on VMware (GKE on-prem) Anthos on AWS Anthos on Azure Anthos clusters on bare metal Anthos Config Management Service management with Anthos Service Mesh Istio Using Anthos Service Mesh Summary of Anthos Service Mesh Anthos Binary Authorization Migrate for Anthos and GKE Cloud Run for Anthos Quotas and limits Pricing Summary Further reading Chapter 9: Running Serverless Functions with Google Cloud Functions Main Cloud Functions characteristics Use cases Application backends Real-time data processing systems Smart applications Runtime environments Types of Cloud Functions HTTP functions Background functions Events Triggers Other considerations Cloud SQL connectivity Connecting to internal resources in a VPC network Environmental variables Cold start Local emulator Deploying Cloud Functions Deploying Cloud Functions with the Google Cloud Console Deploying functions with the gcloud command IAM Quotas and limits Pricing Summary Further reading Chapter 10: Networking Options in GCP Exploring GCP networking Understanding Virtual Private Clouds Connectivity Cost VPC Flow Logs Cross-VPC connectivity Load balancing Global versus regional load balancing External versus internal Proxy versus load balancer Load balancer types Comparison Choosing the right load balancer NAT NAT gateway Cloud NAT Hybrid connectivity VPN Interconnects Peering Choosing the right connectivity method Network Connectivity Center DNS DNS resolution Cloud DNS DNSSEC VPC firewall rules Default rules Implied rules Always allowed traffic rules Always denied rules User-defined rules Firewall logging Hierarchical firewall policies Private access options Summary Further reading Chapter 11: Exploring Storage and Database Options in GCP – Part 1 Choosing the right storage option Data consistency Understanding Cloud Storage Bucket locations Storage classes Data consistency Cloud Storage FUSE Creating and using a bucket Versioning and life cycle management Transferring data Cloud Storage Transfer Service Understanding IAM Quotas and limits Pricing Understanding Cloud Firestore Creating and using Cloud Datastore Summary of Datastore mode versus Native mode IAM Quotas and limits Pricing Understanding Cloud SQL Data consistency Creating and managing Cloud SQL Read replicas High availability Backup and recovery Database migration service Instance cloning IAM Quotas and limits Pricing Summary Further reading Chapter 12: Exploring Storage and Database Options in GCP – Part 2 Cloud Spanner Instance configurations Node count Processing units Replication TrueTime Data consistency Encryption Point-in-time recovery Creating a Cloud Spanner instance IAM Quotas and limits Pricing Bigtable Bigtable configuration Data consistency Planning capacity Creating a Bigtable instance and table IAM Quotas and limits Pricing Summary Further reading Chapter 13: Analyzing Big Data Options End-to-end big data solution Cloud Pub/Sub Creating a topic and a subscription Pub/Sub Lite IAM Quotas and limits Pricing Cloud Dataflow IAM Quotas and limits Pricing BigQuery BigQuery features Using BigQuery IAM Quotas and limits Pricing Dataproc Architecture IAM Quotas and limits Cloud IoT Core IAM Quotas and limits Pricing Data Fusion Core concepts IAM Quotas and limits Pricing Datastream API Additional considerations Summary Further reading Chapter 14: Putting Machine Learning to Work An introduction to AI and ML The seven steps of ML Gathering and preparing the data Choosing a model Training Evaluation Hyperparameter tuning Prediction Learning models GCP ML options TensorFlow Cloud Vertex AI Using Vertex AI Cloud TPUs Pretrained ML models The Cloud Speech-to-Text API The Cloud Text-to-Speech API The Cloud Translation API The Cloud Natural Language API The Cloud Vision API The Cloud Video Intelligence API Dialogflow AutoML Summary Further reading Section 3: Secure, Manage and Monitor a Google Cloud Solution Chapter 15: Security and Compliance Introduction to security Shared responsibility model Cloud Identity Resource Manager Identity and Access Management (IAM) Service accounts Cloud Storage access management Organization Policy Service Firewall rules and load balancers Cloud Web Security Scanner Monitoring and logging Encryption Data encryption keys versus key encryption keys CMEKs versus CSEKs Industry regulations PCI compliance Data loss prevention (DLP) Penetration testing in GCP CICD security overview Identity-Aware Proxy (IAP) TCP forwarding Access Context Manger Chronicle Summary Additional security services Security Command Center (SCC) Forseti Cloud Armor Secret Manager Summary Further reading Chapter 16: Google Cloud Management Options Using APIs to manage resources Using Google Cloud Shell The GCP SDK gcloud gsutil bq cbt Exploring Cloud Deployment Manager Terraform Cloud Foundation Toolkit Pricing Calculator Additional things to consider Summary Further reading Chapter 17: Monitoring Your Infrastructure Technical requirements Introduction to Google Cloud's operations suite Cost Configuring Google Cloud's operations suite Cloud Monitoring Groups Dashboards Alerting policies Uptime checks Monitoring agents Cloud Logging Legacy Logs Viewer Logs Explorer Exporting logs Logging agent Ops Agent Log-based metrics Cloud Audit Logs Activity Retention Google Cloud's operations suite for GKE GKE dashboard APM Trace Debugger Profiler Error Reporting Summary Further reading Section 4: Exam Focus Chapter 18: Case Studies Understanding how to approach the exam case studies What are we looking for in the case studies? Company overview Solution concept Existing technical environment Business requirements Technical requirements Executive summary Forming a solution Summary of Mountkirk Additional case studies EHR Healthcare TerramEarth Helicopter Racing League Summary Further reading Chapter 17: Test Your Knowledge Mock test one Mock test two Mock test three Mock test four Answers to mock test one Answers to mock test two Answers to mock test three Answers to mock test four Index Other Books You May Enjoy