Professional Cloud Architect Google Cloud Certification Guide
 - Second Edition

Cover
Title Page
Copyright and credits
Dedication
Foreword
Contributors
About the reviewers
Preface
Section 1: Introduction to GCP
Chapter 1: GCP Cloud Architect Professional
	Understanding the benefits of being a certified architect
	Registering for the exam
	What to expect from the exam
		Online proctored exams
	Suggested hints and tips
	Summary
	Further reading
Chapter 2: Getting Started with Google Cloud Platform
	Introducing the cloud
	Understanding GCP
		GCP differentiators
		GCP locations
		Resource manager
	Summary
	Further reading
Chapter 3: Google Cloud Platform Core Services
	Understanding computing and hosting services
	Exploring storage services
	Getting to know about networking services
	Going through big data services
	Understanding machine learning services
	Learning about identity services
	Summary
	Further reading
Section 2: Manage, Design, and Plan a Cloud Solution Architecture
Chapter 4: Working with Google Compute Engine
	Deploying our first GCE instance
	Deployment options
		Region
		Zone
		Boot disk
		Snapshots
		Existing disks
		Labels
		Confidential VM service
		Container
		Deletion protection
		Reservations
		Metadata
		Startup scripts
		Preemptibility
		Availability policy
		Automatic restart
		Shielded VM
		Deletion rule
		Node affinity labels
		GPUs and TPUs
	Instance templates and instance groups
		Setting the location
		Port name mapping
	Autoscaling
	Autohealing
	Containers on Compute Engine
		Running a simple Windows container on Compute Engine
		A quick look at Google Cloud VMware Engine
		Use cases
	Quotas and limits
		IAM roles
	Pricing
	Summary
	Further reading
Chapter 5: Exploring Google App Engine as a Compute Option
	App Engine components
	Choosing the right location
	Working with App Engine
	Environment types
		App Engine standard environment
		Flexible environment
	Deploying an App Engine application
	Versions
	Splitting traffic
	Migrating traffic
	Firewall rules
	Settings
		Custom domain
		SSL certificates
	Scaling
	Cron jobs
	Memcache
	IAM
	Quotas and limits
	Pricing
	Summary
	Further reading
Chapter 6: Managing Kubernetes Clusters with Google Kubernetes Engine
	An introduction to microservices
	Containers
	Kubernetes
		Kubernetes architecture
		Kubernetes objects
	Google Kubernetes Engine
		GKE Autopilot
		Node pools
		Container-Optimized OS (COS)
		Storage
		GKE cluster management
		Creating a GKE cluster
		IAM
		Kubernetes role-based access control
		Artifact Registry
		Cloud Build
		Best practices for building containers
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 7: Deploying Cloud-Native Workloads with Cloud Run
	Using Cloud Run
		Cloud Run containers
	Cloud Run triggers
		Deploying to Cloud Run
		Deploying a new revision
	Mapping custom domains
		IAM roles
		Quotas and limits
	Pricing
	Summary
	Further reading
Chapter 8: Managing Cloud-Native Workloads with Anthos
	Anthos components
		Anthos clusters
		Anthos Connect Agent
		Fleets (formerly environs)
	Anthos cluster deployment options
		Anthos clusters on VMware (GKE on-prem)
		Anthos on AWS
		Anthos on Azure
		Anthos clusters on bare metal
	Anthos Config Management
	Service management with Anthos Service Mesh
		Istio
		Using Anthos Service Mesh
		Summary of Anthos Service Mesh
	Anthos Binary Authorization
	Migrate for Anthos and GKE
		Cloud Run for Anthos
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 9: Running Serverless Functions with Google Cloud Functions
	Main Cloud Functions characteristics
	Use cases
		Application backends
		Real-time data processing systems
		Smart applications
	Runtime environments
	Types of Cloud Functions
		HTTP functions
		Background functions
	Events
	Triggers
	Other considerations
		Cloud SQL connectivity
		Connecting to internal resources in a VPC network
		Environmental variables
		Cold start
		Local emulator
	Deploying Cloud Functions
		Deploying Cloud Functions with the Google Cloud Console
		Deploying functions with the gcloud command
	IAM
	Quotas and limits
	Pricing
	Summary
	Further reading
Chapter 10: Networking Options in GCP
	Exploring GCP networking
	Understanding Virtual Private Clouds
		Connectivity
		Cost
		VPC Flow Logs
		Cross-VPC connectivity
	Load balancing
		Global versus regional load balancing
		External versus internal
		Proxy versus load balancer
		Load balancer types
		Comparison
		Choosing the right load balancer
	NAT
		NAT gateway
		Cloud NAT
	Hybrid connectivity
		VPN
		Interconnects
		Peering
		Choosing the right connectivity method
		Network Connectivity Center
	DNS
		DNS resolution
		Cloud DNS
		DNSSEC
	VPC firewall rules
		Default rules
		Implied rules
		Always allowed traffic rules
		Always denied rules
		User-defined rules
		Firewall logging
	Hierarchical firewall policies
	Private access options
	Summary
	Further reading
Chapter 11: Exploring Storage and Database Options in GCP – Part 1
	Choosing the right storage option
		Data consistency
	Understanding Cloud Storage
		Bucket locations
		Storage classes
		Data consistency
		Cloud Storage FUSE
		Creating and using a bucket
		Versioning and life cycle management
		Transferring data
		Cloud Storage Transfer Service
		Understanding IAM
		Quotas and limits
		Pricing
	Understanding Cloud Firestore
		Creating and using Cloud Datastore
		Summary of Datastore mode versus Native mode
		IAM
		Quotas and limits
		Pricing
	Understanding Cloud SQL
		Data consistency
		Creating and managing Cloud SQL
		Read replicas
		High availability
		Backup and recovery
		Database migration service
		Instance cloning
		IAM
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 12: Exploring Storage and Database Options in GCP – Part 2
	Cloud Spanner
		Instance configurations
		Node count
		Processing units
		Replication
		TrueTime
		Data consistency
		Encryption
		Point-in-time recovery
		Creating a Cloud Spanner instance
		IAM
		Quotas and limits
		Pricing
	Bigtable
		Bigtable configuration
		Data consistency
		Planning capacity
		Creating a Bigtable instance and table
		IAM
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 13: Analyzing Big Data Options
	End-to-end big data solution
	Cloud Pub/Sub
		Creating a topic and a subscription
		Pub/Sub Lite
		IAM
		Quotas and limits
		Pricing
	Cloud Dataflow
		IAM
		Quotas and limits
		Pricing
	BigQuery
		BigQuery features
		Using BigQuery
		IAM
		Quotas and limits
		Pricing
	Dataproc
		Architecture
		IAM
		Quotas and limits
	Cloud IoT Core
		IAM
		Quotas and limits
		Pricing
	Data Fusion
		Core concepts
		IAM
		Quotas and limits
		Pricing
	Datastream API
	Additional considerations
	Summary
	Further reading
Chapter 14: Putting Machine Learning to Work
	An introduction to AI and ML
	The seven steps of ML
		Gathering and preparing the data
		Choosing a model
		Training
		Evaluation
		Hyperparameter tuning
		Prediction
	Learning models
	GCP ML options
	TensorFlow
	Cloud Vertex AI
		Using Vertex AI
		Cloud TPUs
	Pretrained ML models
		The Cloud Speech-to-Text API
		The Cloud Text-to-Speech API
		The Cloud Translation API
		The Cloud Natural Language API
		The Cloud Vision API
		The Cloud Video Intelligence API
	Dialogflow
	AutoML
	Summary
	Further reading
Section 3: Secure, Manage and Monitor a Google Cloud Solution
Chapter 15: Security and Compliance
	Introduction to security
		Shared responsibility model
	Cloud Identity
	Resource Manager
	Identity and Access Management (IAM)
		Service accounts
		Cloud Storage access management
		Organization Policy Service
	Firewall rules and load balancers
	Cloud Web Security Scanner
	Monitoring and logging
	Encryption
		Data encryption keys versus key encryption keys
		CMEKs versus CSEKs
	Industry regulations
		PCI compliance
		Data loss prevention (DLP)
		Penetration testing in GCP
		CICD security overview
		Identity-Aware Proxy (IAP)
		TCP forwarding
		Access Context Manger
		Chronicle
	Summary
	Additional security services
		Security Command Center (SCC)
		Forseti
		Cloud Armor
		Secret Manager
	Summary
	Further reading
Chapter 16: Google Cloud Management Options
	Using APIs to manage resources
	Using Google Cloud Shell
	The GCP SDK
		gcloud
		gsutil
		bq
		cbt
	Exploring Cloud Deployment Manager
	Terraform
	Cloud Foundation Toolkit
	Pricing Calculator
	Additional things to consider
	Summary
	Further reading
Chapter 17: Monitoring Your Infrastructure
	Technical requirements
	Introduction to Google Cloud's operations suite
		Cost
	Configuring Google Cloud's operations suite
	Cloud Monitoring
		Groups
		Dashboards
		Alerting policies
		Uptime checks
		Monitoring agents
	Cloud Logging
		Legacy Logs Viewer
		Logs Explorer
		Exporting logs
		Logging agent
		Ops Agent
		Log-based metrics
		Cloud Audit Logs
		Activity
		Retention
	Google Cloud's operations suite for GKE
		GKE dashboard
	APM
		Trace
		Debugger
		Profiler
	Error Reporting
	Summary
	Further reading
Section 4: Exam Focus
Chapter 18: Case Studies
	Understanding how to approach the exam case studies
	What are we looking for in the case studies?
		Company overview
		Solution concept
		Existing technical environment
		Business requirements
		Technical requirements
		Executive summary
		Forming a solution
		Summary of Mountkirk
	Additional case studies
		EHR Healthcare
		TerramEarth
		Helicopter Racing League
	Summary
	Further reading
Chapter 17: Test Your Knowledge
	Mock test one
	Mock test two
	Mock test three
	Mock test four
	Answers to mock test one
	Answers to mock test two
	Answers to mock test three
	Answers to mock test four
Index
Other Books You May Enjoy