Google Cloud Certified Associate Cloud Engineer Study Guide

ABOUT THE AUTHOR DAN SULLIVAN is a data architect specializing in data architecture, data analytics, and machine learning. Dan has also written the official Google Cloud study guides for the Professional Architect and Professional Data Engineer certification exams. He has taught courses on machine learning, data science, and cloud computing for LinkedIn Learning and Udemy, and holds a PhD in genetics, bioinformatics, and computational biology with a focus on infectious disease genomics.

• Introduction xxiAssessment Test xxxiiiChapter 1 Overview of Google Cloud 1Types of Cloud Services 2Compute Resources 3Storage 4Networking 7Specialized Services 8Cloud Computing vs. Data Center Computing 8Rent Instead of Own Resources 8Pay- as- You- Go- for- What- You- Use Model 9Elastic Resource Allocation 9Specialized Services 10Summary 10Exam Essentials 10Review Questions 12Chapter 2 Google Cloud Computing Services 17Computing Components of Google Cloud 18Computing Resources 19Storage Components of Google Cloud 23Storage Resources 23Databases 26Networking Components of Google Cloud 28Networking Services 28Identity Management and Security 30Development Tools 30Additional Components of Google Cloud 31Management and Observability Tools 31Specialized Services 32Summary 33Exam Essentials 33Review Questions 36Chapter 3 Projects, Service Accounts, and Billing 41How Google Cloud Organizes Projects and Accounts 42Google Cloud Resource Hierarchy 42Organization Policies 45Managing Projects 46Roles and Identities 49Roles in Google Cloud 50Granting Roles to Identities 50Service Accounts 52Billing 53Billing Accounts 53Billing Budgets and Alerts 56Exporting Billing Data 57Enabling APIs 59Summary 60Exam Essentials 61Review Questions 62Chapter 4 Introduction to Computing in Google Cloud 67Compute Engine 68Virtual Machine Images 68Virtual Machines Are Contained in Projects 77Virtual Machines Run in a Zone and Region 78Users Need Privileges to Create Virtual Machines 79Preemptible Virtual Machines 80Custom Machine Types 81Use Cases for Compute Engine Virtual Machines 82App Engine 83Structure of an App Engine Application 84App Engine Standard and Flexible Environments 85Use Cases for App Engine 86Kubernetes Engine 87Kubernetes Functionality 88Kubernetes Cluster Architecture 88Kubernetes Engine Use Cases 89Anthos 90Cloud Run 90Cloud Run Use Cases 91Cloud Functions 91Cloud Functions Execution Environment 91Cloud Functions Use Cases 93Summary 93Exam Essentials 95Review Questions 96Chapter 5 Computing with Compute Engine Virtual Machines 101Creating and Configuring Virtual Machines with the Console 102Main Virtual Machine Configuration Details 104Advanced Configuration Details 109Creating and Configuring Virtual Machines with Cloud SDK 117Installing Cloud SDK 117Example Installation on Ubuntu Linux 118Creating a Virtual Machine with Cloud SDK 119Creating a Virtual Machine with Cloud Shell 120Basic Virtual Machine Management 121Starting and Stopping Instances 121Network Access to Virtual Machines 121Monitoring a Virtual Machine 123Cost of Virtual Machines 123Guidelines for Planning, Deploying, and Managing Virtual Machines 125Summary 125Exam Essentials 126Review Questions 127Chapter 6 Managing Virtual Machines 131Managing Single Virtual Machine Instances 132Managing Single Virtual Machine Instances in the Console 132Managing a Single Virtual Machine Instance with Cloud Shell and the Command Line 141Introduction to Instance Groups 147Creating and Removing Instance Groups and Templates 147Instance Groups Load Balancing and Autoscaling 149Guidelines for Managing Virtual Machines 150Summary 150Exam Essentials 151Review Questions 152Chapter 7 Computing with Kubernetes 157Introduction to Kubernetes Engine 158Kubernetes Cluster Architecture 159Kubernetes Objects 159Deploying Kubernetes Clusters 162Deploying Kubernetes Clusters Using Cloud Console 162Deploying Kubernetes Clusters Using Cloud Shell and Cloud SDK 167Deploying Application Pods 168Monitoring Kubernetes 172Summary 172Exam Essentials 173Review Questions 174Chapter 8 Managing Standard Mode Kubernetes Clusters 179Viewing the Status of a Kubernetes Cluster 180Viewing the Status of Kubernetes Clusters Using Cloud Console 180Pinning Services to the Top of the Navigation Menu 182Viewing the Status of Kubernetes Clusters Using Cloud SDK and Cloud Shell 188Adding, Modifying, and Removing Nodes 193Adding, Modifying, and Removing Nodes with Cloud Console 193Adding, Modifying, and Removing Nodes with Cloud SDK and Cloud Shell 195Adding, Modifying, and Removing Pods 196Adding, Modifying, and Removing Pods with Cloud Console 196Adding, Modifying, and Removing Pods with Cloud SDK and Cloud Shell 200Adding, Modifying, and Removing Services 203Adding, Modifying, and Removing Services with Cloud Console 203Adding, Modifying, and Removing Services with Cloud SDK and Cloud Shell 205Creating Repositories in the Artifact Registry 207Viewing the Image Repository and Image Details with Cloud Console 207Summary 209Exam Essentials 209Review Questions 210Chapter 9 Computing with Cloud Run and App Engine 215Overview of Cloud Run 216Cloud Run Services 216Cloud Run Jobs 217Creating a Cloud Run Service 218Creating a Cloud Run Job 222App Engine Components 223Deploying an App Engine Application 226Deploying an App Using Cloud Shell and SDK 226Scaling App Engine Applications 228Splitting Traffic Between App Engine Versions 229Summary 230Exam Essentials 231Review Questions 232Chapter 10 Computing with Cloud Functions 237Introduction to Cloud Functions 238Events, Triggers, and Functions 238Runtime Environments 239Cloud Functions Receiving Events from Cloud Storage 241Deploying a Cloud Function for Cloud Storage Events Using Cloud Console 241Deploying a Cloud Function for Cloud Storage Events Using gcloud Commands 244Cloud Functions Receiving Events from Pub/Sub 245Deploying a Cloud Function for Cloud Pub/Sub Events Using Cloud Console 245Deploying a Cloud Function for Cloud Pub/Sub Events Using gcloud Commands 246Summary 247Exam Essentials 247Review Questions 249Chapter 11 Planning Storage in the Cloud 253Types of Storage Systems 254Cache 255Persistent Storage 257Object Storage 258Storage Types When Planning a Storage Solution 264Storage Data Models 265Object: Cloud Storage 266Relational: Cloud SQL and Cloud Spanner 266Analytical: BigQuery 268NoSQL: Cloud Firestore and Bigtable 270Choosing a Storage Solution: Guidelines to Consider 277Summary 278Exam Essentials 278Review Questions 280Chapter 12 Deploying Storage in Google Cloud 285Deploying and Managing Cloud SQL 286Creating and Connecting to a MySQL Instance 286Creating a Database, Loading Data, and Querying Data 288Backing Up MySQL in Cloud SQL 289Deploying and Managing Firestore 292Adding Data to a Firestore Database 292Backing Up Firestore 294Deploying and Managing BigQuery 294Estimating the Cost of Queries in BigQuery 294Viewing Jobs in BigQuery 296Deploying and Managing Cloud Spanner 297Deploying and Managing Cloud Pub/Sub 302Deploying and Managing Cloud Bigtable 306Deploying and Managing Cloud Dataproc 308Managing Cloud Storage 314Summary 316Exam Essentials 316Review Questions 317Chapter 13 Loading Data into Storage 321Loading and Moving Data to Cloud Storage 322Loading and Moving Data to Cloud Storage Using the Console 322Loading and Moving Data to Cloud Storage Using the Command Line 327Importing and Exporting Data 328Importing and Exporting Data: Cloud SQL 328Importing and Exporting Data: Cloud Firestore 332Importing and Exporting Data: BigQuery 332Importing and Exporting Data: Cloud Spanner 337Exporting Data from Cloud Bigtable 339Importing and Exporting Data: Cloud Dataproc 340Streaming Data to Cloud Pub/Sub 341Summary 342Exam Essentials 342Review Questions 344Chapter 14 Networking in the Cloud: Virtual Private Clouds and Virtual Private Networks 349Creating a Virtual Private Cloud with Subnets 350Creating a Virtual Private Cloud with Cloud Console 350Creating a Virtual Private Cloud with gcloud 354Creating a Shared Virtual Private Cloud Using gcloud 355Deploying Compute Engine with a Custom Network 357Creating Firewall Rules for a Virtual Private Cloud 359Structure of Firewall Rules 360Creating Firewall Rules Using Cloud Console 361Creating Firewall Rules Using gcloud 364Creating a Virtual Private Network 364Creating a Virtual Private Network Using Cloud Console 364Creating a Virtual Private Network Using gcloud 368Summary 368Exam Essentials 369Review Questions 370Chapter 15 Networking in the Cloud: DNS, Load Balancing, Google Private Access, and IP Addressing 375Configuring Cloud DNS 376Creating DNS Managed Zones Using Cloud Console 376Creating DNS Managed Zones Using gcloud 381Configuring Load Balancers 382Types of Load Balancers 382Configuring Load Balancers Using Cloud Console 383Configuring Load Balancers Using gcloud 386Google Private Access 389Managing IP Addresses 389Expanding CIDR Blocks 390Reserving IP Addresses 390Summary 391Exam Essentials 392Review Questions 394Chapter 16 Deploying Applications with Cloud Marketplace and Cloud Foundation Toolkit 399Deploying a Solution Using Cloud Marketplace 400Browsing Cloud Marketplace and Viewing Solutions 400Deploying Cloud Marketplace Solutions 403Building Infrastructure Using the Cloud Foundation Toolkit 411Deployment Manager Configuration Files 411Deployment Manager Template Files 414Launching a Deployment Manager Template 414Cloud Foundation Toolkit 415Config Connector 418Summary 418Exam Essentials 418Review Questions 420Chapter 17 Configuring Access and Security 425Managing Identity and Access Management 426Viewing Account IAM Assignments 426Assigning IAM Roles to Accounts and Groups 428Defining Custom IAM Roles 432Managing Service Accounts 436Managing Service Accounts with Scopes 436Assigning a Service Account to a VM Instance 438Viewing Audit Logs 440Summary 441Exam Essentials 441Review Questions 443Chapter 18 Monitoring, Logging, and Cost Estimating 447Cloud Monitoring 448Creating Dashboards 449Using Metric Explorer 450Creating Alerts 454Cloud Logging 458Log Routers and Log Sinks 458Configuring Log Sinks 459Viewing and Filtering Logs 459Viewing Message Details 462Using Cloud Diagnostics 463Overview of Cloud Trace 463Viewing Google Cloud Status 464Using the Pricing Calculator 464Summary 467Exam Essentials 468Review Questions 469Appendix Answers to Review Questions 473Chapter 1: Overview of Google Cloud 474Chapter 2: Google Cloud Computing Services 476Chapter 3: Projects, Service Accounts, and Billing 478Chapter 4: Introduction to Computing in Google Cloud 480Chapter 5: Computing with Compute Engine Virtual Machines 482Chapter 6: Managing Virtual Machines 485Chapter 7: Computing with Kubernetes 487Chapter 8: Managing Standard Mode Kubernetes Clusters 489Chapter 9: Computing with Cloud Run and App Engine 491Chapter 10: Computing with Cloud Functions 494Chapter 11: Planning Storage in the Cloud 496Chapter 12: Deploying Storage in Google Cloud 498Chapter 13: Loading Data into Storage 500Chapter 14: Networking in the Cloud: Virtual Private Clouds and Virtual Private Networks 502Chapter 15: Networking in the Cloud: DNS, Load Balancing, Google Private Access, and IP Addressing 504Chapter 16: Deploying Applications with Cloud Marketplace and Cloud Foundation Toolkit 507Chapter 17: Configuring Access and Security 509Chapter 18: Monitoring, Logging, and Cost Estimating 511Index 515