GCP Core Concepts (GCP PDE) Flashcards
GCP Professional Data Engineer Flashcards

| Front | Back |
| How are GCP IAM roles applied | At the project, folder, or organization level |
| How are VMs in GCP connected to the internet | Using an External IP or through Cloud NAT |
| How do you assign an IAM role to a user | Using the GCP Console, gcloud CLI, or API to bind the role to the user’s email or service account |
| How many zones can a GCP region have | Typically 3 or more zones per region |
| What are custom IAM roles | Roles created by users to define specific sets of permissions tailored to their needs |
| What are global resources in GCP | Resources that can be used globally like Cloud Storage buckets or Pub/Sub topics |
| What are the three types of networks in GCP | Default, auto mode, and custom mode networks |
| What command-line tool is commonly used to interact with GCP | The gcloud CLI |
| What does the hierarchy of resources in GCP consist of | Organization, folders, projects, and resources |
| What happens if a zone goes down | A resource in a different zone within the same region can maintain availability depending on the architecture |
| What is a GCP region | A specific geographical location where you can host your resources |
| What is a GCP zone | A deployment area within a region representing a single failure domain |
| What is a key consideration for designing fault-tolerant systems in GCP | Using multiple zones or regions to ensure redundancy |
| What is a multi-regional service in GCP | Services designed to automatically distribute data or workloads across multiple regions for better availability |
| What is a predefined IAM role | A role with a set of permissions provided by GCP for common use cases |
| What is a Shared VPC | A VPC that allows multiple projects to share the same network resources |
| What is GCP’s default networking model | A global, private fiber network that interconnects all regions and zones |
| What is the difference between a regional and a global service | Regional services operate in one region while global services span multiple regions |
| What is the difference between an organization and a project in GCP | An organization is the top-level container for resources; a project groups resources specific to workloads |
| What is the principle of least privilege | Granting users the minimum permissions they need to perform their job |
| What is the purpose of Cloud DNS | Provides scalable, reliable, and managed Domain Name System services |
| What is the purpose of cloud storage buckets location settings | Determines whether data is stored globally, regionally, or within multi-regions |
| What is the purpose of GCP regions and zones | They allow users to deploy resources closer to their users or workloads while providing resiliency |
| What is the role of a service account | Provides an identity for applications or virtual machines to interact with GCP services |
| What is the role of IAM in GCP | It manages permissions and access control for users and resources |
Related Study Materials
About the Flashcards
Flashcards for the GCP Professional Data Engineer exam help you quickly recall how Google Cloud organizes and secures resources. Review the difference between regions, zones, and global services, understand the organization-folder-project hierarchy, and recognize why storage location settings matter. Cards also explain IAM concepts like predefined and custom roles, service accounts, and the principle of least privilege.
Additional cards cover networking fundamentals-default, auto, and custom VPCs, Shared VPC, Cloud DNS, and internet access via external IPs or Cloud NAT-along with gcloud CLI commands you may see on the test. You'll also review design patterns for high availability, including multi-zone deployments and multi-regional services that keep workloads resilient.
Topics covered in this flashcard deck:
- Regions and zones
- IAM roles & policies
- Resource hierarchy
- VPC networking
- High availability design