---
title: "Google Cloud Platform: GCP Essentials"
description: "Master the fundamentals of Google Cloud, including Project hierarchy, Compute Engine, GKE, and IAM."
author: "Mohammad Abu Mattar"
canonical: https://mkabumattar.com/quizzes/post/gcp-essentials-quiz
---

# Google Cloud Platform: GCP Essentials

Welcome to the GCP Basics Quiz! Google Cloud Platform is known for its incredible networking and industry-standard Kubernetes implementation. This quiz will test your knowledge of how Google organizes resources, its core compute and storage offerings, and the security model that keeps it all running. Good luck!

## Questions

### 1. In GCP, what is the base level of the resource hierarchy that is required to use any service?

- The Folder level for grouping
  - Folders are optional containers used to organize multiple projects within an organization.
- **The Project level for resources** ✅
  - Correct! Every GCP resource must belong to a Project, which serves as the billing and IAM boundary.
- The Organization level for nodes
  - The Organization is the root node, but individual accounts can function with just a Project.
- The Bucket level for objects
  - A Bucket is a specific storage resource, not a management container for other GCP services.

**Hint:** Everything belongs to one of these.

### 2. What is "Compute Engine" in GCP?

- A tool for web indexing
  - Indexing is a function of Search engines, not a cloud infrastructure service.
- **A Virtual Machine service** ✅
  - Correct! Compute Engine provides scalable Virtual Machines (VMs) running on Google infrastructure.
- A managed database engine
  - Managed databases are handled by services like Cloud SQL or Cloud Spanner.
- A serverless code runtime
  - Serverless code execution is the domain of Cloud Functions or Cloud Run.

**Hint:** Infrastructure as a Service (IaaS).

### 3. What does "GKE" stand for?

- Google Key Encryption
  - Encryption keys are managed by Cloud KMS, not GKE.
- **Google Kubernetes Engine** ✅
  - Correct! GKE is Google's managed environment for deploying and scaling containerized apps.
- Google Kernel Extension
  - Kernel extensions are OS-level components and not a managed GCP service.
- Global Kafka Environment
  - Managed Kafka is available via Pub/Sub or third-party tools, not GKE.

**Hint:** Google is the creator of Kubernetes.

### 4. Which storage service is best for storing unstructured data like images and logs?

- Cloud Bigtable analytics
  - Bigtable is a NoSQL database optimized for high-throughput analytical workloads.
- **Cloud Storage objects** ✅
  - Correct! Cloud Storage is an object store designed for unstructured data at any scale.
- Cloud Persistent Disks
  - Persistent Disks provide block storage for individual Virtual Machine instances.
- Cloud Filestore shares
  - Filestore provides fully managed NFS file shares for applications requiring a file system.

**Hint:** Object storage.

### 5. In GCP IAM, what is a "Service Account"?

- A billing credit for users
  - Billing credits are financial incentives, not identity management components.
- **An identity for applications** ✅
  - Correct! Service accounts provide non-human identities for apps and VMs to access GCP APIs.
- A premium support platform
  - Support services are handled through Google Cloud Customer Care plans.
- A list of project members
  - A list of members is simply an IAM policy binding, not a service account itself.

**Hint:** Identity for code, not people.

### 6. What is the "Google Cloud SDK" (gcloud)?

- A proprietary web browser
  - Chrome is the browser; gcloud is a command-line interface for cloud management.
- **A command-line toolset** ✅
  - Correct! The SDK includes the gcloud, gsutil, and bq tools for managing GCP resources.
- An online document editor
  - Google Workspace provides document editors, which are separate from GCP management tools.
- A physical rack server
  - The SDK is software used to manage remote cloud resources, not physical hardware.

**Hint:** Command-line management.

### 7. What is "Cloud Run"?

- A network latency optimizer
  - Latency optimization is handled by Cloud CDN or Premium Tier networking.
- **A serverless container platform** ✅
  - Correct! Cloud Run allows you to run request-aware containers on a fully managed infrastructure.
- A hardware diagnostic utility
  - Infrastructure health is monitored via the Operations Suite, not Cloud Run.
- A database migration service
  - Migration is handled by the Database Migration Service (DMS).

**Hint:** Serverless containers.

### 8. What is "IAM" in Google Cloud?

- Internal App Management
  - IAM specifically refers to Identity and Access Management across the platform.
- **Identity and Access Management** ✅
  - Correct! IAM lets administrators authorize who can take action on specific resources.
- Internet Access Monitor
  - This is not a recognized GCP service name or security component.
- Integrated Asset Metadata
  - Asset metadata is handled by Cloud Asset Inventory, not IAM.

**Hint:** Who can do what on which resource.

### 9. What is a "VPC" (Virtual Private Cloud) in GCP?

- A physical data center cable
  - VPC is a software-defined networking layer, not a physical hardware component.
- **A global virtual network** ✅
  - Correct! GCP VPCs are global resources, with subnets that can be regional.
- A managed password vault
  - Secret management is handled by Secret Manager, not the VPC networking layer.
- A VM inventory dashboard
  - Inventory is viewed in the Compute Engine console, while VPC manages the network.

**Hint:** Global networking.

### 10. What is "Cloud SQL"?

- A relational query language
  - SQL is the language; Cloud SQL is the managed service that runs the database.
- **A managed relational database** ✅
  - Correct! It provides managed MySQL, PostgreSQL, and SQL Server instances.
- A distributed NoSQL store
  - NoSQL storage is provided by services like Firestore or Bigtable.
- A data archival utility
  - Archival is a feature of Cloud Storage (Archive class), not Cloud SQL.

**Hint:** Managed relational databases.

### 11. What is "Preemptible VMs" (or Spot VMs)?

- VMs with high-speed disks
  - Disk speed is determined by the disk type (SSD/Standard), not the VM availability model.
- **Low-cost, ephemeral instances** ✅
  - Correct! These are affordable instances that GCP can reclaim if it needs the capacity.
- VMs for encrypted workloads
  - Encrypted workloads use Confidential VMs, which is a different feature set.
- Instances with dedicated CPUs
  - Dedicated hardware is referred to as Sole-Tenant Nodes, not Preemptible VMs.

**Hint:** Cheaper, but can be taken back.

### 12. What is "BigQuery"?

- A search tool for flat files
  - BigQuery is for structured data analysis using SQL, not general file searching.
- **A serverless data warehouse** ✅
  - Correct! It is a fully managed enterprise data warehouse for large-scale analytics.
- A high-memory VM instance
  - Compute-intensive workloads use high-memory machine types in Compute Engine.
- A global load balancer type
  - Load balancing is a networking service; BigQuery is a data analytics service.

**Hint:** Serverless data warehouse.

### 13. What is "Cloud Functions"?

- A library of portal widgets
  - Widgets are UI elements; Cloud Functions is a serverless compute service.
- **Serverless event-driven code** ✅
  - Correct! It runs code in response to events like file uploads or Pub/Sub messages.
- A CSS pre-processing tool
  - Cloud Functions is for backend logic, not frontend styling or pre-processing.
- A database replication task
  - Replication is a database management feature, not an event-driven function.

**Hint:** Event-driven serverless code.

### 14. What is "Cloud Build"?

- A server assembly workflow
  - Cloud Build automates software workflows, not physical hardware assembly.
- **A CI/CD automation service** ✅
  - Correct! It executes builds, tests, and deployments on Google Cloud infrastructure.
- A network diagram creator
  - Diagramming is done in design tools; Cloud Build manages code-to-artifact pipelines.
- A project resource manager
  - Resource management is handled via the Resource Manager API and Console.

**Hint:** CI/CD service.

### 15. What is "Identity-Aware Proxy" (IAP)?

- A consumer VPN service
  - IAP provides granular access control for enterprise apps, not general web privacy.
- **A zero-trust access gateway** ✅
  - Correct! It controls access to your cloud apps based on user identity and context.
- A static IP address pool
  - Static IPs are networking resources, not an identity-based access proxy.
- A developer IDE extension
  - IAP is a security infrastructure service, not an editor plugin.

**Hint:** Zero-trust access.

### 16. What is "Google Cloud Operations Suite"?

- A facility for Google staff
  - The Operations Suite is a software platform, not a physical location.
- **A monitoring and logging suite** ✅
  - Correct! It provides observability across the platform, including logs, metrics, and traces.
- A cloud hardware store
  - GCP is a service-based platform; there is no store for physical hardware.
- An HR management portal
  - HR tasks are unrelated to cloud infrastructure observability.

**Hint:** Monitoring and Logging.

### 17. What is "Pub/Sub"?

- A persistent block storage
  - Persistent storage is handled by disks or buckets; Pub/Sub is for messaging.
- **An asynchronous messaging bus** ✅
  - Correct! It decouples services that produce events from services that process events.
- A load balancer health check
  - Health checks verify backend status, while Pub/Sub transmits data between services.
- A database indexing service
  - Indexing is an internal database function, not a messaging bus.

**Hint:** Asynchronous messaging.

### 18. What is "App Engine"?

- A marketplace for mobile apps
  - The Play Store hosts mobile apps; App Engine hosts web application backends.
- **A serverless web app platform** ✅
  - Correct! It is a Platform-as-a-Service (PaaS) for building and deploying web applications.
- A browser-based code editor
  - The Cloud Shell Editor is the IDE; App Engine is the hosting environment.
- A virtual machine orchestrator
  - VM orchestration is the role of GKE or Compute Engine Instance Groups.

**Hint:** PaaS for web applications.

### 19. What is "Cloud Spanner"?

- A server maintenance utility
  - The name is metaphorical; Spanner is a database service, not a maintenance tool.
- **A global relational database** ✅
  - Correct! It offers SQL consistency with horizontal, global scalability.
- A non-relational cache store
  - Memory store (Redis/Memcached) provides caching; Spanner is a relational database.
- A local database for mobile
  - Mobile-local storage uses SQLite; Spanner is a massive, global cloud database.

**Hint:** Global relational database.

### 20. What is "Deployment Manager"?

- An automated testing tool
  - Testing is handled by Cloud Build or external CI tools, not Deployment Manager.
- **An Infrastructure as Code tool** ✅
  - Correct! It allows you to specify all the resources needed for your application in a declarative format.
- A user permissions manager
  - User permissions are managed by IAM, not by infrastructure deployment tools.
- A container registry service
  - Container images are stored in Artifact Registry, not Deployment Manager.

**Hint:** Infrastructure as Code.

### 21. What is "Secret Manager"?

- An encrypted project chat
  - Chat is a collaboration tool; Secret Manager is for sensitive technical data.
- **A vault for API keys and secrets** ✅
  - Correct! It provides a secure and auditable way to store API keys, passwords, and certificates.
- A tool for hiding log files
  - Logs are managed by Cloud Logging, while Secret Manager focuses on sensitive credentials.
- A firewall for sensitive data
  - Data-level firewalls are not what Secret Manager provides; it is a credential store.

**Hint:** Securing API keys and passwords.

### 22. What is "Anthos"?

- A serverless runtime for APIs
  - Serverless APIs are usually hosted on Cloud Run or Cloud Functions.
- **A multi-cloud management suite** ✅
  - Correct! Anthos allows you to manage Kubernetes clusters across GCP, on-prem, and other clouds.
- A physical networking cable
  - Anthos is a software platform, not a physical networking component.
- A data encryption algorithm
  - Encryption algorithms are cryptographic standards, not multi-cloud platforms.

**Hint:** Hybrid and multi-cloud management.

### 23. What is "Cloud Armor"?

- An encrypted disk partition
  - Disk encryption is handled by CMEK/CSEK, not Cloud Armor.
- **A DDoS and WAF security service** ✅
  - Correct! It protects your applications from web-based attacks and DDoS threats.
- A physical data center lock
  - Physical security is managed by Google; Cloud Armor is a network security service.
- A secure boot process for VMs
  - Secure boot is a feature of Shielded VMs, not Cloud Armor.

**Hint:** Security against DDoS and WAF.

### 24. What is "Cloud Load Balancing"?

- A server mass calculator
  - Infrastructure is measured in utilization, not physical weight or mass.
- **A global traffic distributor** ✅
  - Correct! It distributes traffic across multiple instances or regions to ensure reliability.
- A project cost-splitting tool
  - Cost management is handled via the Billing console, not load balancers.
- A source code formatter
  - Code formatting is a development tool task, not a networking service function.

**Hint:** High-performance traffic distribution.

### 25. What is "Artifact Registry"?

- A legacy data archival site
  - Archival is a storage function; Artifact Registry is for active build artifacts.
- **A container and package store** ✅
  - Correct! It stores container images and language packages like npm or Maven.
- A project documentation host
  - Documentation is usually hosted on wikis or Git repositories, not an artifact registry.
- A directory of system users
  - User directories are managed in Google Admin or Cloud Identity.

**Hint:** Evolution of Container Registry.

### 26. What is "Cloud Shell" in GCP?

- A virtualized network socket
  - Networking sockets are low-level components; Cloud Shell is a management environment.
- **A browser-based CLI and editor** ✅
  - Correct! It provides a temporary VM with a terminal and a code editor for management.
- A storage system for SQL data
  - SQL data is stored in Cloud SQL or Spanner, not in the Cloud Shell.
- A perimeter security firewall
  - Firewalls are networking rules; Cloud Shell is an administrative interface.

**Hint:** CLI inside the browser.

### 27. What is "Billing Account"?

- A list of system developers
  - Developers are listed in IAM; Billing accounts track payment and usage.
- **The payment source for projects** ✅
  - Correct! It defines who is responsible for the costs incurred by GCP projects.
- A discounted hardware portal
  - GCP does not have a hardware store; it is a service-based cloud provider.
- A tool for hiring IT experts
  - Hiring is a business process unrelated to the cloud billing infrastructure.

**Hint:** Where the money flows.

### 28. What is "Cloud CDN"?

- A private fiber network line
  - Dedicated lines are called Cloud Interconnect, not CDN.
- **A global content delivery network** ✅
  - Correct! It uses Google’s global edge network to cache content closer to users.
- A script for minifying code
  - Minification is a build-time task, while CDN is a runtime delivery service.
- An internal file transfer tool
  - Internal transfers use the cloud backbone; CDN is for external content delivery.

**Hint:** Edge caching.

### 29. What is "Quotas" in GCP?

- A log of build-time failures
  - Failures are logged in Cloud Logging, not tracked as quotas.
- **A set of resource usage limits** ✅
  - Correct! Quotas limit how much of a particular resource your project can use.
- A project management timeline
  - Timelines are part of project management software, not GCP infrastructure quotas.
- A code quality assessment tool
  - Quality assessment is handled by external tools like SonarQube.

**Hint:** Limits on resource usage.

### 30. What is "Cloud Console"?

- A physical server monitor
  - Cloud Console is a web-based interface, not a physical hardware display.
- **A web-based management GUI** ✅
  - Correct! It is the primary graphical interface used to manage Google Cloud resources.
- A low-level kernel debugger
  - Debugging at the kernel level is an OS task, not the purpose of the Cloud Console.
- A script for node automation
  - Automation is handled by Deployment Manager or Terraform, not the Console UI.

**Hint:** The GUI.