Unlock the power of your data in the cloud! Get hands-on with Google Cloud's core data services like BigQuery and Looker to validate your practical skills in data ingestion, analysis, and management, and earn your Associate Data Practitioner certification!
Gauge your current knowledge

Gauge your current knowledge

A comparison matrix evaluating Google Cloud recovery tools (Backup and DR Service, Cloud SQL Backups, Cloud Storage, Instant Snapshots, Regional Disks, Disk Clones, and Machine Images) across primary use case, scope, and backup suitability.
A company operates a critical Cloud SQL for PostgreSQL production database and needs to implement a robust data protection strategy. They have the following requirements for their backup solution: - **Centralized management** of backups for multiple Cloud SQL instances across different Google Cloud projects. - **Long-term retention** for compliance, requiring backups to be kept for several years. - **Granular scheduling** for automated backups, allowing for more frequent than daily backups. - The ability to perform **point-in-time recovery** to restore the database to any specific moment. - Backups must be protected and recoverable even if the original Cloud SQL instance's project is accidentally deleted. Which Cloud SQL backup option should the company choose to meet these requirements?
Cloud SQL provides two main types of backups: automated backups and on-demand backups. Automated backups run on a schedule and capture only the changes since the last backup, making them efficient for storage and essential for supporting Point-in-Time Recovery (PITR), which lets you restore your database to any specific moment. On-demand backups are created manually by the user and stay stored until explicitly deleted, making them useful for capturing the database state before risky operations like major updates or schema changes.
When managing backups, administrators can choose between standard backups and enhanced backups. Standard backups are stored within the same project as the Cloud SQL instance and offer basic retention. Enhanced backups use the Backup and DR Service to provide centralized management, immutability (meaning they cannot be changed or deleted), and retention periods that can extend up to 99 years. When a Cloud SQL instance is deleted, users can optionally configure a final backup to be taken automatically, preserving data for restoration even after the resource no longer exists.
Cloud Storage takes a different approach to data protection through object versioning and soft delete features. Unlike Cloud SQL backups which restore an entire instance, exports to Cloud Storage create independent files that exist outside the database lifecycle. These exports allow you to restore specific databases or tables rather than the whole instance, giving you more granular recovery options for situations where you only need certain data rather than a complete restoration.
The Google Cloud Backup and DR Service provides centralized tools for managing backups across multiple projects and environments. The service lets administrators create backup vaults (secure containers for backup data), configure backup plans that define when and how often backups occur, monitor backup jobs as they run, and generate reports to track backup status over time. This centralized approach helps organizations maintain consistent data protection policies across their entire Google Cloud infrastructure.
Different recovery scenarios call for different Google Cloud tools. Instant snapshots are optimized for rapid data restoration and store only the changes since the previous snapshot, making them storage-efficient while enabling fast recovery. Regional disks synchronously replicate data across multiple zones within a region, providing high availability for workloads that need continuous operation, though they are not designed as a backup solution. Disk clones create quick copies of disks for testing or creating staging environments but should not be relied upon for disaster recovery. Machine images capture the state of multiple disks simultaneously, ensuring data consistency across all disks when backing up complex systems.
The Backup and DR Service integrates with the Security Command Center to monitor audit logs for backup access and detect potentially malicious activity. This security integration ensures that backups remain protected throughout their lifecycle and helps organizations meet compliance requirements. The service is particularly well-suited for enterprises managing large numbers of instances that need efficient, scalable, and automated data protection.
Cloud SQL supports both automated and on-demand backup strategies, with automated backups being incremental to save storage space. All backups can be encrypted using Google-managed keys by default or customer-managed encryption keys (CMEK) for additional control. Cloud SQL also supports disaster recovery by allowing instance restoration in different regions, providing regional redundancy that protects against zone-wide failures.
The backup retention system offers flexibility, with automated backups configurable to persist anywhere from 7 days to 99 years depending on the instance's requirements. When an instance is deleted, Cloud SQL retains both on-demand and automated backups at the project level, allowing recovery of the data even after the instance no longer exists. This differs from the final backup taken immediately before deletion, which serves as a final safety net.
Creating a backup plan through the Google Cloud Console involves selecting the target resources (such as Cloud SQL instances or Compute Engine VMs), choosing a storage destination called a backup vault, setting how frequently backups occur (ranging from hourly to annually), and defining how long each backup should be retained. These backup plans run automatically according to schedule, ensuring that data remains protected without manual intervention while giving administrators clear controls over retention periods and storage costs.