@xdev-asia/xdev-knowledge-mcp 1.0.43 → 1.0.44

package/content/series/luyen-thi/luyen-thi-gcp-ml-engineer/chapters/05-phan-5-responsible-ai/lessons/09-bai-9-responsible-ai.md

@@ -0,0 +1,128 @@
+---
+id: 019c9619-lt03-l09
+title: 'Bài 9: Responsible AI & Security'
+slug: bai-9-responsible-ai
+description: >-
+  Google Responsible AI principles. Vertex AI Explainability (SHAP, IG).
+  Fairness indicators. Privacy: differential privacy, federated learning.
+  IAM, VPC-SC, CMEK cho ML workloads.
+duration_minutes: 50
+is_free: true
+video_url: null
+sort_order: 9
+section_title: "Phần 5: Responsible AI & Ôn tập"
+course:
+  id: 019c9619-lt03-7003-c003-lt0300000003
+  title: 'Luyện thi Google Cloud Professional Machine Learning Engineer'
+  slug: luyen-thi-gcp-ml-engineer
+---
+
+<h2 id="responsible-ai"><strong>1. Google's Responsible AI Principles</strong></h2>
+
+<table>
+<thead><tr><th>Principle</th><th>Key Requirement</th></tr></thead>
+<tbody>
+<tr><td><strong>Socially Beneficial</strong></td><td>Benefits society and individuals</td></tr>
+<tr><td><strong>Avoid Unfair Bias</strong></td><td>Test fairness across demographic groups</td></tr>
+<tr><td><strong>Safety</strong></td><td>Test across diverse scenarios, continuous evaluation</td></tr>
+<tr><td><strong>Accountable</strong></td><td>Appropriate human oversight and control</td></tr>
+<tr><td><strong>Privacy Preserving</strong></td><td>Protect training data privacy</td></tr>
+<tr><td><strong>Scientific Excellence</strong></td><td>Rigorous research standards</td></tr>
+<tr><td><strong>Available for Beneficial Uses</strong></td><td>Primary benefit criteria</td></tr>
+</tbody>
+</table>
+
+<h2 id="explainability"><strong>2. Vertex AI Explainability</strong></h2>
+
+<p>Vertex AI Explainability cung cấp feature attribution scores — giải thích tại sao model đưa ra prediction nào đó.</p>
+
+<table>
+<thead><tr><th>Method</th><th>For</th><th>How</th></tr></thead>
+<tbody>
+<tr><td><strong>SHAP (Shapley Values)</strong></td><td>Tabular models</td><td>Game theory: contribution của mỗi feature</td></tr>
+<tr><td><strong>Integrated Gradients (IG)</strong></td><td>Neural networks (image, text)</td><td>Gradient accumulation from baseline to input</td></tr>
+<tr><td><strong>XRAI</strong></td><td>Image models</td><td>Pixel-region attribution (better UX than IG)</td></tr>
+<tr><td><strong>Sampled Shapley</strong></td><td>Large tabular datasets</td><td>Approximate SHAP, faster</td></tr>
+</tbody>
+</table>
+
+<blockquote>
+<p><strong>Exam tip:</strong> "Explain why a loan was denied" → SHAP for tabular models. "Highlight which image regions drove classification" → Integrated Gradients or XRAI. Vertex AI Explainability phải được enable lúc deploy endpoint.</p>
+</blockquote>
+
+<h2 id="fairness"><strong>3. Fairness & Bias Detection</strong></h2>
+
+<table>
+<thead><tr><th>Tool/Concept</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><strong>Fairness Indicators</strong></td><td>GCP tool: evaluate model fairness metrics across demographic slices</td></tr>
+<tr><td><strong>What-If Tool</strong></td><td>Interactive exploration of model behavior, counterfactuals</td></tr>
+<tr><td><strong>Demographic parity</strong></td><td>Model predicts same rate across demographic groups</td></tr>
+<tr><td><strong>Equal opportunity</strong></td><td>Same recall/TPR across groups</td></tr>
+<tr><td><strong>Data slice evaluation</strong></td><td>Evaluate metrics per gender, race, age in TFX Evaluator</td></tr>
+</tbody>
+</table>
+
+<h2 id="privacy"><strong>4. Privacy Techniques</strong></h2>
+
+<table>
+<thead><tr><th>Technique</th><th>Description</th></tr></thead>
+<tbody>
+<tr><td><strong>Differential Privacy</strong></td><td>Add statistical noise to training data/model, prevents individual data re-identification</td></tr>
+<tr><td><strong>Federated Learning</strong></td><td>Train on distributed data without centralizing raw data — model updates only</td></tr>
+<tr><td><strong>Data Anonymization</strong></td><td>Remove PII before training (Cloud DLP API)</td></tr>
+</tbody>
+</table>
+
+<h2 id="security"><strong>5. Security Controls for ML Workloads</strong></h2>
+
+<table>
+<thead><tr><th>Control</th><th>Purpose</th></tr></thead>
+<tbody>
+<tr><td><strong>IAM roles</strong></td><td>Least-privilege access for ML service accounts</td></tr>
+<tr><td><strong>VPC Service Controls (VPC-SC)</strong></td><td>Security perimeter: prevent data exfiltration from BigQuery, GCS</td></tr>
+<tr><td><strong>CMEK (Customer-Managed Encryption Keys)</strong></td><td>Control encryption keys via Cloud KMS</td></tr>
+<tr><td><strong>Private IP for Vertex AI</strong></td><td>Training and endpoints use private networking</td></tr>
+<tr><td><strong>Cloud Audit Logs</strong></td><td>Who accessed what data, when (Data Access + Admin Activity)</td></tr>
+</tbody>
+</table>
+
+<pre><code class="language-text">VPC Service Controls Perimeter:
+
+┌────── Security Perimeter ─────────┐
+│  BigQuery  │  Cloud Storage       │
+│  Vertex AI │  Cloud KMS           │
+│  Dataflow  │  Secret Manager      │
+└──────────────────────────────────┘
+         │ (no exfiltration outside perimeter)
+         ✗ Unauthorized access blocked
+</code></pre>
+
+<h2 id="practice"><strong>6. Practice Questions</strong></h2>
+
+<p><strong>Q1:</strong> A financial services company deployed a loan approval ML model. Regulators require the company to explain why specific loan applications were denied. Which Vertex AI feature provides per-prediction feature importance scores for tabular models?</p>
+<ul>
+<li>A) Vertex AI Experiments</li>
+<li>B) Vertex AI Explainability with SHAP ✓</li>
+<li>C) Vertex AI Model Monitoring</li>
+<li>D) Fairness Indicators</li>
+</ul>
+<p><em>Explanation: Vertex AI Explainability with Shapley Values (SHAP) assigns an importance score to each feature for each individual prediction, explaining why a specific loan was denied by attributing the model's decision to specific input features like credit_score, income, debt_ratio.</em></p>
+
+<p><strong>Q2:</strong> A healthcare company needs to train ML models on patient data distributed across multiple hospitals. Data privacy regulations prohibit centralizing raw patient records. Which privacy-preserving ML approach should they use?</p>
+<ul>
+<li>A) Differential Privacy with central training</li>
+<li>B) Federated Learning ✓</li>
+<li>C) Data anonymization + BigQuery ML</li>
+<li>D) Cloud DLP de-identification</li>
+</ul>
+<p><em>Explanation: Federated Learning trains models on distributed data without moving raw data to a central location. Each hospital trains locally on its own data; only model updates (gradients) are shared and aggregated. Raw patient records never leave the hospital's environment.</em></p>
+
+<p><strong>Q3:</strong> A company processes sensitive financial data in BigQuery for ML training. They need to prevent data from being moved outside an approved security boundary to unauthorized GCP projects. Which GCP feature should they implement?</p>
+<ul>
+<li>A) Cloud KMS CMEK encryption</li>
+<li>B) VPC Service Controls (VPC-SC) perimeter ✓</li>
+<li>C) IAM role deny policies</li>
+<li>D) Cloud Armor WAF</li>
+</ul>
+<p><em>Explanation: VPC Service Controls creates a security perimeter around GCP services (BigQuery, Cloud Storage, Vertex AI). It prevents data exfiltration by blocking requests that would move data outside the defined perimeter, even from authenticated users. CMEK provides encryption control but doesn't prevent exfiltration.</em></p>

package/content/series/luyen-thi/luyen-thi-gcp-ml-engineer/chapters/05-phan-5-responsible-ai/lessons/10-bai-10-cheat-sheet-chien-luoc-thi.md

@@ -0,0 +1,108 @@
+---
+id: 019c9619-lt03-l10
+title: 'Bài 10: Cheat Sheet & Chiến lược thi GCP MLE'
+slug: bai-10-cheat-sheet-chien-luoc-thi
+description: >-
+  Bảng tổng hợp toàn khoá GCP Professional Machine Learning Engineer.
+  GCP service reference, evaluation metrics, domain weights, và chiến lược thi.
+duration_minutes: 40
+is_free: true
+video_url: null
+sort_order: 10
+section_title: "Phần 5: Responsible AI & Ôn tập"
+course:
+  id: 019c9619-lt03-7003-c003-lt0300000003
+  title: 'Luyện thi Google Cloud Professional Machine Learning Engineer'
+  slug: luyen-thi-gcp-ml-engineer
+---
+
+<h2 id="exam-structure"><strong>1. Cấu Trúc Đề Thi GCP Professional ML Engineer</strong></h2>
+
+<table>
+<thead><tr><th>Item</th><th>Details</th></tr></thead>
+<tbody>
+<tr><td><strong>Total Questions</strong></td><td>60 câu</td></tr>
+<tr><td><strong>Time Limit</strong></td><td>120 phút (2 giờ)</td></tr>
+<tr><td><strong>Passing Score</strong></td><td>~70% (Google không công bố chính xác)</td></tr>
+<tr><td><strong>Format</strong></td><td>Multiple choice, multiple select</td></tr>
+<tr><td><strong>Validity</strong></td><td>2 năm</td></tr>
+<tr><td><strong>Level</strong></td><td>Professional (intermediate to advanced)</td></tr>
+</tbody>
+</table>
+
+<h2 id="domain-weights"><strong>2. Domain Weights</strong></h2>
+
+<table>
+<thead><tr><th>Domain</th><th>Weight</th></tr></thead>
+<tbody>
+<tr><td>1. Architecting low-code ML solutions</td><td>~10%</td></tr>
+<tr><td>2. Collaborate within and across teams to manage data and models</td><td>~20%</td></tr>
+<tr><td>3. Scale prototypes into ML models</td><td>~20%</td></tr>
+<tr><td>4. Serve and scale models</td><td>~20%</td></tr>
+<tr><td>5. Automate & orchestrate ML pipelines</td><td>~20%</td></tr>
+<tr><td>6. Monitor ML solutions</td><td>~10%</td></tr>
+</tbody>
+</table>
+
+<h2 id="service-cheat-sheet"><strong>3. GCP ML Services Cheat Sheet</strong></h2>
+
+<table>
+<thead><tr><th>Task</th><th>GCP Service</th></tr></thead>
+<tbody>
+<tr><td>No-code image classification</td><td>Vertex AI AutoML Image</td></tr>
+<tr><td>SQL-based ML in data warehouse</td><td>BigQuery ML</td></tr>
+<tr><td>Custom TensorFlow/PyTorch training</td><td>Vertex AI Custom Training</td></tr>
+<tr><td>Hyperparameter optimization</td><td>Vertex AI Hyperparameter Tuning (Bayesian)</td></tr>
+<tr><td>Feature consistency training/serving</td><td>Vertex AI Feature Store</td></tr>
+<tr><td>ML workflow orchestration (pipelines)</td><td>Vertex AI Pipelines (KFP)</td></tr>
+<tr><td>Experiment tracking</td><td>Vertex AI Experiments</td></tr>
+<tr><td>Model versioning</td><td>Vertex AI Model Registry</td></tr>
+<tr><td>A/B testing model versions</td><td>Vertex AI Endpoints traffic splitting</td></tr>
+<tr><td>Monitor feature skew/drift</td><td>Vertex AI Model Monitoring</td></tr>
+<tr><td>Explain model predictions</td><td>Vertex AI Explainability (SHAP, IG)</td></tr>
+<tr><td>Real-time event ingestion</td><td>Pub/Sub</td></tr>
+<tr><td>Batch + streaming ETL (unified)</td><td>Dataflow (Apache Beam)</td></tr>
+<tr><td>Spark/Hadoop workloads</td><td>Dataproc</td></tr>
+<tr><td>ML pipeline orchestration (multi-service)</td><td>Cloud Composer (Airflow)</td></tr>
+<tr><td>Natural language analysis (no training)</td><td>Cloud Natural Language API</td></tr>
+<tr><td>Document extraction</td><td>Document AI</td></tr>
+<tr><td>Speech to text</td><td>Cloud Speech-to-Text API</td></tr>
+<tr><td>Prevent data exfiltration</td><td>VPC Service Controls</td></tr>
+<tr><td>Customer-managed encryption</td><td>Cloud KMS (CMEK)</td></tr>
+</tbody>
+</table>
+
+<h2 id="traps"><strong>4. Common Exam Traps</strong></h2>
+
+<table>
+<thead><tr><th>Trap</th><th>Correct Answer</th></tr></thead>
+<tbody>
+<tr><td>"No ML expertise, image classification"</td><td>AutoML Image (not custom training)</td></tr>
+<tr><td>"Train on data already in BigQuery"</td><td>BigQuery ML (not Vertex AI)</td></tr>
+<tr><td>"Features differ at training vs serving"</td><td>Vertex AI Feature Store (not re-training)</td></tr>
+<tr><td>"Trigger retraining when data arrives"</td><td>GCS notification → Eventarc → Vertex AI Pipeline</td></tr>
+<tr><td>"Explain why model rejected application"</td><td>Vertex AI Explainability (SHAP)</td></tr>
+<tr><td>"Train on distributed hospital data"</td><td>Federated Learning</td></tr>
+<tr><td>"Prevent BigQuery data exfiltration"</td><td>VPC Service Controls</td></tr>
+<tr><td>"Compare model performance across runs"</td><td>Vertex AI Experiments</td></tr>
+</tbody>
+</table>
+
+<blockquote>
+<p><strong>Exam tip:</strong> GCP Professional ML Engineer thường hỏi về architecture decisions, không phải API syntax. Key question patterns: "which service BEST fits the requirement", "what is the FIRST step", "which approach requires the LEAST operational overhead". Luôn ưu tiên managed services của GCP khi câu hỏi có "minimal management" hoặc "serverless".</p>
+</blockquote>
+
+<h2 id="study-plan"><strong>5. Kế Hoạch Ôn Tập</strong></h2>
+
+<table>
+<thead><tr><th>Ngày</th><th>Focus</th></tr></thead>
+<tbody>
+<tr><td>Day 1</td><td>Vertex AI full platform: Training, Pipelines, Endpoints, Monitoring</td></tr>
+<tr><td>Day 2</td><td>Data engineering: Pub/Sub, Dataflow, Dataproc, Cloud Composer</td></tr>
+<tr><td>Day 3</td><td>BigQuery ML + Feature Engineering + Feature Store</td></tr>
+<tr><td>Day 4</td><td>Responsible AI: Explainability, Fairness, Privacy, Security</td></tr>
+<tr><td>Day 5</td><td>Practice exam 1 — identify weak areas</td></tr>
+<tr><td>Day 6</td><td>Review weak areas + Practice exam 2</td></tr>
+<tr><td>Day 7</td><td>Cheat sheet review only</td></tr>
+</tbody>
+</table>

package/content/series/luyen-thi/luyen-thi-gcp-ml-engineer/index.md

@@ -6,7 +6,7 @@ description: >-
   Lộ trình ôn tập toàn diện cho kỳ thi Google Cloud Professional Machine Learning
   Engineer. Vertex AI, BigQuery ML, TFX pipeline, MLOps trên GCP.
 
-featured_image: null
+featured_image: images/blog/gcp-ml-engineer-series-banner.png
 level: advanced
 duration_hours: 35
 lesson_count: 10

package/content/series/luyen-thi/luyen-thi-kcna/index.md

@@ -0,0 +1,168 @@
+---
+id: lt-kcna-series-001
+title: "Luyện thi KCNA — Kubernetes and Cloud Native Associate"
+slug: luyen-thi-kcna
+description: >-
+  Lộ trình ôn tập toàn diện cho kỳ thi KCNA (Kubernetes and Cloud Native Associate).
+  Bao phủ đầy đủ 5 domain: Kubernetes Fundamentals (46%), Container Orchestration (22%),
+  Cloud Native Architecture (16%), Observability (8%), Application Delivery (8%).
+  9 bài học chuyên sâu kèm bài tập trắc nghiệm tiếng Anh.
+
+featured_image: null
+level: beginner
+duration_hours: 20
+lesson_count: 9
+price: '0.00'
+is_free: true
+view_count: 0
+average_rating: '0.00'
+review_count: 0
+enrollment_count: 0
+meta: null
+published_at: '2026-04-05T10:00:00.000000Z'
+created_at: '2026-04-05T10:00:00.000000Z'
+
+author:
+  id: 019c9616-d2b4-713f-9b2c-40e2e92a05cf
+  name: Duy Tran
+  avatar: avatars/7e8eb5c6-4cac-455b-a701-4060f085d501.jpeg
+
+category:
+  id: 019c9616-cat9-7009-a009-000000000009
+  name: Luyện thi chứng chỉ
+  slug: luyen-thi
+
+tags:
+
+- name: Kubernetes
+  slug: kubernetes
+- name: CNCF
+  slug: cncf
+- name: Cloud Native
+  slug: cloud-native
+- name: Chứng chỉ
+  slug: chung-chi
+- name: DevOps
+    slug: devops
+
+quiz_slug: kcna
+
+ctions:
+
+- id: kcna-section-01
+    title: "Domain 1: Kubernetes Fundamentals (46%)"
+    description: Kiến trúc K8s, core objects, networking, storage, RBAC
+sort_order: 1
+    lessons:
+  - id: kcna-d1-l01
+        title: "Bài 1: Kubernetes Architecture & Core Components"
+        slug: 01-kien-truc-kubernetes
+        description: >-
+          Control plane vs Worker node. kube-apiserver, etcd, kube-scheduler,
+          controller-manager, kubelet, kube-proxy. Kubernetes objects overview.
+        duration_minutes: 55
+        is_free: true
+    sort_order: 1
+        video_url: null
+  - id: kcna-d1-l02
+        title: "Bài 2: Pods, Workloads & Controllers"
+        slug: 02-pods-workloads-controllers
+        description: >-
+          Pod lifecycle. Deployments, ReplicaSets, StatefulSets, DaemonSets,
+          Jobs, CronJobs. Labels, selectors, annotations.
+        duration_minutes: 55
+        is_free: true
+    sort_order: 2
+        video_url: null
+  - id: kcna-d1-l03
+        title: "Bài 3: Services, Networking & Storage"
+        slug: 03-services-networking-storage
+        description: >-
+          ClusterIP, NodePort, LoadBalancer. CoreDNS, Service discovery.
+          PersistentVolume, PVC, StorageClass. ConfigMaps & Secrets.
+        duration_minutes: 55
+        is_free: true
+    sort_order: 3
+        video_url: null
+  - id: kcna-d1-l04
+        title: "Bài 4: RBAC & Security Basics"
+        slug: 04-rbac-security
+        description: >-
+          Role, ClusterRole, RoleBinding, ClusterRoleBinding. ServiceAccounts.
+          Pod Security Standards. Network Policies overview.
+        duration_minutes: 50
+        is_free: true
+        sort_order: 4
+      video_url: null
+
+- id: kcna-section-02
+    title: "Domain 2: Container Orchestration (22%)"
+    description: Container runtimes, OCI, container lifecycle, orchestration patterns
+sort_order: 2
+    lessons:
+  - id: kcna-d2-l01
+        title: "Bài 5: Container Runtimes & OCI Standards"
+        slug: 05-container-runtimes-oci
+        description: >-
+          Docker vs containerd vs CRI-O. OCI Image Spec, OCI Runtime Spec.
+          Container lifecycle. Image layers và registry.
+        duration_minutes: 50
+        is_free: true
+    sort_order: 5
+        video_url: null
+  - id: kcna-d2-l02
+        title: "Bài 6: Container Orchestration Patterns"
+        slug: 06-orchestration-patterns
+        description: >-
+          Scheduling, resource management, high availability.
+          Multi-tenancy. Namespace isolation. Resource quotas.
+          Horizontal Pod Autoscaler, Vertical Pod Autoscaler.
+        duration_minutes: 50
+        is_free: true
+        sort_order: 6
+      video_url: null
+
+- id: kcna-section-03
+    title: "Domain 3: Cloud Native Architecture (16%)"
+    description: 12-factor app, microservices, service mesh, serverless
+sort_order: 3
+    lessons:
+  - id: kcna-d3-l01
+        title: "Bài 7: Cloud Native Architecture & Design Patterns"
+        slug: 07-cloud-native-architecture
+        description: >-
+          12-factor app methodology. Microservices vs Monolith.
+          Immutable infrastructure. Service mesh (Istio, Linkerd overview).
+          Serverless computing. CNCF landscape.
+        duration_minutes: 55
+        is_free: true
+        sort_order: 7
+      video_url: null
+
+- id: kcna-section-04
+    title: "Domain 4 & 5: Observability & Application Delivery (16%)"
+    description: Logging, monitoring, tracing, Helm, GitOps, CI/CD
+sort_order: 4
+    lessons:
+  - id: kcna-d4-l01
+        title: "Bài 8: Cloud Native Observability"
+        slug: 08-observability
+        description: >-
+          Logging với Fluentd/Loki. Metrics với Prometheus & Grafana.
+          Distributed tracing với Jaeger/Zipkin. OpenTelemetry.
+          Alerting và SLO/SLI/SLA.
+        duration_minutes: 50
+        is_free: true
+    sort_order: 8
+        video_url: null
+  - id: kcna-d5-l01
+        title: "Bài 9: Application Delivery — Helm, GitOps & CI/CD"
+        slug: 09-helm-gitops-cicd
+        description: >-
+          Helm charts, values, templates. GitOps với ArgoCD & Flux.
+          CI/CD pipelines cho Kubernetes. Kustomize basics.
+          Progressive delivery (canary, blue-green).
+        duration_minutes: 50
+        is_free: true
+        sort_order: 9
+        video_url: null

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@xdev-asia/xdev-knowledge-mcp",
-    "version": "1.0.43",
+    "version": "1.0.44",
     "description": "MCP Server - Toàn bộ kiến thức xDev.asia: 57 series, 1200+ lessons, blog, showcase (AI, Architecture, DevSecOps, Programming)",
     "type": "module",
     "main": "dist/index.js",