Google Professional Cloud Architect Practice Exams
Last updated on Oct 23,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 23,2026
For this question, refer to the JencoMart case study
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly.
What three steps should you take to diagnose the problem? Choose 3 answers
- A . Delete the virtual machine (VM) and disks and create a new one.
- B . Delete the instance, attach the disk to a new VM, and investigate.
- C . Take a snapshot of the disk and connect to a new machine to investigate.
- D . Check inbound firewall rules for the network the machine is connected to.
- E . Connect the machine to another network with very simple firewall rules and investigate.
- F . Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.
CDF
Explanation:
https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-ssh
D: Handling "Unable to connect on port 22" error message Possible causes include:
There is no firewall rule allowing SSH access on the port. SSH access on port 22 is enabled on all Compute Engine instances by default. If you have disabled access, SSH from the Browser will not work. If you run sshd on a port other than 22, you need to enable the access to that port with a custom firewall rule.
The firewall rule allowing SSH access is enabled, but is not configured to allow connections from GCP Console services. Source IP addresses for browser-based SSH sessions are dynamically allocated by GCP Console and can vary from session to session.
Reference:
https://cloud.google.com/compute/docs/ssh-in-browser
https://cloud.google.com/compute/docs/ssh-in-browser
For this question, refer to the Dress4Win case study.
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services. The Stackdriver dashboard is not reporting the services as healthy.
What should they do?
- A . Install the Stackdriver agent on all of the legacy web servers.
- B . In the Cloud Platform Console download the list of the uptime servers’ IP addresses and create an inbound firewall rule
- C . Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
- D . Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring― UptimeChecks (https://cloud.google.com/monitoring)
For this question, refer to the TerramEarth case study. You are asked to design a new architecture for the ingestion of the data of the 200,000 vehicles that are connected to a cellular network. You want to follow Google-recommended practices.
Considering the technical requirements, which components should you use for the ingestion of the data?
- A . Google Kubernetes Engine with an SSL Ingress
- B . Cloud IoT Core with public/private key pairs
- C . Compute Engine with project-wide SSH keys
- D . Compute Engine with specific SSH keys
A
Explanation:
https://cloud.google.com/solutions/iot-overview
https://cloud.google.com/iot/quotas
For this question, refer to the TerramEarth case study.
You start to build a new application that uses a few Cloud Functions for the backend. One use case requires a Cloud Function func_display to invoke another Cloud Function func_query. You want func_query only to accept invocations from func_display. You also want to follow Google’s recommended best practices.
What should you do?
- A . Create a token and pass it in as an environment variable to func_display. When invoking func_query, include the token in the request Pass the same token to func _query and reject the invocation if the tokens are different.
- B . Make func_query ‘Require authentication.’ Create a unique service account and associate it to func_display. Grant the service account invoker role for func_query. Create an id token in func_display and include the token to the request when invoking func_query.
- C . Make func _query ‘Require authentication’ and only accept internal traffic. Create those two functions in the same VPC. Create an ingress firewall rule for func_query to only allow traffic from func_display.
- D . Create those two functions in the same project and VPC. Make func_query only accept internal traffic. Create an ingress firewall for func_query to only allow traffic from func_display. Also, make sure both functions use the same service account.
B
Explanation:
https://cloud.google.com/functions/docs/securing/authenticating#authenticating_function_to_function_calls
You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload.
What should you do?
- A . Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the
GCP Console. - B . Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.
- C . Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.
- D . Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the
cluster managed instance group from the GCP Console.
You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload.
What should you do?
- A . Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the
GCP Console. - B . Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.
- C . Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.
- D . Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the
cluster managed instance group from the GCP Console.
For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?
- A . Use Stackdriver Trace to create a trace list analysis.
- B . Use Stackdriver Monitoring to create a dashboard on the project’s activity.
- C . Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.
- D . Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.
A
Explanation:
https://cloud.google.com/logging/docs/audit/
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asi a. You want to measure success against their business and technical goals.
Which metrics should you track?
- A . Error rates for requests from Asia
- B . Latency difference between US and Asia
- C . Total visits, error rates, and latency from Asia
- D . Total visits and average latency for users in Asia
- E . The number of character sets present in the database
Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month.
- A . Connect Google Data Studio to BigQuery. Create a dimension for the users and a metric for the amount of queries per user.
- B . In the BigQuery interface, execute a query on the JOBS table to get the required information.
- C . Use ‘bq show’ to list all jobs. Per job, use ‘bq Is’ to list job information and get the required information.
- D . Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the
required information.
C
Explanation:
https://cloud.google.com/bigquery/docs/managing-jobs
You have been asked to select the storage system for the click-data of your company’s large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience teams.
Which storage infrastructure should you choose?
- A . Google Cloud SQL
- B . Google Cloud Bigtable
- C . Google Cloud Storage
- D . Google cloud Datastore
C
Explanation:
https://cloud.google.com/bigquery/docs/loading-data-cloud-storage