Google Professional Cloud Architect Practice Exams
Last updated on Oct 21,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 21,2026
The operations team in your company wants to save Cloud VPN log events (or one year You need to configure the cloud infrastructure to save the logs.
What should you do?
- A . Set up a filter in Cloud Logging and a topic in Pub/Sub to publish the logs
- B . Set up a Cloud Logging Dashboard titled Cloud VPN Logs, and then add a chart that queries for the VPN metrics over a one-year time period
- C . Enable the Compute Engine API and then enable logging on the firewall rules that match the traffic you want to save
- D . Set up a filter in Cloud Logging and a Cloud Storage bucket as an export target for the logs you want to save
For this question, refer to the Dress4Win case study.
As part of Dress4Win’s plans to migrate to the cloud, they want to be able to set up a managed logging and monitoring system so they can handle spikes in their traffic load.
They want to ensure that:
• The infrastructure can be notified when it needs to scale up and down to handle the ebb and flow of usage throughout the day
• Their administrators are notified automatically when their application reports errors.
• They can filter their aggregated logs down in order to debug one piece of the application across many hosts
Which Google StackDriver features should they use?
- A . Logging, Alerts, Insights, Debug
- B . Monitoring, Trace, Debug, Logging
- C . Monitoring, Logging, Alerts, Error Reporting
- D . Monitoring, Logging, Debug, Error Report
Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?
- A . Multiple Organizations with multiple Folders
- B . Multiple Organizations, one for each department
- C . A single Organization with Folder for each department
- D . A single Organization with multiple projects, each with a central owner
C
Explanation:
Folders are nodes in the Cloud Platform Resource Hierarchy. A folder can contain projects, other folders, or a combination of both. You can use folders to group projects under an organization in a hierarchy. For example, your organization might contain multiple departments, each with its own set of GCP resources. Folders allow you to group these resources on a per-department basis. Folders are used to group resources that share common IAM policies. While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent.
Reference: https://cloud.google.com/resource-manager/docs/creating-managing-folders
For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to design their solution for the future in order to take advantage of cloud and technology improvements as they become available.
Which two steps should they take? (Choose two.)
- A . Store as much analytics and game activity data as financially feasible today so it can be used to train machine learning models to predict user behavior in the future.
- B . Begin packaging their game backend artifacts in container images and running them on Kubernetes Engine to improve the availability to scale up or down based on game activity.
- C . Set up a CI/CD pipeline using Jenkins and Spinnaker to automate canary deployments and improve development velocity.
- D . Adopt a schema versioning tool to reduce downtime when adding new game features that require storing additional player data in the database.
- E . Implement a weekly rolling maintenance process for the Linux virtual machines so they can apply critical kernel patches and package updates and reduce the risk of 0-day vulnerabilities.
Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update.
What strategy should you take?
- A . Work with your ISP to diagnose the problem.
- B . Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.
- C . Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.
- D . Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.
C
Explanation:
Stackdriver Logging allows you to store, search, analyze, monitor, and alert on log data and events from Google Cloud Platform and Amazon Web Services (AWS). Our API also allows ingestion of any custom log data from any source. Stackdriver Logging is a fully managed service that performs at scale and can ingest application and system log data from thousands of VMs. Even better, you can analyze all that log data in real time.
Reference: https://cloud.google.com/logging/
Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update.
What strategy should you take?
- A . Work with your ISP to diagnose the problem.
- B . Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.
- C . Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.
- D . Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.
C
Explanation:
Stackdriver Logging allows you to store, search, analyze, monitor, and alert on log data and events from Google Cloud Platform and Amazon Web Services (AWS). Our API also allows ingestion of any custom log data from any source. Stackdriver Logging is a fully managed service that performs at scale and can ingest application and system log data from thousands of VMs. Even better, you can analyze all that log data in real time.
Reference: https://cloud.google.com/logging/
Your company has an application running as a Deployment in a Google Kubernetes Engine (GKE) cluster When releasing new versions of the application via a rolling deployment, the team has been causing outages The root cause of the outages is misconfigurations with parameters that are only used in production You want to put preventive measures for this in the platform to prevent outages
What should you do?
- A . Configure liveness and readiness probes in the Pod specification
- B . Configure an uptime alert in Cloud Monitoring
- C . Create a Scheduled Task to check whether the application is available
- D . Configure health checks on the managed instance group
A
Explanation:
This option can help prevent outages caused by misconfigurations with parameters that are only used in production. Liveness and readiness probes are mechanisms to check the health and availability of the Pods and containers in a GKE cluster. Liveness probes determine if a container is still running, and if not, restart it. Readiness probes determine if a container is ready to serve requests, and if not, remove it from the load balancer. By configuring liveness and readiness probes in the Pod specification, you can ensure that your application can handle traffic and recover from failures gracefully during a rolling update. The other options are not optimal for this scenario, because they either do not prevent outages, but only alert or monitor them (B, C), or do not apply to GKE clusters, but to Compute Engine instances (D).
Reference:
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps
https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-setting-up-health-checks-with-readiness-and-liveness-probes
Your company has an application running as a Deployment in a Google Kubernetes Engine (GKE) cluster When releasing new versions of the application via a rolling deployment, the team has been causing outages The root cause of the outages is misconfigurations with parameters that are only used in production You want to put preventive measures for this in the platform to prevent outages
What should you do?
- A . Configure liveness and readiness probes in the Pod specification
- B . Configure an uptime alert in Cloud Monitoring
- C . Create a Scheduled Task to check whether the application is available
- D . Configure health checks on the managed instance group
A
Explanation:
This option can help prevent outages caused by misconfigurations with parameters that are only used in production. Liveness and readiness probes are mechanisms to check the health and availability of the Pods and containers in a GKE cluster. Liveness probes determine if a container is still running, and if not, restart it. Readiness probes determine if a container is ready to serve requests, and if not, remove it from the load balancer. By configuring liveness and readiness probes in the Pod specification, you can ensure that your application can handle traffic and recover from failures gracefully during a rolling update. The other options are not optimal for this scenario, because they either do not prevent outages, but only alert or monitor them (B, C), or do not apply to GKE clusters, but to Compute Engine instances (D).
Reference:
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps
https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-setting-up-health-checks-with-readiness-and-liveness-probes
Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization. They want to prohibit IAM users outside the domain from gaining permissions from now on.
What should they do?
- A . Configure an organization policy to restrict identities by domain
- B . Configure an organization policy to block creation of service accounts
- C . Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all users that don’t belong to the Cloud identity domain from all projects.
- D . Create a technical user (e g . crawler@yourdomain com), and give it the protect owner rote at root organization level Write a bash script that
• Lists all me IAM rules of all projects within the organization
• Deletes all users that do not belong to the company domain
Create a Compute Engine instance m a project within the Organization and configure gcloud to be executed with technical user credentials Configure a cron job that executes the bash script every hour.
You are analyzing and defining business processes to support your startup’s trial usage of GCP, and you don’t yet know what consumer demand for your product will be. Your manager requires you to minimize GCP service costs and adhere to Google best practices.
What should you do?
- A . Utilize free tier and sustained use discounts. Provision a staff position for service cost management.
- B . Utilize free tier and sustained use discounts. Provide training to the team about service cost management.
- C . Utilize free tier and committed use discounts. Provision a staff position for service cost management.
- D . Utilize free tier and committed use discounts. Provide training to the team about service cost management.
D
Explanation:
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#billing_and_management