Google Professional Cloud Architect Practice Exams
Last updated on Oct 22,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 22,2026
Configure Private Google Access for on-premises hosts.
Explanation:
For all Google Cloud services secured with VPC Service Controls, you can ensure that: Resources within a perimeter are accessed only from clients within authorized VPC networks using Private Google Access with either Google Cloud or on-premises. https://cloud.google.com/vpc-service-controls/docs/overview
https://cloud.google.com/vpc-service-controls/docs/overview. You create a service control across your VPC and any cloud bucket or any project resource to restrict access. Anything outside of it can’t access the resources within service control perimeter
For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google’s AI Platform so HRL can understand and interpret the predictions.
What should you do?
- A . Use Explainable AI.
- B . Use Vision AI.
- C . Use Google Cloud’s operations suite.
- D . Use Jupyter Notebooks.
A
Explanation:
Reference: https://cloud.google.com/ai-platform/prediction/docs/ai-explanations/preparing-metadata
For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google’s AI Platform so HRL can understand and interpret the predictions.
What should you do?
- A . Use Explainable AI.
- B . Use Vision AI.
- C . Use Google Cloud’s operations suite.
- D . Use Jupyter Notebooks.
A
Explanation:
Reference: https://cloud.google.com/ai-platform/prediction/docs/ai-explanations/preparing-metadata
For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google’s AI Platform so HRL can understand and interpret the predictions.
What should you do?
- A . Use Explainable AI.
- B . Use Vision AI.
- C . Use Google Cloud’s operations suite.
- D . Use Jupyter Notebooks.
A
Explanation:
Reference: https://cloud.google.com/ai-platform/prediction/docs/ai-explanations/preparing-metadata
For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google’s AI Platform so HRL can understand and interpret the predictions.
What should you do?
- A . Use Explainable AI.
- B . Use Vision AI.
- C . Use Google Cloud’s operations suite.
- D . Use Jupyter Notebooks.
A
Explanation:
Reference: https://cloud.google.com/ai-platform/prediction/docs/ai-explanations/preparing-metadata
You have deployed an application to Kubernetes Engine, and are using the Cloud SQL proxy container to make the Cloud SQL database available to the services running on Kubernetes. You are notified that the application is reporting database connection issues. Your company policies require a post-mortem.
What should you do?
- A . Use gcloud sql instances restart.
- B . Validate that the Service Account used by the Cloud SQL proxy container still has the Cloud Build Editor role.
- C . In the GCP Console, navigate to Stackdriver Logging. Consult logs for Kubernetes Engine and Cloud SQL.
- D . In the GCP Console, navigate to Cloud SQL. Restore the latest backup. Use kubect1 to restart all pods.
You have deployed an application to Kubernetes Engine, and are using the Cloud SQL proxy container to make the Cloud SQL database available to the services running on Kubernetes. You are notified that the application is reporting database connection issues. Your company policies require a post-mortem.
What should you do?
- A . Use gcloud sql instances restart.
- B . Validate that the Service Account used by the Cloud SQL proxy container still has the Cloud Build Editor role.
- C . In the GCP Console, navigate to Stackdriver Logging. Consult logs for Kubernetes Engine and Cloud SQL.
- D . In the GCP Console, navigate to Cloud SQL. Restore the latest backup. Use kubect1 to restart all pods.
Your company has a Google Cloud project that uses BigQuery for data warehousing They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing.
What should they do?
- A . Configure Private Google Access for on-premises only.
- B . Perform the following tasks:
1) Create a service account.
2) Give the BigQuery JobUser role and Storage Reader role to the service account.
3) Remove all other IAM access from the project. - C . Configure VPC Service Controls and configure Private Google Access.
- D . Configure Private Google Access.
C
Explanation:
https://cloud.google.com/vpc-service-controls/docs/overview
VPC Service Controls improves your ability to mitigate the risk of data exfiltration from Google Cloud services such as Cloud Storage and BigQuery.
Your company has a Google Cloud project that uses BigQuery for data warehousing They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing.
What should they do?
- A . Configure Private Google Access for on-premises only.
- B . Perform the following tasks:
1) Create a service account.
2) Give the BigQuery JobUser role and Storage Reader role to the service account.
3) Remove all other IAM access from the project. - C . Configure VPC Service Controls and configure Private Google Access.
- D . Configure Private Google Access.
C
Explanation:
https://cloud.google.com/vpc-service-controls/docs/overview
VPC Service Controls improves your ability to mitigate the risk of data exfiltration from Google Cloud services such as Cloud Storage and BigQuery.
You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability.
What should you do?
- A . Create a read replica instance in a different region
- B . Create a failover replica instance in a different region
- C . Create a read replica instance in the same region, but in a different zone
- D . Create a failover replica instance in the same region, but in a different zone
B
Explanation:
https://cloud.google.com/sql/docs/mysql/high-availability