Google Professional Cloud Architect Practice Exams
Last updated on Oct 21,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 21,2026
Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used .
How should you design your architecture?
- A . Create a tokenizer service and store only tokenized data.
- B . Create separate projects that only process credit card data.
- C . Create separate subnetworks and isolate the components that process credit card data.
- D . Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
- E . Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices .
What should you do?
- A . Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.
- B . Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
- C . Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
- D . Install gsutil on each server containing data. Use streaming transfers to upload the data
into Cloud
Storage.
Your agricultural division is experimenting with fully autonomous vehicles.
You want your architecture to promote strong security during vehicle operation.
Which two architecture should you consider? Choose 2 answers:
- A . Treat every micro service call between modules on the vehicle as untrusted.
- B . Require IPv6 for connectivity to ensure a secure address space.
- C . Use a trusted platform module (TPM) and verify firmware and binaries on boot.
- D . Use a functional programming language to isolate code execution cycles.
- E . Use multiple connectivity subsystems for redundancy.
- F . Enclose the vehicle’s drive electronics in a Faraday cage to isolate chips.
Your agricultural division is experimenting with fully autonomous vehicles.
You want your architecture to promote strong security during vehicle operation.
Which two architecture should you consider? Choose 2 answers:
- A . Treat every micro service call between modules on the vehicle as untrusted.
- B . Require IPv6 for connectivity to ensure a secure address space.
- C . Use a trusted platform module (TPM) and verify firmware and binaries on boot.
- D . Use a functional programming language to isolate code execution cycles.
- E . Use multiple connectivity subsystems for redundancy.
- F . Enclose the vehicle’s drive electronics in a Faraday cage to isolate chips.
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier .
How should you configure the network?
- A . Add each tier to a different subnetwork.
- B . Set up software based firewalls on individual VMs.
- C . Add tags to each tier and set up routes to allow the desired traffic flow.
- D . Add tags to each tier and set up firewall rules to allow the desired traffic flow.
Dress4win has end to end tests covering 100% of their endpoints.
They want to ensure that the move of cloud does not introduce any new bugs.
Which additional testing methods should the developers employ to prevent an outage?
- A . They should run the end to end tests in the cloud staging environment to determine if the code is working as intended.
- B . They should enable google stack driver debugger on the application code to show errors in the code
- C . They should add additional unit tests and production scale load tests on their cloud staging environment.
- D . They should add canary tests so developers can measure how much of an impact the new release causes to latency
You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?
- A . Use gRPC instead of HTTP for better performance.
- B . Implement retry logic using a truncated exponential backoff strategy.
- C . Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
- D . Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud
Storage is not reporting
an incident.
Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay .
What should you do?
- A . Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.
- B . Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.
- C . Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.
- D . Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.
For this question, refer to the Dress4Win case study.
As part of Dress4Win’s plans to migrate to the cloud, they want to be able to set up a managed logging and monitoring system so they can handle spikes in their traffic load. They want to ensure that:
• The infrastructure can be notified when it needs to scale up and down to handle the ebb and flow of usage throughout the day
• Their administrators are notified automatically when their application reports errors.
• They can filter their aggregated logs down in order to debug one piece of the application across many hosts
Which Google StackDriver features should they use?
- A . Logging, Alerts, Insights, Debug
- B . Monitoring, Trace, Debug, Logging
- C . Monitoring, Logging, Alerts, Error Reporting
- D . Monitoring, Logging, Debug, Error Report
You created a pipeline that can deploy your source code changes to your infrastructure in instance groups for self healing.
One of the changes negatively affects your key performance indicator.
You are not sure how to fix it and investigation could take up to a week.
What should you do?
- A . Log in to a server, and iterate a fix locally
- B . Change the instance group template to the previous one, and delete all instances.
- C . Revert the source code change and rerun the deployment pipeline
- D . Log into the servers with the bad code change, and swap in the previous code