Google Professional Cloud Architect Practice Exams
Last updated on Oct 22,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 22,2026
You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs .
What should you do?
- A . Grant your colleague the IAM role of project Viewer
- B . Perform a rolling restart on the instance group
- C . Disable the health check for the instance group. Add his SSH key to the project-wide SSH keys
- D . Disable autoscaling for the instance group. Add his SSH key to the project-wide SSH Keys
Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table.
Any logs older than 45 days should be removed. You want to optimize storage and follow Google recommended practices .
What should you do?
- A . Configure the expiration time for your tables at 45 days
- B . Make the tables time-partitioned, and configure the partition expiration at 45 days
- C . Rely on BigQuery’s default behavior to prune application logs older than 45 days
- D . Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days
For this question, refer to the Dress4Win case study.
The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP). The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects .
What can they do?
- A . Grant the operations engineers access to use Google Cloud Shell.
- B . Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
- C . Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
- D . Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources .
What Google domain and project structure should you recommend?
- A . Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
- B . Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
- C . Create a single G Suite account to manage users with each stage of each application in its own project.
- D . Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
For this question, refer to the TerramEarth case study
Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data .
What should you do?
- A . Build or leverage an OAuth-compatible access control system.
- B . Build SAML 2.0 SSO compatibility into your authentication system.
- C . Restrict data access based on the source IP address of the partner systems.
- D . Create secondary credentials for each dealer that can be given to the trusted third party.
For this question, refer to the Dress4Win case study.
Dress4Win would like to become familiar with deploying applications to the cloud by successfully deploying some applications quickly, as is. They have asked for your recommendation .
What should you advise?
- A . Identify self-contained applications with external dependencies as a first move to the cloud.
- B . Identify enterprise applications with internal dependencies and recommend these as a first move to the cloud.
- C . Suggest moving their in-house databases to the cloud and continue serving requests to on-premise applications.
- D . Recommend moving their message queuing servers to the cloud and continue handling requests to on-premise applications.
Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?
- A . Multiple Organizations with multiple Folders
- B . Multiple Organizations, one for each department
- C . A single Organization with Folder for each department
- D . A single Organization with multiple projects, each with a central owner
A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run property on Google Cloud Platform .
What should you do?
- A . Help the engineer to convert his websocket code to use HTTP streaming.
- B . Review the encryption requirements for websocket connections with the security team.
- C . Meet with the cloud operations team and the engineer to discuss load balancer options.
- D . Help the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.
You are migrating third-party applications from optimized on-premises virtual machines to Google Cloud. You are unsure about the optimum CPU and memory options. The application have a consistent usage patterns across multiple weeks. You want to optimize resource usage for the lowest cost .
What should you do?
- A . Create a Compute engine instance with CPU and Memory options similar to your application’s current on-premises virtual machine. Install the cloud monitoring agent, and deploy the third party application. Run a load with normal traffic levels on third party application and follow the Rightsizing Recommendations in the Cloud Console
- B . Create an App Engine flexible environment, and deploy the third party application using a Docker file and a custom runtime. Set CPU and memory options similar to your application’s current on-premises virtual machine in the app.yaml file.
- C . Create an instance template with the smallest available machine type, and use an image of the third party application taken from the current on-premises virtual machine. Create a managed instance group that uses average CPU to autoscale the number of instances in the group. Modify the average CPU utilization threshold to optimize the number of instances running.
- D . Create multiple Compute Engine instances with varying CPU and memory options. Install the cloud monitoring agent and deploy the third-party application on each of them. Run a load test with high traffic levels on the application and use the results to determine the optimal settings.
For this question, refer to the JencoMart case study
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly .
What three steps should you take to diagnose the problem? Choose 3 answers
- A . Delete the virtual machine (VM) and disks and create a new one.
- B . Delete the instance, attach the disk to a new VM, and investigate.
- C . Take a snapshot of the disk and connect to a new machine to investigate.
- D . Check inbound firewall rules for the network the machine is connected to.
- E . Connect the machine to another network with very simple firewall rules and investigate.
- F . Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.