Google Professional Cloud Architect Practice Exams
Last updated on Oct 22,2026- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Oct 22,2026
You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network .
How should you deploy the VPN?
- A . Use VPC Network Peering between the VPC and the on-premises network.
- B . Expose the VPC to the on-premises network using IAM and VPC Sharing.
- C . Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.
- D . Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.
Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.
Which feature of Kubernetes should you use to accomplish this?
- A . StatefulSets
- B . Role-based access control
- C . Container environment variables
- D . Persistent Volumes
Your company’s test suite is a custom C++ application that runs tests throughout each day on Linux virtual machines. The full test suite takes several hours to complete, running on a limited number of on premises servers reserved for testing. Your company wants to move the testing infrastructure to the cloud, to reduce the amount of time it takes to fully test a change to the system, while changing the tests as little as possible .
Which cloud infrastructure should you recommend?
- A . Google Compute Engine unmanaged instance groups and Network Load Balancer
- B . Google Compute Engine managed instance groups with auto-scaling
- C . Google Cloud Dataproc to run Apache Hadoop jobs to process each test
- D . Google App Engine with Google Stackdriver for logging
To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department .
Which two steps should you take? Choose 2 answers
- A . Use the –no-auto-delete flag on all persistent disks and stop the VM.
- B . Use the -auto-delete flag on all persistent disks and terminate the VM.
- C . Apply VM CPU utilization label and include it in the BigQuery billing export.
- D . Use Google BigQuery billing export and labels to associate cost to groups.
- E . Store all state into local SSD, snapshot the persistent disks, and terminate the VM.
- F . Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM.
Your company is designing its application landscape on Compute Engine. Whenever a zonal outage occurs, the application should be restored in another zone as quickly as possible with the latest application data. You need to design the solution to meet this requirement .
What should you do?
- A . Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in the same zone.
- B . Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another zone in the same region. Use the regional persistent disk for the application data.
- C . Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in another zone within the same region.
- D . Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another region. Use the regional persistent disk for the application data,
You have deployed several instances on Compute Engine. As a security requirement, instances cannot have a public IP address. There is no VPN connection between Google Cloud and your office, and you need to connect via SSH into a specific machine without violating the security requirements .
What should you do?
- A . Configure Cloud NAT on the subnet where the instance is hosted. Create an SSH connection to the Cloud NAT IP address to reach the instance.
- B . Add all instances to an unmanaged instance group. Configure TCP Proxy Load Balancing with the instance group as a backend. Connect to the instance using the TCP Proxy IP.
- C . Configure Identity-Aware Proxy (IAP) for the instance and ensure that you have the role of IAP-secured Tunnel User. Use the gcloud command line tool to ssh into the instance.
- D . Create a bastion host in the network to SSH into the bastion host from your office location. From the bastion host, SSH into the desired instance.
Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis.
What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?
- A . Hash all data using SHA256
- B . Encrypt all data using elliptic curve cryptography
- C . De-identify the data with the Cloud Data Loss Prevention API
- D . Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers
For this question, refer to the TerramEarth case study.
TerramEarth plans to connect all 20 million vehicles in the field to the cloud. This increases the volume to 20 million 600 byte records a second for 40 TB an hour .
How should you design the data ingestion?
- A . Vehicles write data directly to GCS.
- B . Vehicles write data directly to Google Cloud Pub/Sub.
- C . Vehicles stream data directly to Google BigQuery.
- D . Vehicles continue to write data using the existing system (FTP).
For this question, refer to the Mountkirk Games case study.
Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other’s environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production.
What should you do to isolate development environments from staging and production?
- A . Create a project for development and test and another for staging and production.
- B . Create a network for development and test and another for staging and production.
- C . Create one subnetwork for development and another for staging and production.
- D . Create one project for development, a second for staging and a third for production.
For this question, refer to the Mountkirk Games case study.
Mountkirk Games has deployed their new backend on Google Cloud Platform (GCP). You want to create a thorough testing process for new versions of the backend before they are released to the public. You want the testing environment to scale in an economical way .
How should you design the process?
- A . Create a scalable environment in GCP for simulating production load.
- B . Use the existing infrastructure to test the GCP-based backend at scale.
- C . Build stress tests into each component of your application using resources internal to GCP to simulate load.
- D . Create a set of static environments in GCP to test different levels of load ― for example, high, medium, and low.