Free Professional Cloud Architect on Google Cloud Platform Exam Questions and Answers

Last updated: September 11, 2026

Provider

Google

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   - (Exam Topic 1) For this question, refer to the Mountkirk Games case study. Mountkirk Games' gaming servers are not automatically scaling properly. Last month, they rolled out a new feature, which suddenly became very popular. A record number of users are trying to use the service, but many of them are getting 503 errors and very slow response times. What should they investigate first?

   • A. Verify that the database is online.
   • B. Verify that the project quota hasn't been exceeded.
   • C. Verify that the new feature code did not introduce any performance bugs.
   • D. Verify that the load-testing team is not running their tool against production.
   Reveal Answer

2. Question #2

   - (Exam Topic 5) You are building a continuous deployment pipeline for a project stored in a Git source repository and want to ensure that code changes can be verified deploying to production. What should you do?

   • A. Use Spinnaker to deploy builds to production using the red/black deployment strategy so that changes can easily be rolled back.
   • B. Use Spinnaker to deploy builds to production and run tests on production deployments.
   • C. Use Jenkins to build the staging branches and the master branc
   • D. Build and deploy changes to production for 10% of users before doing a complete rollout.
   Reveal Answer

3. Question #3

   - (Exam Topic 5) A small number of API requests to your microservices-based application take a very long time. You know that each request to the API can traverse many services. You want to know which service takes the longest in those cases. What should you do?

   • A. Set timeouts on your application so that you can fail requests faster.
   • B. Send custom metrics for each of your requests to Stackdriver Monitoring.
   • C. Use Stackdriver Monitoring to look for insights that show when your API latencies are high.
   • D. Instrument your application with Stackdnver Trace in order to break down the request latencies at each microservice.
   Reveal Answer

4. Question #4

   - (Exam Topic 5) You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429. How should you handle these types of errors?

   • A. Use gRPC instead of HTTP for better performance.
   • B. Implement retry logic using a truncated exponential backoff strategy.
   • C. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
   • D. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.
   Reveal Answer

5. Question #5

   - (Exam Topic 5) You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs. What should you do?

   • A. Grant your colleague the IAM role of project Viewer
   • B. Perform a rolling restart on the instance group
   • C. Disable the health check for the instance grou
   • D. Add his SSH key to the project-wide SSH keys
   Reveal Answer

6. Question #6

   - (Exam Topic 5) Your company has decided to build a backup replica of their on-premises user authentication PostgreSQL database on Google Cloud Platform. The database is 4 TB, and large updates are frequent. Replication requires private address space communication. Which networking approach should you use?

   • A. Google Cloud Dedicated Interconnect
   • B. Google Cloud VPN connected to the data center network
   • C. A NAT and TLS translation gateway installed on-premises
   • D. A Google Compute Engine instance with a VPN server installed connected to the data center network
   Reveal Answer

7. Question #7

   - (Exam Topic 5) You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability. What should you do?

   • A. Create a read replica instance in a different region
   • B. Create a failover replica instance in a different region
   • C. Create a read replica instance in the same region, but in a different zone
   • D. Create a failover replica instance in the same region, but in a different zone
   Reveal Answer

8. Question #8

   - (Topic 2) For this question, refer to the TerramEarth case study Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data. What should you do?

   • A. Build or leverage an OAuth-compatible access control system.
   • B. Build SAML 2.0 SSO compatibility into your authentication system.
   • C. Restrict data access based on the source IP address of the partner systems.
   • D. Create secondary credentials for each dealer that can be given to the trusted third party.
   Reveal Answer

9. Question #9

   - (Topic 2) For this question, refer to the TerramEarth case study. The TerramEarth development team wants to create an API to meet the company's business requirements. You want the development team to focus their development effort on business value versus creating a custom framework. Which method should they use?

   • A. Use Google App Engine with Google Cloud Endpoint
   • B. Focus on an API for dealers and partners.
   • C. Use Google App Engine with a JAX-RS Jersey Java-based framewor
   • D. Focus on an API for the public.
   Reveal Answer

10. Question #10

    - (Topic 3) For this question, refer to the JencoMart case study. JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data. What service account key- management strategy should you recommend?

    • A. Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).
    • B. Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.
    • C. Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs
    • D. Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.
    Reveal Answer