Google Professional Cloud Architect Google Certified Professional – Cloud Architect (GCP) Online Training
Google Professional Cloud Architect Online Training
The questions for Professional Cloud Architect were last updated at Jul 22,2025.
- Exam Code: Professional Cloud Architect
- Exam Name: Google Certified Professional – Cloud Architect (GCP)
- Certification Provider: Google
- Latest update: Jul 22,2025
Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings .
Which approach should you use?
- A . Grant the security team access to the logs in each Project.
- B . Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
- C . Configure Stackdriver Monitoring for all Projects with the default retention policies.
- D . Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.
You created a pipeline that can deploy your source code changes to your infrastructure in instance groups for self healing.
One of the changes negatively affects your key performance indicator.
You are not sure how to fix it and investigation could take up to a week.
What should you do?
- A . Log in to a server, and iterate a fix locally
- B . Change the instance group template to the previous one, and delete all instances.
- C . Revert the source code change and rerun the deployment pipeline
- D . Log into the servers with the bad code change, and swap in the previous code
Your company is designing its application landscape on Compute Engine. Whenever a zonal outage occurs, the application should be restored in another zone as quickly as possible with the latest application data. You need to design the solution to meet this requirement .
What should you do?
- A . Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in the same zone.
- B . Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another zone in the same region. Use the regional persistent disk for the application data.
- C . Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in another zone within the same region.
- D . Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another region. Use the regional persistent disk for the application data,
You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines .
What should you do?
- A . Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet
- B . Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet
- C . Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)
- D . Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)
Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis.
What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?
- A . Hash all data using SHA256
- B . Encrypt all data using elliptic curve cryptography
- C . De-identify the data with the Cloud Data Loss Prevention API
- D . Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers
You are managing an application deployed on Cloud Run for Anthos, and you need to define a strategy for deploying new versions of the application. You want to evaluate the new code with a subset of production traffic to decide whether to proceed with the rollout .
What should you do?
- A . Deploy a new revision to Cloud Run with the new version. Configure traffic percentage between revisions.
- B . Deploy a new service to Cloud Run with the new version. Add a Cloud Load Balancing instance in front of both services.
- C . In the Google Cloud Console page for Cloud Run, set up continuous deployment using Cloud Build for the development branch. As part of the Cloud Build trigger, configure the substitution variable TRAFFIC_PERCENTAGE with the percentage of traffic you want directed to a new version.
- D . In the Google Cloud Console, configure Traffic Director with a new Service that points to the new version of the application on Cloud Run. Configure Traffic Director to send a small percentage of traffic to the new version of the application.
Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?
- A . All admin and VM system logs are automatically collected by Stackdriver.
- B . Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.
- C . Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.
- D . Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.
Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update .
What strategy should you take?
- A . Work with your ISP to diagnose the problem.
- B . Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.
- C . Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.
- D . Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.
Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?
- A . Multiple Organizations with multiple Folders
- B . Multiple Organizations, one for each department
- C . A single Organization with Folder for each department
- D . A single Organization with multiple projects, each with a central owner
You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading. Where should you store the data?
- A . Google BigQuery
- B . Google Cloud SQL
- C . Google Cloud Bigtable
- D . Google Cloud Storage