Google Professional Cloud Architect Certification: Assessment Test 2 | Practice Test / Quiz / MCQs

1. You decide to use GCP to host a simple website using Drupal Content Management from Google Cloud Platform Marketplace to run a Google Compute Engine VM instance. You have global ambitions but a limited budget. What feature would you enable to provide a better experience to your global audience?

Cloud DNSCloud Load BalancerCloud InterconnectCloud CDN

2. A carefully designed organization hierarchy enables businesses to do all of the following except:

Have more granular billing data.Govern and secure the organization in a more managed and centralized fashion.Improve the speed of innovation.Minimize the amount of projects needed to leverage GCP effectively.

3. You’re consulting for an IoT company that has hundreds of thousands of IoT sensors that capture readings every two seconds. You’d like to optimize the performance of this database, so you’re looking to identify a more accurate, time-series database solution. What would you use?

Cloud StorageCloud BigtableCloud FilestoreBigQuery

4. You’re looking for a solution to scale your node pool automatically based on its CPU and memory load. What would you use?

Leverage Vertical Pod Autoscaler.Leverage Horizontal Pod Autoscaler.Right-size your cluster from the start and you won’t have to worry about this.Leverage a Cloud Function to listen to a custom event created in your GKE environment that sends a message to Pub/Sub every time CPU/memory usage spikes.

5. Which one of these objectives is not covered on the Professional Cloud Architect exam?

Manage and provision the cloud solution infrastructure.Analyze and optimize technical and business processes.Ensure hybrid cloud solutions are integrated into cloud architecture.Manage implementations of cloud architecture.

6. You have an application on VMs serving web traffic and you noticed that after you configured the VMs as a backend to an HTTP(S) load balancer, the VMs are being terminated and relaunched. What is most likely the best way to deal with the issue?

Use network tags on each instance to route traffic from the instances to the load balancer.Ensure that a firewall rule exists to enable the health check on the load balancer to reach the instances in the instance group.Assign a public IP to the instances and configure your firewall rules appropriately.Allow the source traffic on the instances to reach the load balancer by using firewall rules.

8. You have an application running on a Compute Engine instance in a single VPC spread across two regions. This application needs to communicate over VPN to an on-premises network. How would you deploy the VPN?

Create a global VPN gateway and create a VPN tunnel for each region to your on-premises environment.Deploy a Cloud VPN gateway in each region and ensure there is at least one VPN tunnel to the on-premises peering gateway.Use VPC Network Peering to peer the VPC to your on-premises network.Expose the VPC on-premises using VPC sharing and proper access controls.

9. GCP resources are managed hierarchically using organizations, folders, and projects. What is the effective Cloud IAM policy at a particular node of the hierarchy when there are multiple policies at varying levels of the hierarchy?

The effective policy is the combination of the policy set at the node and policies inherited from its parent nodes.The effective policy is determined from the nodes at the bottom of the resource hierarchy.The effective policy is the policy set at the node and restricted by the policies of its parent nodes.The effective policy is determined only by the policy set at the node.

10. You have a few VMs that need to be able to reach the Internet to do yum updates. But you don’t want to expose the VMs to the world. What should you do?

Properly configure your DNS settings so that the network domain name is accessible by the Internet.Assign the VMs a public IP address, but put IP blacklisting in place to prevent anyone from accessing it.Create one server that can download all of the updates and store them locally in your cloud. Then have your VMs update from that server.Set up a Cloud NAT gateway so that your VMs can send outbound packets to the Internet and receive the updates.

11. Security mandates that your data access logs must be tamper-resistant and tamper-evident. What should you do to protect these logs?

Take a hash of your logs upon posting them to GCS and provide that hash to your security team to validate it every time they access a log.Store your logs in an archival GCS bucket where they’re not supposed to be accessed more than once a year to ensure that your logs are both protected and tamper-evident.Upload your logs to BigQuery and protect them using authorized views.Store your logs in GCS, enable object versioning, restrict IAM access only to authorized individuals, and leverage digital signatures to ensure that your logs are both protected and tamper-evident.

12. Your organization wants to centrally manage IAM policies for different departments independently. Which approach should you take?

Create multiple organizations for each department and use your IAM policies on each folder.Use a single organization with folders for each department.Use a single organization with multiple projects, each with a central owner.Create multiple organizations, one for each business function.

14. What are unit tests?

The smallest test in your environmentThe smallest test of your environmental variables to ensure that they work with one anotherThe smallest microservice to test in your applicationThe smallest testable aspect of your code, tested independently of other elements of code

15. Your application needs to provide user inputs through an API tier that then gets routed to the database tier, but you don’t want user inputs to flow directly to the database. How would you restrict this traffic flow?

Assign the web applications a public IP address, but put IP blacklisting in place to prevent anyone from accessing it.Add tags and appropriate firewall rules from your web frontend to your API and from your API to your database backend.Define your routing in a way that would prevent this traffic flow from occurring in the first place.Use separate subnets for each tier.

17. You’re an architect designing an application that is going to be run for half of the day only. You need to process batch jobs and would prefer to leverage a serverless product that scales to zero so that you can save money. What service should you use?

KubernetesCloud FunctionsCompute Engine PVMsApp Engine Flex

18. What are organization policies?

A configuration of constraints that are set on the folder node, enforcing the restrictions defined in the policyA configuration of constraints that are set on the organization node, enforcing the restrictions defined in the policyA configuration of constraints that are set on the project, the folder, or the organization node, enforcing the restrictions defined in the policyA configuration of constraints that are set on the project node, enforcing the restrictions defined in the policy

19. Your team is running many Apache Spark and Hadoop jobs in their on-premises environment and would like to migrate to the cloud with the least amount of change to their tooling. What should they use?

Cloud DataflowCloud DataprocKubernetes Engine with a Dataflow ConnectorCompute Engine with a Dataflow Connector

20. Your development team is building a new business-critical application using virtual machines to be deployed in a dedicated production project. As part of this effort, the team is looking to implement a dedicated application testing environment within a development project. After a centrally managed infrastructure team provisions its new development project using infrastructure as code, the development team members realize that they cannot access the new environment, but their production support team can. Upon investigating, they do not see any discrepancies in the roles that their users have in Cloud IAM. What is likely the issue?

They likely used the wrong --devtestprod flag when they were creating the project and inherited the wrong permissions in the hierarchy. Take a look at the code snippet they used to provision the project.They likely used the wrong --folder flag when they were creating the project and inherited the wrong permissions in the hierarchy. Take a look at the code snippet they used to provision the project.They granted the wrong permissions to their users. Their development team should have both development and production roles.The development team should not be working in this environment if they don’t have access. There’s probably a reason why they don’t have access in the first place.

22. You have a customer who wants to store data for at least ten years that will be accessed infrequently, at most once a year. The customer wants to optimize their cost. What solution should they use?

Google Cloud Storage with a Coldline storage classGoogle Cloud Storage with a Nearline storage classGoogle Cloud Storage with a Archive storage classGoogle Cloud Storage

23. You’re planning on pushing a new deployment to an App Engine application. You’d like to test the update with a small set of live users before you migrate all of the live traffic to the new version. What do you do?

Create a new App Engine instance group in GAE and target a small set of production users for your testing.Create a new application version in GAE and split traffic between the new and current version.Deploy the new update and migrate a set of your users to your old version before you migrate them back to the new version.Update your application version and create a firewall rule that restricts traffic from 75 percent of users to your new version.

24. You have an application that needs to interact with Google Cloud Storage and a few other Google Cloud APIs. This application needs to authenticate and be authorized to perform actions with these other services. Which type of account would you use in code when you want to interact with Google Cloud services?

GitHub accountService accountGoogle groupGoogle account

25. Google’s operational excellence principle demands the building of a foundation to enable reliability successfully across your infrastructure by efficiently running, managing, and monitoring systems that deliver business value. Which of the following is not a key strategy that drives this principle?

Monitoring business objectivesEnd-to-end automationDisaster recoveryPerformance and cost optimization

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com