Real IT Certification Exams Questions & Dumps | Get Certified with CertQuestionsBank.com

Latest Professional Cloud Architect Exam Practice Questions

The practice questions for Professional Cloud Architect exam was last updated on 2025-06-01 .

Viewing page 1 out of 18 pages.

Viewing questions 1 out of 90 questions.

Question#1

Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords .
What authentication strategy should they use?

A. Use G Suite Password Sync to replicate passwords into Google.

B. Federate authentication via SAML 2.0 to the existing Identity Provider.

C. Provision users in Google using the Google Cloud Directory Sync tool.

D. Ask users to set their Google password to match their corporate password.

Explanation:
https://cloud.google.com/solutions/authenticating-corporate-users-in-a-hybrid-environment

Question#2

You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines .
What should you do?

A. Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet

B. Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet

C. Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

D. Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

Explanation:
A Cloud NAT gateway can perform NAT for nodes and Pods in a private cluster, which is a type of VPC-native cluster. The Cloud NAT gateway must be configured to apply to at least the following subnet IP address ranges for the subnet that your cluster uses:
Subnet primary IP address range (used by nodes)
Subnet secondary IP address range used for Pods in the cluster Subnet secondary IP address range used for Services in the cluster
The simplest way to provide NAT for an entire private cluster is to configure a Cloud NAT gateway to apply to all of the cluster's subnet's IP address ranges. https://cloud.google.com/nat/docs/overview

Question#3

You have been engaged by your client to lead the migration of their application infrastructure to GCP. One of their current problems is that the on-premises high performance SAN is requiring frequent and expensive upgrades to keep up with the variety of workloads that are identified as follows: 20TB of log archives retained for legal reasons; 500 GB of VM boot/data volumes and templates; 500 GB of image thumbnails; 200 GB of customer session state data that allows customers to restart sessions even if off-line for several days.
Which of the following best reflects your recommendations for a cost-effective storage allocation?
A. Local SSD for customer session state datA. Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.
B. Memcache backed by Cloud Datastore for the customer session state datA. Lifecycle-managed Cloud
Storage for log archives, thumbnails, and VM boot/data volumes.
C. Memcache backed by Cloud SQL for customer session state datA. Assorted local SSD-backed instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.
D. Memcache backed by Persistent Disk SSD storage for customer session state datA. Assorted local SSDbacked instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.

A. D

Explanation:
https://cloud.google.com/compute/docs/disks

Question#4

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage .
What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

A. Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

B. Ensure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles.

C. Generate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each V

D. Create a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.

Question#5

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable .
What should you do?

A. Make sure a developer is tagging the code commit with the date and time of commit

B. Make sure a developer is adding a comment to the commit that links to the deployment.

C. Make the container tag match the source code commit hash.

D. Make sure the developer is tagging the commits with: latest

Exam Code: Professional Cloud ArchitectQ & A: 276 Q&AsUpdated: 2025-06-01

Get All Professional Cloud Architect Q&As

Professional Cloud Architect Online Practice Questions

Question#1

Question#2

Question#3

Question#4

Question#5

Top 20 Exams

Important Links

Know Us

Follow Us