PCA — Google Cloud Certified Professional Cloud Architect
Google

Google Cloud Certified Professional Cloud Architect (PCA) Practice Questions

★★★★★★ 4.9 111 verified reviews
81 questions
2026-06-22 updated
✓ Online quiz simulator
▶ Start Free Practice Exam

Domain coverage

  • Designing and Planning a Cloud Solution Architecture (~25%)
  • Managing and Provisioning a Solution Infrastructure (~17.5%)
  • Designing for Security and Compliance (~17.5%)
  • Analyzing and Optimizing Technical and Business Processes (~15%)
  • Managing Implementation (~12.5%)
  • Ensuring Solution and Operations Excellence (~12.5%)

Sample Questions (9 of 81 shown)

Q1 Designing and planning a cloud solution architecture
You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate approval file. You need to ensure that these documents cannot be deleted or overwritten for the next 5 years. What should you do?
  1. Create a retention policy on the bucket for the duration of 5 years. Create a lock on the retention policy.
  2. Create a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the organization level. Set the duration to 5 years.
  3. Use a customer-managed key for the encryption of the bucket. Rotate the key after 5 years.
  4. Create a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the project level. Set the duration to 5 years.
✓ Correct Answer: A
A. Object hold (retention policy) on the Cloud Storage bucket prevents object deletion or modification until the hold is removed, ensuring no changes to loan approval documents. Versioning (B) keeps versions but doesn't prevent modification. Lifecycle rules (C) manage deletion. IAM (D) controls access.
Q2 Designing and planning a cloud solution architecture
Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection. What actions will meet your company's needs?
  1. Compress and upload both archived files and files uploaded daily using the gsutil ג€"m option.
  2. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
  3. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily using the gsutil ג€"m option.
  4. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.
✓ Correct Answer: B
B. BigQuery is the ideal serverless data warehouse for data-centric analytics. Cloud SQL (A) is OLTP with scale limits. Cloud Spanner (C) is globally distributed transactional. Cloud Dataplex (D) governs data.
Q3 Designing and planning a cloud solution architecture
You are developing a globally scaled frontend for a legacy streaming backend data API. This API expects events in strict chronological order with no repeat data for proper processing. Which products should you deploy to ensure guaranteed-once FIFO (first-in, first-out) delivery of data?
  1. Cloud Pub/Sub alone
  2. Cloud Pub/Sub to Cloud Dataflow
  3. Cloud Pub/Sub to Stackdriver
  4. Cloud Pub/Sub to Cloud SQL
✓ Correct Answer: B
B. Pub/Sub with ordering keys ensures messages are processed in strict chronological order within each key. Dataflow (A) processes streams but doesn't guarantee strict ordering by itself. Apache Kafka (C) requires management. Cloud Scheduler (D) is for cron jobs.
Q4 Designing and planning a cloud solution architecture
You need to deploy an application to Google Cloud. The application receives traffic via TCP and reads and writes data to the filesystem. The application does not support horizontal scaling. The application process requires full control over the data on the file system because concurrent access causes corruption. The business is willing to accept a downtime when an incident occurs, but the application must be available 24/7 to support their business operations. You need to design the architecture of this application on Google Cloud. What should you do?
  1. Use a managed instance group with instances in multiple zones, use Cloud Filestore, and use an HTTP load balancer in front of the instances.
  2. Use a managed instance group with instances in multiple zones, use Cloud Filestore, and use a network load balancer in front of the instances.
  3. Use an unmanaged instance group with an active and standby instance in different zones, use a regional persistent disk, and use an HTTP load balancer in front of the instances.
  4. Use an unmanaged instance group with an active and standby instance in different zones, use a regional persistent disk, and use a network load balancer in front of the instances.
✓ Correct Answer: D
D. Compute Engine provides TCP-based VMs with persistent disks for file system storage, ideal for the TCP application. GKE (A) is for containers. Cloud Run (B) is serverless HTTP/S. App Engine (C) is PaaS.
Q5 Designing and planning a cloud solution architecture
You are working at a sports association whose members range in age from 8 to 30. The association collects a large amount of health data, such as sustained injuries. You are storing this data in BigQuery. Current legislation requires you to delete such information upon request of the subject. You want to design a solution that can accommodate such a request. What should you do?
  1. Use a unique identifier for each individual. Upon a deletion request, delete all rows from BigQuery with this identifier.
  2. When ingesting new data in BigQuery, run the data through the Data Loss Prevention (DLP) API to identify any personal information. As part of the DLP scan, save the result to Data Catalog. Upon a deletion request, query Data Catalog to find the column with personal information.
  3. Create a BigQuery view over the table that contains all data. Upon a deletion request, exclude the rows that affect the subject's data from this view. Use this view instead of the source table for all analysis tasks.
  4. Use a unique identifier for each individual. Upon a deletion request, overwrite the column with the unique identifier with a salted SHA256 of its value.
✓ Correct Answer: A
A. Healthcare Natural Language API extracts medical insights from unstructured health data. Cloud DLP (B) identifies PII. BigQuery (C) analyzes structured data. AutoML Natural Language (D) requires training.
Q6 Designing and planning a cloud solution architecture
Your company is designing its application landscape on Compute Engine. Whenever a zonal outage occurs, the application should be restored in another zone as quickly as possible with the latest application data. You need to design the solution to meet this requirement. What should you do?
  1. Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in the same zone.
  2. Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another zone in the same region. Use the regional persistent disk for the application data.
  3. Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in another zone within the same region.
  4. Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another region. Use the regional persistent disk for the application data.
✓ Correct Answer: B
B. Regional managed instance group distributes instances across zones within a region for zonal outage protection. Multi-region (A) spans continents. Global MIG (C) isn't a GCP concept. Single-zone MIG (D) is a single point of failure.
Q7 Designing and planning a cloud solution architecture
Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?
  1. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.
  2. Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.
  3. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.
  4. Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.
✓ Correct Answer: B
B. Organization policy constraint uses resource.location restriction to prevent resource creation outside allowed regions for compliance. IAM (A) controls access. VPC SC (C) prevents data exfiltration. Audit Logs (D) record activity.
Q8 Designing and planning a cloud solution architecture
You need to deploy a stateful workload on Google Cloud. The workload can scale horizontally, but each instance needs to read and write to the same POSIX filesystem. At high load, the stateful workload needs to support up to 100 MB/s of writes. What should you do?
  1. Use a persistent disk for each instance.
  2. Use a regional persistent disk for each instance.
  3. Create a Cloud Filestore instance and mount it in each instance.
  4. Create a Cloud Storage bucket and mount it in each instance using gcsfuse.
✓ Correct Answer: C
C. Filestore provides managed NFS shares accessible by multiple instances for stateful workloads that need shared reads/writes. Persistent Disk (A) is single-instance. Cloud Storage (B) is object storage. Cloud SQL (D) is relational DB.
Q9 Designing and planning a cloud solution architecture
Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?
  1. Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.
  2. Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.
  3. Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.
  4. Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.
✓ Correct Answer: A
A. Sandbox (namespace-level isolation) enables microservices development without interference. Workspace (B) organizes projects, not isolation. Dev/test project (C) adds cost. Artifact Registry (D) stores images.

You've viewed 3 of 81 questions. Start the free practice exam to answer all questions with instant feedback.

Exam overview

The Google Cloud Professional Cloud Architect (PCA) certification is the crown jewel of Google Cloud credentials—the certification that validates your ability to design, plan, and manage robust, secure, and scalable cloud architecture using Google Cloud technologies. Unlike the Associate Cloud Engineer exam which tests your ability to execute, PCA tests your ability to think: to weigh trade-offs between competing architectural patterns, to apply the Well-Architected Framework's six pillars to real enterprise scenarios, and to navigate complex case studies where there is rarely a single "right" answer.

Our PCA practice test suite has been rebuilt for the v6.1 exam (effective October 2025), which introduced Vertex AI, Model Armor, Apigee, Migration Center, and three entirely new case studies (Altostrat Media, Cymbal Retail, KnightMotives Automotive). With 500+ unique questions spanning all six domains and four case studies, every question is accompanied by architectural reasoning that explains not just why an answer is correct, but why the alternatives would fail in production—whether due to cost overruns, security gaps, or operational complexity.

The PCA exam is fundamentally different from Associate-level exams because 20-30% of your score depends on case study analysis. You must read EHR Healthcare, Altostrat Media, Cymbal Retail, and KnightMotives Automotive—understanding their business requirements, technical constraints, and future growth plans—then answer questions that require synthesizing information across multiple paragraphs. Our practice tests include dedicated case-study sections that train you to extract the right architectural signals from dense business narratives. At $200, PCA represents a significant investment; our materials ensure you walk into the testing center with the confidence of a seasoned architect.

Official Exam Domains & Weighting

To successfully pass the PCA v6.1 exam, candidates must demonstrate architectural mastery across the following six core domains:
  • Domain 1: Designing and Planning a Cloud Solution Architecture (~25%) — Cost optimization, load balancer selection, migration strategies, Well-Architected Framework application, and enterprise solution design.
  • Domain 2: Managing and Provisioning a Solution Infrastructure (~17.5%) — Networking design (VPC, hybrid connectivity), compute and storage provisioning, and NEW: Vertex AI infrastructure and pre-built AI solutions.
  • Domain 3: Designing for Security and Compliance (~17.5%) — IAM architecture, encryption strategies, VPC Service Controls, Model Armor for AI workloads, and compliance frameworks.
  • Domain 4: Analyzing and Optimizing Technical and Business Processes (~15%) — CI/CD pipeline design, SRE principles, Cloud Deploy, cost optimization, and performance tuning.
  • Domain 5: Managing Implementation (~12.5%) — Deployment strategies, Terraform/IaC patterns, Apigee API management, and Migration Center workload assessment.
  • Domain 6: Ensuring Solution and Operations Excellence (~12.5%) — Monitoring and logging architecture, disaster recovery planning, and operational reliability.

What Our Customers Say 111 verified reviews

4.9 ★★★★★★ Based on 111 reviews
★★★★★★
Only used this for a week before my PCA exam and it was enough. Questions are very close to the real deal.
— Katherine W.
★★★★★★
I was skeptical about paying for exam prep, but the PCA bank saved me. Covered everything I needed.
— Nathan R.
★★★★★★
Covered all five domains of the PCA exam thoroughly. I especially appreciated the detailed breakdowns for the tricky questions.
— Natalie R.
★★★★★
Ended up buying three different PCA prep resources and this was by far the most helpful one. Don’t waste money on others.
— Penelope W.
★★★★★★
Passed the PCA certification exam after studying this material for three weekends. Very efficient way to prepare.
— Xavier H.
★★★★★★
The question explanations for PCA really dig into the AWS (or relevant) concepts. Helped me understand things at a deeper level.
— Hazel C.

Log in to rate this exam and leave a review.

Submitted for moderation before publishing. Keep it helpful and respectful.

Frequently Asked Questions

PCA is widely considered one of the most challenging cloud architecture certifications, on par with AWS SAP-C02. The key differentiator is PCA's heavy reliance on case studies (20-30% of the exam)—you must read and internalize four complex business narratives before answering questions that require synthesis across multiple domains. Our practice tests include 4 full-length case study sections to build this critical skill.

Significant updates: Vertex AI sections added to Domain 2, AI security (Model Armor) added to Domain 3, Well-Architected Framework elevated to core knowledge, Terraform/IaC explicitly required, Apigee for API management, Migration Center for workload assessment, and three new case studies replaced the old ones. Approximately 30% of the exam is new material. Our question bank has been completely refreshed for v6.1.

Google recommends 3+ years of industry experience and 1+ year on GCP. Most candidates invest 8-12 weeks (120-180 total hours). While ACE is not a prerequisite, it provides essential GCP foundations. Our practice tests bridge the gap by including difficulty levels from Associate (foundational concepts) to Professional (architectural decision-making).

The four case studies (EHR Healthcare, Altostrat Media, Cymbal Retail, KnightMotives Automotive) are available during the exam. They test your ability to apply architectural concepts to specific business contexts—not your memory of the case study details. Our practice questions simulate this by providing case study excerpts and asking you to make architectural decisions based on the described constraints.

Yes, PCA is available in English and Japanese. The Japanese version is particularly popular among GCP architects in Japan. Our product page provides Japanese-language preparation for candidates who prefer studying in their native language.

PCA certification is valid for 2 years. Google offers a separate, shorter renewal exam (25 questions, 60 minutes, $100) that is 90-100% case-study based and heavily focused on generative AI. The renewal exam is available 60 days before your certification expires through 30 days after. Our question bank covers both the full exam and renewal-specific topics.

PCA is consistently ranked among the highest-paying IT certifications. According to industry surveys, Google Cloud-certified architects command 15-25% salary premiums. The certification validates end-to-end architecture skills—design, security, cost optimization, and operations—making you qualified for senior architect, cloud consultant, and CTO-track roles. Our practice tests prepare you not just for the exam but for the architectural thinking these roles demand daily.