Official Bank
0/334
Page
1/4
Google Certified Professional Cloud Architect (GCP) Exam (Professional-Cloud-Architect) - Google Cloud Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
334
Total Questions
1
Question
Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly such as an unwanted firewall change or server breach is detected. You want to follow Google-recommended practices.
What should you do?
What should you do?
Options
A
Export logs to a Cloud Storage bucket, and trigger Cloud Run with the relevant log events.
B
Schedule a cron job with Cloud Scheduler. The scheduled job queries the logs every minute for the relevant events.
C
Export logs to BigQuery, and trigger a query in BigQuery to process the log data for the relevant events.
D
Export logs to a Pub/Sub topic, and trigger Cloud Function with the relevant log events.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
Your designing the access control strategy for a new system that will store highly sensitive financial reports in a series of Cloud Storage buckets. The design must allow members of Google Groups to access only the reports they are authorized to see. All access must be directly tied to an employee's corporate identity for clear audit trails and the access model must be simple to operate and scalable.
What should you do?
What should you do?
Options
A
Generate and distribute time-limited signed URLs to grant users temporary, per-object access.
B
Enable uniform bucket-level access on the buckets, and grant predefined Storage IAM roles to the Google Groups.
C
Grant the IAM role roles/storage.objectAdmin to all authorized Google Groups to simplify permission management.
D
Maintain fine-grained access control, and use default object ACLs to grant the required permissions to the Google Groups.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization. They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?
Options
A
Configure an organization policy to restrict identities by domain
B
Configure Cloud Scheduler to trigger a Cloud Function every hour that removes all users that don't belong to the Cloud identity domain from all projects.
C
Configure an organization policy to block creation of service accounts
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company’s data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company’s Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?
Options
A
Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.
B
Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.
C
Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.
D
Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-recommended practices to detect anomalies in your company data. What should you do?
Options
A
Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your data.
B
Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.
C
Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.
D
Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.