UUS Practice Tests⌕ Search
IT Certifications

Google Cloud Cloud Architect Certification Exam Practice Test

Google Cloud architecture work involves designing systems that meet application, connectivity, data, and operational needs across cloud environments. Practice scenarios in this bank use decisions such as choosing managed database and messaging services, connecting networks privately, applying resource policies, and diagnosing network paths. These choices require matching service capabilities to workload requirements while accounting for how resources interact.

Exam overview

Exam providerGoogle Cloud
Exam codeNot listed
CategoryIT Certifications

About the Google Cloud Cloud Architect Certification Exam

Cloud architects translate requirements into designs for reliable, manageable Google Cloud environments. Relevant decisions include selecting a managed PostgreSQL service for relational workloads, using asynchronous messaging to separate event producers from consumers, and choosing private connectivity patterns for hybrid networks or services shared across VPCs. Architecture work also involves governing configurations across projects and folders, resolving private DNS across connected networks, and using centralized logging and sensitive-data discovery to support operations and protection. For batch workloads, the execution model should fit the trigger and lifecycle—for example, a scheduled container task that stops after completion rather than a continuously running service. Network analysis tools help investigate configuration and reachability when resources or external endpoints cannot communicate as expected.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

A team wants to inspect and troubleshoot the network paths and connectivity configuration between Google Cloud resources and external endpoints. Which service is specifically designed to help analyze network configuration and connectivity?

  1. ANetwork Intelligence Center
  2. BCloud Profiler
  3. CError Reporting
  4. DArtifact Registry
Show answerCorrect answer: A

Network Intelligence Center provides tools for understanding and troubleshooting network performance, topology, and connectivity configuration. Cloud Profiler analyzes application performance, Error Reporting groups application errors, and Artifact Registry stores build artifacts.

Question 2

An application needs a managed relational database with automated backups and support for standard PostgreSQL clients. Which Google Cloud service is the most direct fit?

  1. ACloud SQL
  2. BCloud Bigtable
  3. CCloud Storage
  4. DFirestore
Show answerCorrect answer: A

Cloud SQL is a managed relational database service that supports PostgreSQL, among other database engines. Bigtable and Firestore are non-relational databases, while Cloud Storage is object storage.

Question 3

An organization wants to discover and classify sensitive information stored across supported Google Cloud data sources, then use the findings to guide data protection. Which service is designed for this purpose?

  1. ASensitive Data Protection
  2. BCloud Monitoring
  3. CCloud Armor
  4. DCloud Scheduler
Show answerCorrect answer: A

Sensitive Data Protection (formerly Cloud Data Loss Prevention) can inspect and classify sensitive data in supported sources and help with de-identification and protection workflows. The other services address metrics and alerts, application-edge protection, and scheduled job invocation.

Question 4

A company has workloads in several projects and wants to apply a common organization-wide constraint, while allowing a specific folder to use a narrower exception where supported. Which Google Cloud mechanism is intended to govern resource configurations at this scale?

  1. AOrganization policies inherited through the resource hierarchy
  2. BFirewall rules created separately in every VPC
  3. CLabels applied to each virtual machine
  4. DCloud Monitoring dashboards shared with project owners
Show answerCorrect answer: A

Organization Policy lets administrators define constraints across an organization, folders, or projects. Policies follow the resource hierarchy, enabling centralized governance with more specific policies at lower levels where the constraint supports inheritance and overrides.

Question 5

A data platform needs to ingest events from many producers into a durable, scalable messaging service so that independent consumers can process them asynchronously. Which service is designed for this pattern?

  1. APub/Sub
  2. BCloud Scheduler
  3. CCloud Tasks
  4. DCloud Build
Show answerCorrect answer: A

Pub/Sub is a managed messaging service for asynchronous event ingestion and delivery, allowing producers and consumers to operate independently. Cloud Scheduler triggers work on a schedule, Cloud Tasks manages task delivery, and Cloud Build runs build workflows.

Question 6

A company needs to connect its existing on-premises network to a Google Cloud VPC over a dedicated physical connection, with traffic avoiding the public internet. Which service is designed for this connectivity?

  1. ACloud VPN
  2. BCloud Interconnect
  3. CPrivate Service Connect
  4. DNetwork Connectivity Center
Show answerCorrect answer: B

Cloud Interconnect provides dedicated, private connectivity between an on-premises network and Google Cloud. Cloud VPN uses encrypted tunnels over the internet, while Private Service Connect and Network Connectivity Center address different connectivity patterns.

Question 7

A company wants to expose a service running in its VPC to consumers in other VPC networks through private IP connectivity, without requiring consumers to use public endpoints. Which capability is designed for this pattern?

  1. APrivate Service Connect
  2. BCloud NAT
  3. CCloud CDN
  4. DCloud DNS
Show answerCorrect answer: A

Private Service Connect enables private connectivity between consumers and producer services using internal IP addresses. Cloud NAT provides outbound internet access, Cloud CDN caches content, and Cloud DNS provides name resolution.

How to use this practice test

Access is free. The published bank contains 50 questions; each practice session presents up to 20 randomly selected questions. Use a session to test service selection and architecture reasoning across the scenarios, then review the results to identify which decisions or concepts need more attention.

Preparation tips

  • For each scenario, identify the primary requirement first—such as PostgreSQL compatibility, durable event ingestion, private service access, or a dedicated hybrid connection—before comparing services.
  • Sketch the network relationships in VPC questions, including connection type, IP reachability, and which network hosts the private DNS zone.
  • Distinguish organization-level policy constraints from project configuration, and consider how folder-level exceptions affect governance.
  • Compare a scheduled, finite container task with a continuously running application service; match the execution model to the workload lifecycle.
  • Practice tracing an operational problem from logs, data-protection findings, or network connectivity analysis to the Google Cloud capability suited to investigate it.
Official sourceOfficial exam page ↗