GCP PROFESSIONAL CLOUD
ARCHITECT: GOOGLE CLOUD
CERTIFICATION - QUIZ 05. EXAM
QUESTIONS AND ANSWERS 2026
VERIFIED.
Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes
many small services that they want to be able to update and roll back quickly. Mountkirk Games
has the following requirements: (1) Services are deployed redundantly across multiple regions
in the US and Europe, (2) Only frontend services are exposed on the public internet, (3) They
can reserve a single frontend IP for their fleet of services, and (4) Deployment artifacts are
immutable. Which set of products should they use? - ANS Google Kubernetes Registry,
Google Container Engine, Google HTTP(S) Load Balancer
You are the data compliance officer for TerramEarth and must protect customers' personally
identifiable information (PII), like credit card information. TerramEarth wants to personalize
product recommendations for its large industrial customers. You need to respect data privacy
and deliver a solution. What should you do? - ANS Use the Cloud Data Loss Prevention (DLP)
API to provide data to the recomendation service
One of EHR healthcare customers is an internationally renowned research and hospital facility.
Many of their patients are well-known public personalities. Sources both inside and outside
have tried many times to obtain health information on these patients for malicious purposes.
The hospital requires that patient information stored in Cloud Storage buckets not leave the
geographic areas in which the buckets are hosted. You need to ensure that information stored in
Cloud Storage buckets in the "europe-west2" region does not leave that area. What should you
do? - ANS Enable Virtual Private Network Service Controls, and create a service perimeter
around the Cloud Storage resources.
@COPYRIGHT ALL RIGHTS RESERVED PAGE 1 OF 12
, You have been asked to brief executives on the networking aspects of the cloud migration. You
want to begin at the highest level of abstraction and then drill down into lower-level
components. What topic would you start with? - ANS VPNs
Your organization has a 3-tier web application deployed in the same Google Cloud Virtual
Private Cloud (VPC). Each tier (web, API, and database) scales independently of the others.
Network traffic should flow through the web to the API tier, and then on to the database tier.
Traffic should not flow between the web and the database tier. How should you configure the
network with minimal steps? - ANS Add tags to each tier and set up firewall rules to allow the
desired traffic flow.
Your customer is moving their corporate applications to Google Cloud. The security team wants
detailed visibility of all resources in the organization. You use Resource Manager to set yourself
up as the Organization Administrator. Which Cloud Identity and Access Management (Cloud
IAM) roles should you give to the security team while following Google recommended
practices? - ANS Organization viewer, Project viewer
As part of a migration to GCP, your department will run a collaboration and document
management application on Compute Engine virtual machines. The application requires a
filesystem that can be mounted using operating system commands. All documents should be
accessible from any instance. What storage solution would you recommend? - ANS Cloud
Filestore
what's true about Virtual Private Cloud network? - ANS Projects can contain multiple VPC
networks
A service has detected that a downstream process is returning a large number of errors. The
service automatically slows down the number of messages it sends to the downstream process.
This is an example of what kind of strategy? - ANS Upstream Throttling
HRL wants you to help them bring existing recorded video content to new fans in emerging
regions. Considering the HRL business and technical requirements, what should you do? -
ANS Use Cloud CDN to cache the video content from HRL's existing public cloud provider.
@COPYRIGHT ALL RIGHTS RESERVED PAGE 2 OF 12
ARCHITECT: GOOGLE CLOUD
CERTIFICATION - QUIZ 05. EXAM
QUESTIONS AND ANSWERS 2026
VERIFIED.
Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes
many small services that they want to be able to update and roll back quickly. Mountkirk Games
has the following requirements: (1) Services are deployed redundantly across multiple regions
in the US and Europe, (2) Only frontend services are exposed on the public internet, (3) They
can reserve a single frontend IP for their fleet of services, and (4) Deployment artifacts are
immutable. Which set of products should they use? - ANS Google Kubernetes Registry,
Google Container Engine, Google HTTP(S) Load Balancer
You are the data compliance officer for TerramEarth and must protect customers' personally
identifiable information (PII), like credit card information. TerramEarth wants to personalize
product recommendations for its large industrial customers. You need to respect data privacy
and deliver a solution. What should you do? - ANS Use the Cloud Data Loss Prevention (DLP)
API to provide data to the recomendation service
One of EHR healthcare customers is an internationally renowned research and hospital facility.
Many of their patients are well-known public personalities. Sources both inside and outside
have tried many times to obtain health information on these patients for malicious purposes.
The hospital requires that patient information stored in Cloud Storage buckets not leave the
geographic areas in which the buckets are hosted. You need to ensure that information stored in
Cloud Storage buckets in the "europe-west2" region does not leave that area. What should you
do? - ANS Enable Virtual Private Network Service Controls, and create a service perimeter
around the Cloud Storage resources.
@COPYRIGHT ALL RIGHTS RESERVED PAGE 1 OF 12
, You have been asked to brief executives on the networking aspects of the cloud migration. You
want to begin at the highest level of abstraction and then drill down into lower-level
components. What topic would you start with? - ANS VPNs
Your organization has a 3-tier web application deployed in the same Google Cloud Virtual
Private Cloud (VPC). Each tier (web, API, and database) scales independently of the others.
Network traffic should flow through the web to the API tier, and then on to the database tier.
Traffic should not flow between the web and the database tier. How should you configure the
network with minimal steps? - ANS Add tags to each tier and set up firewall rules to allow the
desired traffic flow.
Your customer is moving their corporate applications to Google Cloud. The security team wants
detailed visibility of all resources in the organization. You use Resource Manager to set yourself
up as the Organization Administrator. Which Cloud Identity and Access Management (Cloud
IAM) roles should you give to the security team while following Google recommended
practices? - ANS Organization viewer, Project viewer
As part of a migration to GCP, your department will run a collaboration and document
management application on Compute Engine virtual machines. The application requires a
filesystem that can be mounted using operating system commands. All documents should be
accessible from any instance. What storage solution would you recommend? - ANS Cloud
Filestore
what's true about Virtual Private Cloud network? - ANS Projects can contain multiple VPC
networks
A service has detected that a downstream process is returning a large number of errors. The
service automatically slows down the number of messages it sends to the downstream process.
This is an example of what kind of strategy? - ANS Upstream Throttling
HRL wants you to help them bring existing recorded video content to new fans in emerging
regions. Considering the HRL business and technical requirements, what should you do? -
ANS Use Cloud CDN to cache the video content from HRL's existing public cloud provider.
@COPYRIGHT ALL RIGHTS RESERVED PAGE 2 OF 12
