Cisco®
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
ServiceNow®
All Vendors
  2. Home
  3. Exams
  4. Google
  5. Google Cloud Architect Professional

Google Cloud Architect Professional: Google Cloud Certified - Professional Cloud Architect
Free Practice Exam Questions (page: 6)
Updated On: 2-Jan-2026

Page 6 of 61
PDF with 297 Questions
View Related Case Study

For this question, refer to the Mountkirk Games case study. You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game programmatic access to a legacy game's Firestore database. Access should be as restricted as possible.
What should you do?

  1. Create a service account (SA) in the legacy game's Google Cloud project, add a second SA in the new game's IAM page, and then give the Organization Admin role to both SAs.
  2. Create a service account (SA) in the legacy game's Google Cloud project, give the SA the Organization Admin role, and then give it the Firebase Admin role in both projects.
  3. Create a service account (SA) in the legacy game's Google Cloud project, add this SA in the new game's IAM page, and then give it the Firebase Admin role in both projects.
  4. Create a service account (SA) in the legacy game's Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game's project.

Answer(s): B



View Related Case Study

For this question, refer to the Mountkirk Games case study. Games wants to limit the physical location of resources to their operating Google Cloud regions.
What should you do?

  1. Configure an organizational policy which constrains where resources can be deployed.
  2. Configure Identity Access Management (IAM) conditions to limit what resources can be configured.
  3. Configure the quotas for resources in the regions not being used to 0.
  4. Configure a custom alert in Cloud Monitoring so you can disable resources as they are created in other regions.

Answer(s): C



View Related Case Study

For this question, refer to the Mountkirk Games case study. You need to implement a network ingress for a new game that meets the defined business and technical requirements. Mountkirk Games wants each regional game instance to be located in multiple Google Cloud regions.
What should you do?

  1. Configure a global load balancer connected to a managed instance group running Compute Engine instances.
  2. Configure kubectl with a global load balancer and Google Kubernetes Engine.
  3. Configure a global load balancer with Google Kubernetes Engine.
  4. Configure a Multi Cluster Ingress with a global load balancer and Google Kubernetes Engine.

Answer(s): A



View Related Case Study

For this question, refer to the Mountkirk Games case study. Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily. You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user's perspective.
What should you do?

  1. Create CPU Utilization and Request Latency as service level indicators.
  2. Create GKE CPU Utilization and Memory Utilization as service level indicators.
  3. Create Request Latency and Error Rate as service level indicators.
  4. Create an uptime check and Error Rate as service level indicators.

Answer(s): A



View Related Case Study

For this question, refer to the Mountkirk Games case study. Mountkirk Games wants you to secure access from the new gaming application platform to Google Cloud. You want to streamline the process and follow Google- recommended practices.
What should you do?

  1. Configure Workload Identity and service accounts to be used by the application platform.
  2. Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the application platform.
  3. Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.
  4. Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

Answer(s): A



Viewing page 6 of 61
Viewing questions 26 - 30 out of 297 questions



Post your Comments and Discuss Google Google Cloud Architect Professional exam prep with other Community members:

Google Cloud Architect Professional Exam Discussions & Posts