Google Cloud Professional Cloud Architect
225 practice questions
Last reviewed: April 2026
Personal notes and resource links for your study journey
Filter by Certification
The Google Cloud Professional Cloud Architect (PCA) is the flagship credential of the GCP track and one of the highest-paying single cloud certifications in the market per levels.fyi salary data. It validates the ability to design, develop, and manage scalable, secure, and reliable Google Cloud solutions end-to-end. The exam pairs general scenario questions with deep dives into four published case studies (Mountkirk Games, TerramEarth, EHR Healthcare, Helicopter Racing League) that account for roughly 30% of questions — meaning candidates must internalize four distinct fictional companies and their requirements before exam day. PCA is the GCP analog of AWS Solutions Architect Professional and Azure AZ-305, and is consistently cited as one of the more demanding professional cloud exams.
Largest domain at 25%. Business and technical requirements gathering, multi-region and multi-tier designs, network and storage planning. Heavy case-study tie-ins.
Compute (GCE, GKE, Cloud Run, App Engine), networking (VPC, Cloud Load Balancing, Cloud CDN), storage and databases (Cloud Storage, Spanner, Cloud SQL, Firestore, Bigtable). 15% by weight but high density.
IAM hierarchy, VPC Service Controls, CMEK / EKM, audit logging, BeyondCorp, regulatory frameworks (HIPAA, PCI, FedRAMP). 20% — VPC Service Controls is a frequent stumbling block.
Migration assessment, TCO modeling, FinOps with Active Assist and Recommender, organizational change. 15% — heavily case-study-driven.
Smallest domain at 10%. Deployment Manager / Terraform, CI/CD with Cloud Build and Artifact Registry, infrastructure-as-code patterns.
SRE principles (SLOs, SLIs, error budgets), Cloud Operations suite, disaster-recovery patterns, regional vs. multi-regional resources. 15%.
Services you'll encounter on the exam and why each one matters.
Hierarchical resource container (Organization → Folders → Projects) with IAM inheritance, Organization Policy constraints, and centralized billing-account attachment.
Why it's on the exam: The Org / Folder / Project hierarchy underpins every Designing and Planning Cloud Solution Architecture scenario — multi-environment isolation and policy inheritance recur in PCA case studies.
Hybrid connectivity options: Dedicated / Partner Interconnect for private 10–100 Gbps links, HA VPN for IPsec tunnels with 99.99% SLA, paired with Cloud Router for dynamic BGP.
Why it's on the exam: Interconnect vs. HA VPN tradeoffs anchor Designing and Planning hybrid-cloud scenarios — bandwidth, predictability, and SLA tiers are recurring PCA distractors.
Multi-cluster / multi-cloud Kubernetes platform with managed Istio-based service mesh, Config Management for GitOps, and unified policy across GKE, EKS, AKS, and on-premises clusters.
Why it's on the exam: Anthos appears in Designing and Planning scenarios that require consistent app delivery across on-premises and multi-cloud — frequently contrasted with vanilla GKE in PCA case studies.
Managed Kubernetes with Autopilot (fully managed nodes) and Standard modes, Workload Identity for keyless GCP auth, Binary Authorization, and regional clusters for HA.
Why it's on the exam: GKE Autopilot vs. Standard choice and Workload Identity wiring recur in Managing and Provisioning Cloud Solution Infrastructure scenarios.
Managed Instance Groups with regional HA, auto-healing, autoscaling (CPU / load-balancing / custom metric / schedule), and rolling / canary updates via instance templates.
Why it's on the exam: MIGs as the IaaS scaling primitive recur in Managing and Provisioning Cloud Solution Infrastructure — distinguishing stateful vs. stateless MIGs and rolling-update strategies is common.
Single global anycast frontend (Global External Application LB) plus regional internal / external Application and Network load balancers, with Cloud Armor and Cloud CDN integration.
Why it's on the exam: Global vs. regional LB selection, internal LB for service-to-service, and Cloud Armor WAF policies anchor Designing and Planning and Ensuring Reliability scenarios.
Globally available asynchronous messaging with at-least-once delivery, exactly-once delivery option, push / pull subscriptions, Pub/Sub Lite for cost-tuned partitioned streams, and BigQuery / Cloud Storage subscriptions.
Why it's on the exam: Pub/Sub anchors event-driven and async-decoupling answers in Designing and Planning — exactly-once vs. at-least-once tradeoffs and ordering keys are recurring PCA topics.
Object storage with Standard / Nearline / Coldline / Archive classes, dual-region and multi-region locations, Object Lifecycle Management, Object Versioning, and Customer-Managed Encryption Keys.
Why it's on the exam: Storage-class lifecycle plus dual-region vs. multi-region selection recur across Designing and Planning Cloud Solution Architecture cost / durability scenarios.
Serverless petabyte-scale analytical data warehouse with separation of storage and compute, BigQuery ML, BI Engine, federated queries, and on-demand / capacity-based slot pricing.
Why it's on the exam: BigQuery as the analytics destination anchors Analyzing and Optimizing Technical and Business Processes — slot-pricing tradeoffs and partitioning / clustering decisions are common PCA scenarios.
Horizontally scalable, strongly consistent relational database with global / multi-region configurations, five 9s availability, and TrueTime-backed external consistency.
Why it's on the exam: Spanner is the named answer for global, strongly consistent, transactional workloads in Designing and Planning — typically contrasted with Cloud SQL (regional) and Bigtable (NoSQL).
Managed MySQL, PostgreSQL, and SQL Server with HA failover replicas, read replicas (incl. cross-region), point-in-time recovery, and Cloud SQL Auth Proxy for IAM-based connections.
Why it's on the exam: Cloud SQL HA + read replica patterns anchor Ensuring Solution and Operations Reliability questions for relational workloads that don't justify Spanner.
Fully managed container runtime with scale-to-zero, gRPC / HTTP / WebSockets / Jobs, VPC egress controls, and Cloud Run for Anthos for clusters where required.
Why it's on the exam: Cloud Run vs. GKE Autopilot vs. App Engine selection is a recurring Designing and Planning answer for stateless containerized services with bursty traffic.
Serverless event-driven functions (Gen 2 built on Cloud Run) with HTTP and Eventarc triggers, VPC connectors, and per-function IAM-bound service accounts.
Why it's on the exam: Cloud Functions Gen 2 is the canonical event-glue answer in Designing and Planning — recurring contrast with Cloud Run (long-running) and Workflows (orchestration).
Managed CI/CD with private worker pools, Artifact Registry integration, signed provenance attestations for Binary Authorization, and triggers on Cloud Source Repos / GitHub / Bitbucket.
Why it's on the exam: Cloud Build + Artifact Registry + Binary Authorization is the named supply-chain pattern in Managing Implementation scenarios.
Agentless migration of on-premises and other-cloud VMs to Compute Engine with block-level replication, test clones, and automated cutover groups.
Why it's on the exam: M4VM (formerly Migrate for Compute Engine) is the named lift-and-shift answer in PCA case studies that pair Managing Implementation with Designing and Planning migration phases.
Role-based access control with primitive / predefined / custom roles, IAM Conditions, Workload Identity Federation for keyless external auth, paired with Cloud Identity for workforce SSO + MFA.
Why it's on the exam: IAM least-privilege design with Workload Identity Federation and IAM Conditions anchors Designing for Security and Compliance — service-account key elimination is a recurring PCA recommendation.
Managed key creation and rotation with software / HSM / external (EKM) protection levels, Customer-Managed Encryption Keys (CMEK) on GCS / BigQuery / GKE / Spanner, and Autokey for default-CMEK projects.
Why it's on the exam: CMEK / EKM choices anchor Designing for Security and Compliance scenarios that require customer-controlled cryptographic boundaries or regulatory key-residency guarantees.
Centralized CSPM / CWP / vulnerability-management surface with Standard, Premium, and Enterprise tiers, integrating findings from Cloud Armor, Web Security Scanner, VM Manager, and Event Threat Detection.
Why it's on the exam: Security Command Center Premium is the named answer for org-wide posture, attack-path analysis, and compliance dashboards in Designing for Security and Compliance.
Google Cloud Observability suite: structured Cloud Logging with log-based metrics and Log Analytics on BigQuery, Cloud Monitoring with SLO / alerting / uptime checks, and Cloud Trace for distributed-trace latency analysis.
Why it's on the exam: Aggregated Org sinks, SLO-based alerting, and trace-driven root-cause anchor Ensuring Solution and Operations Reliability scenarios in PCA case studies.
$140k–$195k–$290k USD annual
Range reflects US-based senior cloud architects at GCP-shop companies. levels.fyi consistently lists PCA among the top three highest-paying single cloud certifications by job-posting salary band. FAANG L6+ architect TC clears $400k. The cert alone does not unlock these salaries — it complements 8–12+ years of demonstrated architecture experience.
Source: levels.fyi 2025–2026 (Google L5–L6 architects, FAANG and unicorn senior cloud architects); cited by levels.fyi as one of the highest-paying single cloud certifications by job-posting salary band; U.S. BLS OEWS May 2024 (15-1241 computer network architects, 11-3021 computer & information systems managers). Figures are approximate; actual compensation depends on role, region, and experience.
PCA is the most-requested GCP credential on senior cloud-architect job postings and the single GCP cert most frequently named in compensation surveys. Demand is heaviest at Google Cloud partners, large enterprises with multi-cloud strategies, and digital-native companies running primarily on GCP (Spotify, Snap, PayPal, Twitter/X, Wayfair). The cert is portable across industries — finance, retail, healthcare, media, and gaming all weight it heavily. Recruiters often pair the requirement with one of AWS Solutions Architect Professional or Azure AZ-305, making PCA the GCP cornerstone of a multi-cloud architect profile. It is also the most-cited cert on Google's own customer-engineering and partner-engineering job ladders.
There are no formal prerequisites. Google recommends three or more years of overall industry experience and one or more years designing and managing solutions on Google Cloud. In practice, PCA is not a credible first GCP cert — most successful candidates hold the Associate Cloud Engineer (ACE) first or have meaningful AWS / Azure architecture experience to transfer.
The four case studies are non-negotiable: Mountkirk Games, TerramEarth, EHR Healthcare, and Helicopter Racing League are published on the official PCA exam page and account for roughly a third of scored questions. Candidates who skip the case studies routinely fail. Plan on reading each one twice and sketching the implied architecture for each before exam day. Comfort with the gcloud CLI, Terraform, GKE, and the Cloud Operations suite is effectively required.
PCA is one of the harder professional cloud exams — it is consistently rated above AWS Solutions Architect Professional by candidates who have taken both, primarily because of the case-study format and Google's preference for scenario phrasing where multiple answers technically work. Plan on 100–160 hours of study over 10–14 weeks if PCA is your first Google Cloud cert at this level, or 50–80 hours over 5–8 weeks if you already hold ACE plus AWS or Azure professional architect cert. The exam is 50–60 multiple-choice / multiple-select questions in 120 minutes, delivered through Pearson VUE (Google migrated from Kryterion / Webassessor in early 2026 — no exams Feb 23 through Mar 1 2026; first Pearson delivery March 2 2026).
The most common stumbling block is the case studies — successful candidates re-read each one a dozen times and have memorized the implied service mappings. The second stumbling block is VPC Service Controls and Shared VPC interactions, which appear in many security-and-compliance questions. Google does not publish numeric scores — only pass/fail. The credential is valid for two years and recertification requires re-passing the current exam (no separate recert exam).
Current exam guide refreshed in early 2024 with updated case studies and added coverage of GKE Enterprise, Cloud Workstations, and Vertex AI integration patterns.
Major refresh that introduced the four current case studies and expanded the security-and-compliance domain to include VPC Service Controls.
Original general availability — the first Google Cloud Professional credential and the model for the rest of the Professional track.
PCA (Google Cloud Professional Cloud Architect) is a a challenging, scenario-heavy exam that requires deep hands-on experience and the ability to make architectural trade-off decisions Professional-level exam. Most candidates need 150–300 hours of study spread over 3–6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Most candidates who score consistently above the passing threshold on practice exams pass on their first attempt.
Most candidates need 150–300 hours of study spread over 3–6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Time-to-pass varies widely by prior experience. Engineers with hands-on production experience in the underlying technology typically need less; candidates new to the platform should plan toward the upper end of that range.
PCA is a recognized credential in the GCP ecosystem and signals validated knowledge to employers, recruiters, and clients. Whether it is worth the time and fee for you depends on your role and goals — it tends to pay off most for cloud engineers, architects, and consultants who work with GCP day-to-day or want to move into roles that do.
The passing score for PCA is Not published. The exam contains 50 questions and lasts 2 hr.
The PCA exam fee is $200 USD. Fees are set by GCP and may vary by region; always confirm the current price on the official GCP certification page before booking.
Google Cloud Professional certifications are valid for 2 years. Recertify by re-passing the current version of the exam.
Yes. You can take the exam online (proctored via the provider's secure browser, available 24/7 in most regions) or at an in-person Pearson VUE test center during business hours. Both formats use the same questions, time limit, and passing score.
CertLabPro provides 15 study modes across the practice question bank for PCA. The exam-simulation mode mirrors the real exam: 50 questions in 2 hr, with the same passing threshold of Not published. Browse mode lets you read every Q&A statically.