Google Cloud • PCA
Validates the ability to design, develop, and manage robust, secure, scalable, efficient, cost-effective, highly available, and flexible solutions that drive business objectives using Google Cloud technologies.
Questions
1397
Duration
120 minutes
Passing Score
Not publicly disclosed
Difficulty
ProfessionalLast Updated
Jan 2026
The Google Cloud Certified Professional Cloud Architect certification validates an individual's ability to design, develop, and manage robust, secure, scalable, efficient, cost-effective, and highly available solutions on Google Cloud. It assesses proficiency across the full architectural lifecycle—from translating business requirements into technical designs, to provisioning infrastructure, enforcing security and compliance, and ensuring ongoing operational excellence. The exam was updated in October 2025 (v6.1) to incorporate the Google Cloud Well-Architected Framework as a foundational pillar and to significantly expand coverage of AI/ML services, including Vertex AI, Gemini models, AI Hypercomputer, and Model Garden.
Candidates are expected to demonstrate expertise in enterprise cloud strategy, solution design for legacy, multicloud, and hybrid environments, workload migration, and deployment orchestration. The exam includes two real-world case studies—drawn from a pool of four scenarios (Altostrat Media, Cymbal Retail, EHR Healthcare, and KnightMotives Automotive)—which collectively represent 20–30% of scored content. These case studies require applying architectural judgment to realistic business situations rather than recalling isolated facts.
This certification is intended for experienced cloud professionals who design and oversee cloud infrastructure at an architectural level. Target roles include Cloud Solutions Architect, Cloud Consultant, Technical Lead, Infrastructure Engineer, and DevOps Architect who are responsible for end-to-end solution design across Google Cloud services. It is also well-suited for IT professionals transitioning from on-premises infrastructure roles who have hands-on experience with cloud migration, hybrid networking, and security design.
Candidates pursuing the PCA typically have backgrounds that span cloud networking, IAM, compute orchestration, and application architecture. Those who work in regulated industries such as healthcare, finance, or retail will find the compliance and security domains particularly relevant to their day-to-day responsibilities.
Google Cloud does not impose formal prerequisites for this exam. However, the certification is intended for experienced professionals, and Google officially recommends at least 3 years of industry experience in IT or cloud infrastructure roles, with a minimum of 1 year designing and managing solutions specifically on Google Cloud.
Candidates should have working knowledge of core Google Cloud services including Compute Engine, Google Kubernetes Engine, Cloud Run, Cloud Storage, VPC networking, IAM, and Cloud KMS. Familiarity with Infrastructure as Code tools (particularly Terraform), CI/CD pipelines, hybrid and multicloud networking patterns, and the Google Cloud Well-Architected Framework is also expected. Hands-on lab experience via Cloud Skills Boost is strongly recommended before attempting the exam.
The standard Professional Cloud Architect exam consists of 50–60 multiple-choice and multiple-select questions and must be completed within 2 hours. The exam is available in English and Japanese and can be taken either online with remote proctoring or at an authorized testing center. The registration fee is $200 USD (plus applicable taxes). Certification is valid for 2 years, after which candidates may take a shorter renewal exam (25 questions, 1 hour, $100 fee) rather than the full standard exam.
Two case studies are embedded within the exam and account for 20–30% of the total question pool. These are presented in a split-screen format so candidates can reference them while answering related questions. Google does not publicly disclose a specific passing score; performance is reported as pass or fail. The exam covers six domains weighted across the full question set, with architectural judgment and applied decision-making emphasized over rote memorization.
The Google Cloud Professional Cloud Architect certification has appeared consistently among the highest-paying IT certifications globally, with certified professionals in the United States earning average salaries in the range of $135,000–$175,000 annually, and senior practitioners in high-demand markets exceeding $200,000. Certified professionals typically command a 10–18% salary premium over non-certified peers in equivalent roles. The credential opens direct pathways to senior titles including Cloud Solutions Architect, Cloud Consultant, Technical Lead, and Principal Infrastructure Engineer across industries such as technology, financial services, healthcare, and retail.
Demand for GCP-certified architects has grown alongside enterprise adoption of Google Cloud, particularly in organizations running AI/ML workloads, Kubernetes-based platforms, and regulated data environments requiring compliance with SOC 2, HIPAA, or PCI-DSS. The October 2025 exam update's emphasis on Vertex AI and generative AI architecture further positions certified architects at the intersection of cloud infrastructure and enterprise AI—one of the fastest-growing areas of IT investment. Pairing the PCA with complementary certifications such as the Professional Cloud Security Engineer or Professional Cloud Network Engineer further strengthens a candidate's market position.
5 sample questions with correct answers and explanations. Start a practice session to test yourself across all 1397 questions.
1. Contoso requires secure remote access to their VMs without exposing public IPs. Which Google Cloud service enables this using identity-based access?
Explanation
Identity-Aware Proxy provides secure, identity-based access to applications and VMs without public exposure. Cloud VPN secures network connections but requires public IPs for some setups. Cloud NAT enables outbound access but not inbound remote access. VPC Peering connects networks privately but does not handle remote access.
2. Altostrat Media runs a global application on Cloud Spanner and experiences high read latency. You need to diagnose the issue. What should you do?
Explanation
SPANNER_SYS.READ_STATS tables provide detailed information on read operations, including latency patterns and hotspots, directly addressing the high read latency issue. QUERY_STATS focuses on query execution, not read-specific performance. Increasing size without analysis may not target the root cause. Switching to Cloud SQL changes the database and may not resolve Spanner-specific issues. Enabling multi-region without analysis could worsen hotspots. Cloud Monitoring offers general metrics but not the granular read-specific data needed.
3. Blue Yonder Airlines needs to design network topologies for hybrid connectivity to on-premises and a multicloud environment, including Google Cloud-to-Google Cloud communication. Which configuration should they prioritize for security?
Explanation
Cloud VPN with firewall rules provides secure, encrypted tunnels for hybrid and multicloud connectivity while enforcing access controls. VPC peering offers direct connectivity but lacks built-in security features like encryption. Direct internet exposure compromises security. Shared VPC allows resource sharing but does not inherently secure connections.
4. You are deploying an application load balancer and need to ensure secure access. Which two measures should you implement for the frontend? (Choose two.)
Multiple correct answersExplanation
HTTPS with a managed SSL certificate encrypts traffic, protecting data in transit. Cloud Armor provides application-layer security like DDoS protection and custom rules. A static IP ensures consistent access but doesn't enhance security directly. Internal load balancer restricts access but may not be suitable for public apps. Session affinity is for state management, not security. Ephemeral IPs change unpredictably, complicating secure access.
5. Contoso is evaluating Cloud Run vs Cloud Functions for a simple API with global deployment needs. Cloud Run offers container flexibility, while Cloud Functions provides quick code deployment. For this lightweight API with minimal dependencies, which should they prioritize for faster deployment?
Explanation
Cloud Functions simplifies deployment for lightweight code-based APIs without container needs. Cloud Run's benefits are overkill for minimal dependencies. Global balancing is available in both. Neither requires complex configs for simple use cases.
One-time access to this exam