Google PCA Practice Test 2 — 30 Questions

Question 1

An organization deploys a web application on Compute Engine behind a global HTTPS load balancer. They want to reduce latency for users worldwide and minimize load on backend instances. Which GCP service should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge caches to serve content closer to users, reducing latency and backend load. Cloud Armor provides security, Cloud NAT is for outbound connectivity, and VPC peering is for network connectivity, not caching.

Answer

Cloud Armor

Answer

Cloud NAT

Answer

VPC Network Peering

Question 2

Which THREE steps can reduce processing costs in a Dataflow streaming pipeline? (Choose three.)

Accepted Answer

Use side inputs instead of a cross join.. Option A is correct because replacing a cross join with side inputs avoids the expensive fan-out of every element being paired with every element of the other collection, which drastically reduces the number of elements processed and shuffled in the streaming pipeline. Option B is correct because running non-critical data through a batch pipeline lets Dataflow use cheaper batch pricing and more efficient batch-optimized execution rather than paying for continuously running streaming workers. Option C is correct because GroupByKey in streaming mode forces a shuffle and holds state for each key until the window fires, so minimizing it (for example by using Combine or pre-aggregation) lowers shuffle volume, state storage, and processing cost. Option D is not correct because a custom runner does not reduce Dataflow processing costs and is not a cost-optimization step. Option E is not correct because increasing the number of workers raises the amount of compute used and therefore increases, rather than reduces, processing costs.

Answer

Use a custom runner.

Answer

Increase the number of workers.

Question 3

A financial services company requires a globally distributed relational database with strong consistency and horizontal scalability to serve a multi-region banking application. Write conflicts are rare. Which database should they choose?

Accepted Answer

Cloud Spanner. Cloud Spanner is Google's globally distributed, horizontally scalable, strongly consistent relational database. It uses TrueTime and Paxos to provide external consistency across regions, making it the only option that meets all three requirements: global distribution, strong consistency, and horizontal scalability for a relational workload.

Answer

Firestore in Native mode

Answer

Cloud SQL with cross-region replication

Answer

Cloud Bigtable

Question 4

A company is planning a phased migration of their on-premises database to Cloud SQL. They want to minimize downtime and ensure data consistency. Which approach should they use?

Accepted Answer

Use Database Migration Service (DMS). Database Migration Service (DMS) supports continuous replication with minimal downtime. Export and import involves downtime. Lift-and-shift is not a GCP service. VM migration is for servers, not databases.

Answer

Lift and shift the database server to Compute Engine

Answer

Export the database to a SQL dump file and import into Cloud SQL

Answer

Use VM migration to move the database server

Question 5

You are the lead cloud architect for a startup that runs a web application on Google Kubernetes Engine (GKE) with a standard (zonal) cluster. The application is deployed with 3 replicas of a stateless frontend service. During a recent incident, a zone outage caused all GKE nodes to become unavailable, leading to application downtime of 45 minutes. You need to redesign the cluster to tolerate a single zone failure with no more than 5 minutes of downtime. Your budget allows for at most a 20% increase in compute costs. Which approach should you take?

Accepted Answer

Migrate the cluster to a regional GKE cluster with nodes in 3 zones and distribute replicas across zones. D is correct because a regional GKE cluster distributes nodes across three zones, ensuring that if one zone fails, the remaining two zones continue serving traffic. By spreading the 3 replicas across zones (e.g., one per zone), the application tolerates a single zone outage with near-zero downtime, and the 20% cost increase covers the additional node pool overhead without exceeding the budget.

Answer

Increase the number of replicas from 3 to 9 and keep the zonal cluster

Answer

Change the frontend deployment to use regional persistent disks

Answer

Deploy second GKE cluster in another region and use global load balancer for failover

Question 6

An organization uses Cloud Functions (2nd gen) for event-driven processing. They notice that some functions fail with 'memory limit exceeded' errors during peak load. The function processes messages from Pub/Sub and writes to Firestore. What should they do to improve reliability without sacrificing throughput?

Accepted Answer

Increase the memory allocated to the Cloud Function.. The 'memory limit exceeded' error indicates that the function's allocated memory is insufficient for the workload during peak load. Increasing the memory allocation (Option B) directly resolves this by providing more RAM for processing larger messages or concurrent operations, without altering the invocation pattern or throughput. Cloud Functions (2nd gen) allow memory to be set up to 32 GiB, and this change does not reduce the number of events processed per second.

Answer

Increase the maximum number of concurrent function instances.

Answer

Enable Pub/Sub batching to reduce the number of function invocations.

Answer

Split the function into multiple smaller functions, each handling a subset of the data.

Question 7

Refer to the exhibit. A Cloud Deployment Manager deployment fails with the error 'Resource 'my-firewall' already exists'. What is the most likely cause?

Accepted Answer

A firewall rule with the name 'my-firewall' already exists in the project.. The error message 'Resource 'my-firewall' already exists' directly indicates that a firewall rule with the exact name 'my-firewall' is already present in the project. Cloud Deployment Manager creates resources by name, and if a resource with the same name exists (even if it was created outside the deployment), the deployment will fail unless the deployment is configured to adopt or manage that existing resource. The error is not about permissions, network references, or missing delete policies—it is a name collision.

Answer

The user lacks IAM permissions to create firewall rules.

Answer

The network reference in the firewall rule is incorrect.

Answer

The deployment does not include a 'delete' policy for existing resources.

Question 8

A company deploys a microservices application on Google Kubernetes Engine (GKE). Pods in one deployment are frequently OOMKilled. The team sets memory requests and limits, but pods still crash. What is the most likely remaining cause?

Accepted Answer

The application has a memory leak that eventually exceeds the limit.. OOMKilled errors occur when a container exceeds its memory limit. Setting memory requests and limits prevents unbounded usage, but if the application has a memory leak, it will continue to consume memory until it hits the configured limit, causing the kernel's Out-Of-Memory (OOM) killer to terminate the pod. The fact that pods still crash after setting limits indicates the application itself is the root cause, not resource configuration.

Answer

CPU requests are too low, causing throttling and eventual crash.

Answer

The node pool is too small, causing memory pressure on the node.

Answer

Memory limits are set higher than the node's allocatable memory.

Question 9

A company is using Cloud NAT to allow private instances to access the internet. They notice that outbound connections are failing intermittently. What is the most likely cause?

Accepted Answer

The number of concurrent connections exceeds the Cloud NAT source port capacity for the assigned NAT IPs.. Cloud NAT uses source network address translation (SNAT) to map private instance IPs to a single public IP address. Each NAT IP has a limited pool of source ports (typically 64,512 per IP for TCP/UDP). When concurrent connections exceed this capacity, new outbound connections are dropped, causing intermittent failures. This is the most likely cause given the symptom of intermittent failures.

Answer

The private instances are using the wrong DNS server.

Answer

The VPC firewall rules are blocking egress traffic.

Answer

Cloud NAT does not support TCP connections.

Question 10

A team is designing a disaster recovery plan for a critical application. They need to ensure RPO of less than 1 hour and RTO of less than 4 hours. The application runs on Compute Engine with persistent disks and uses Cloud SQL for MySQL. Which THREE actions should they take? (Choose 3.)

Accepted Answer

Store application configuration and scripts in a multi-regional Cloud Storage bucket. Option C is correct because storing application configuration and scripts in a multi-regional Cloud Storage bucket ensures they remain available even if one region fails, supporting recovery within the 4-hour RTO without manual rebuild delays. Option D is correct because Cloud SQL cross-region replication continuously replicates the MySQL database to a replica in another region, enabling a low RPO (well under 1 hour) and a fast promotion/failover path to meet the 4-hour RTO. Option E is correct because regular persistent disk snapshots replicated to another region via Cloud Storage provide a restorable copy of Compute Engine disk data in the DR region, which is necessary to rebuild instances within the RTO and keep data loss under the RPO. Option A is not appropriate because Transfer Appliance is an offline, batch data-transfer appliance with weekly cadence, which cannot meet an RPO under 1 hour or an RTO under 4 hours. Option B is not sufficient because a regional managed instance group only provides automatic failover across zones within a single region, not cross-region disaster recovery, so a region-wide outage would still exceed the required RTO/RPO.

Answer

Deploy a Transfer Appliance to copy data to another region weekly

Answer

Use a regional managed instance group and rely on Google's automatic failover

Question 11

A company is migrating a stateful application to Google Cloud. The application requires persistent disks with low latency and high IOPS for database workloads. They plan to use Compute Engine instances with SSD persistent disks. However, the database performance is lower than expected. Which action should the company take to improve disk performance?

Accepted Answer

Use local SSDs with RAID 0 configuration for the database data.. Local SSDs provide the highest IOPS and lowest latency of any disk option on Compute Engine, and striping them with RAID 0 aggregates their performance. This directly addresses the need for high IOPS and low latency for database workloads, unlike persistent disks which have performance ceilings tied to disk size and instance limits.

Answer

Change the persistent disk type to standard persistent disk.

Answer

Increase the disk size to increase baseline IOPS.

Answer

Enable disk encryption to improve I/O throughput.

Question 12

A company runs a microservices-based application on Google Kubernetes Engine (GKE) with a Regional cluster. They want to improve reliability by implementing best practices for pod scheduling and resilience. Which TWO actions should they take? (Choose two.)

Accepted Answer

Define a PodDisruptionBudget for each deployment to limit the number of concurrent disruptions. A PodDisruptionBudget (PDB) limits the number of Pods of a replicated application that can be down simultaneously from voluntary disruptions, such as node maintenance or cluster upgrades. This ensures that a minimum number of replicas remain available, improving application reliability during planned events.

Answer

Set terminationGracePeriodSeconds to 0 for faster pod termination during scale-down

Answer

Enable cluster autoscaler to automatically add nodes when pods are pending

Answer

Set resource requests equal to limits to ensure guaranteed QoS class

Question 13

A company is designing a microservices architecture on Google Kubernetes Engine (GKE) for a global user base. They require high availability across multiple zones, automatic scaling, and rolling updates without downtime. Which Kubernetes workload resource should they use for each service?

Accepted Answer

Deployment with pod anti-affinity rules spread across zones. The correct option is B: a Deployment with pod anti-affinity rules spread across zones. Deployments are the standard GKE workload for stateless microservices, providing declarative rolling updates (via RollingUpdate strategy with maxSurge/maxUnavailable) and integration with the Horizontal Pod Autoscaler for automatic scaling, while pod anti-affinity (or topologySpreadConstraints) spreads replicas across multiple zones for high availability. StatefulSet (A) is designed for stateful workloads needing stable network identities and per-pod PersistentVolumes, not for stateless services requiring rolling updates and autoscaling. Job (C) runs finite batch tasks to completion rather than long-running services, and DaemonSet (D) schedules one pod per node for node-level agents, not scalable service replicas.

Answer

StatefulSet with volumeClaimTemplates for persistent storage

Answer

Job for batch processing

Answer

DaemonSet to ensure one pod per node

Question 14

Which IAM role should be granted to a user who needs to view but not modify resources in a project?

Accepted Answer

roles/viewer. The roles/viewer role grants read-only access to all resources within a project, allowing the user to view but not modify them. This aligns with the principle of least privilege for a user who only needs to inspect resources. It includes permissions to list and get resources but not to create, update, or delete.

Answer

roles/editor

Answer

roles/owner

Answer

roles/browser

Question 15

Which THREE actions can help reduce costs for a BigQuery workload that runs frequent, ad-hoc analytical queries on a large dataset?

Accepted Answer

Partition the table by a date or timestamp column.. Option B is correct because partitioning the table by a date or timestamp column lets BigQuery prune irrelevant partitions, so ad-hoc queries that filter on that column scan far less data and incur lower on-demand query costs. Option C is correct because materialized views precompute and cache the results of common aggregation queries, so repeated ad-hoc aggregations read the much smaller materialized view instead of rescanning the full large dataset. Option D is correct because clustering on columns frequently used in filter clauses co-locates related data in storage blocks, allowing BigQuery to skip blocks that don't match the filter and further reduce bytes scanned. Option A is not correct because automatic schema detection only simplifies loading data and has no effect on query cost. Option E is not correct because flat-rate pricing with reserved slots provides predictable capacity billing rather than reducing the cost of a sporadic ad-hoc query workload, which is typically cheaper on on-demand pricing.

Answer

Enable automatic schema detection to avoid manual schema definition.

Answer

Use flat-rate pricing with reserved slots.

Question 16

A developer needs to build a serverless event-driven application that responds to Cloud Storage object uploads by processing the file and storing results in Firestore. Which compute service is the best fit?

Accepted Answer

Cloud Functions. Cloud Functions is a serverless event-driven compute service that can be triggered directly by Cloud Storage events, ideal for simple processing tasks.

Answer

App Engine Flexible Environment

Answer

Cloud Run for Anthos

Answer

Compute Engine with startup scripts

Question 17

Match each GCP security service to its function.

Accepted Answer

Cloud Armor: Protects against DDoS attacks and web application firewall. Cloud Armor protects against DDoS and web attacks; IAP controls access based on identity; KMS handles encryption keys; DLP protects sensitive data. Distractors swap these functions.

Answer

Cloud Armor: Manages encryption keys for cloud services

Answer

Cloud Identity-Aware Proxy (IAP): Scans for vulnerabilities in compute instances

Question 18

A company is deploying a new application on Compute Engine. They need to ensure that the application can automatically recover from a zone failure. What is the best approach?

Accepted Answer

Create a managed instance group with instances in multiple zones.. A managed instance group (MIG) with instances in multiple zones provides automatic recovery from a zone failure by distributing instances across zones and using auto-healing to recreate failed instances. If one zone becomes unavailable, the load balancer routes traffic to healthy instances in other zones, ensuring high availability without manual intervention.

Answer

Use a global load balancer in front of a single instance.

Answer

Create a single VM in a single zone and rely on live migration.

Answer

Use Cloud Storage to store application state and restore from a snapshot.

Question 19

Drag and drop the steps to implement a disaster recovery plan using Cloud Storage and Cloud Functions in the correct order.

Accepted Answer

Enable versioning on the primary bucket, then create a Cloud Function to copy new objects to the DR bucket, then test the procedure.. Versioning protects against accidental deletion. The Cloud Function copies objects to the DR bucket.

Answer

Create a Cloud Function to copy new objects to the DR bucket, then enable versioning on the primary bucket, then test.

Answer

Create a Cloud Function, then test, then enable versioning.

Answer

Enable versioning, then test, then create the Cloud Function.

Question 20

A company wants to improve the performance of their Cloud SQL for PostgreSQL instance. They notice many idle connections and slow queries. Which THREE actions could help? (Choose 3)

Accepted Answer

Add appropriate indexes. Option A (Add appropriate indexes) is correct because missing indexes force sequential scans on large tables, and creating B-tree or other suitable indexes lets PostgreSQL satisfy WHERE, JOIN, and ORDER BY clauses with index scans, directly reducing slow query latency. Option B (Add read replicas) is correct because Cloud SQL read replicas offload read-only SELECT traffic from the primary instance, increasing read throughput and reducing contention on the primary for read-heavy workloads. Option C (Use PgBouncer for connection pooling) is correct because PgBouncer multiplexes many client connections over a small pool of backend PostgreSQL connections, which directly addresses the many idle connections consuming memory and backend process slots. Option D (Enable private IP) is not correct because private IP only changes network routing and security exposure; it does not improve query performance or reduce idle connections. Option E (Increase disk size) is not correct because disk size affects storage capacity and, on some tiers, IOPS, but it does not address idle connections or slow queries caused by poor indexing or connection churn.

Answer

Enable private IP

Answer

Increase disk size