How many Drag and Drop Matching Questions questions are on this page?

This page has 9 Drag and Drop Matching Questions scenario questions for the PCA exam, each with detailed explanations and wrong-answer analysis.

How should I approach PCA scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to Google Professional Cloud Architect questions

Scenario-based practice

Drag and Drop Matching Questions

Practise Google Professional Cloud Architect practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

PCA

exam code

Google Cloud

vendor

Scenario guide

How to approach drag and drop matching questions

Matching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation.

Quick answer

Drag and Drop Matching Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1mediummatching

Full question →

Match each GCP monitoring/logging tool to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Metrics, dashboards, alerts

Centralized log storage and analysis

Distributed tracing for latency analysis

Inspect code behavior in production

CPU and memory profiling

A
Cloud Monitoring: Provides visibility into performance, uptime, and health of applications and infrastructure.
Cloud Monitoring is designed for monitoring performance and health metrics.
B
Cloud Logging: Real-time log management and analysis for applications and services.
Cloud Logging handles log data from various sources.
C
Error Reporting: Counts, analyzes, and aggregates errors in cloud services.
Error Reporting focuses on error tracking and aggregation.
D
Cloud Monitoring: Real-time log management and analysis for applications and services.
Why wrong: Incorrect — this describes Cloud Logging, not Cloud Monitoring.
E
Cloud Logging: Counts, analyzes, and aggregates errors in cloud services.
Why wrong: Incorrect — this describes Error Reporting, not Cloud Logging.

Full breakdown with real-world context →

Question 2mediummatching

Full question →

Match each Google Cloud service to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Distribute traffic across instances

Cache content at edge locations

Protect against DDoS and web attacks

Enable outbound internet for private instances

Dedicated connection between on-prem and GCP

A
Cloud VPC: Isolated virtual network for GCP resources
Cloud VPC creates isolated virtual networks for resources.
B
Cloud Load Balancing: Distributes incoming traffic across multiple instances
Cloud Load Balancing distributes traffic for high availability.
C
Cloud CDN: Content delivery network for caching content close to users
Cloud CDN caches content at edge locations for low latency.
D
Cloud NAT: Network address translation for private instances to access internet
Cloud NAT enables outbound internet access from private instances.
E
Cloud VPC: Distributes incoming traffic across multiple instances
Why wrong: Incorrect — this describes Cloud Load Balancing, not Cloud VPC.
F
Cloud CDN: Network address translation for private instances to access internet
Why wrong: Incorrect — this describes Cloud NAT, not Cloud CDN.

Full breakdown with real-world context →

Question 3mediummatching

Full question →

Match each GCP database service to its type.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Managed relational database (MySQL, PostgreSQL, SQL Server)

NoSQL document database

NoSQL wide-column database

Horizontally scalable relational database

Managed Redis or Memcached

A
Cloud SQL: Relational database
Cloud SQL provides managed relational databases (MySQL, PostgreSQL, SQL Server).
B
Cloud Spanner: NoSQL document database
Why wrong: Incorrect — Cloud Spanner is a globally distributed relational database, not NoSQL.
C
Firestore: NoSQL document database
Firestore is a flexible, scalable NoSQL document database for mobile, web, and server development.
D
Bigtable: NoSQL wide-column database
Bigtable is a fully managed, scalable NoSQL wide-column database for large analytical and operational workloads.
E
Memorystore: Relational database
Why wrong: Incorrect — Memorystore provides in-memory caching with Redis and Memcached, not a relational database.
F
Datastore: In-memory cache
Why wrong: Incorrect — Datastore is a NoSQL document database, similar to Firestore, not an in-memory cache.

Full breakdown with real-world context →

Question 4mediummatching

Full question →

Match each IAM role type to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Legacy roles like Owner, Editor, Viewer

Fine-grained roles managed by Google

User-defined roles with specific permissions

Another name for Basic roles

Identity for applications, not users

A
Basic roles: Broad roles that apply to all resources in a project (Owner, Editor, Viewer)
Basic roles are legacy roles that grant broad access to all resources in a project.
B
Predefined roles: Roles curated by Google Cloud that provide fine-grained access for specific services
Predefined roles are managed by Google and offer specific permissions for services like Compute Engine or Cloud Storage.
C
Custom roles: Roles that you create to tailor permissions to your organization's specific needs
Custom roles allow you to define a set of permissions that are not covered by predefined roles.
D
Basic roles: Roles curated by Google Cloud that provide fine-grained access for specific services
Why wrong: Incorrect — this describes predefined roles, not basic roles.
E
Predefined roles: Roles that you create to tailor permissions to your organization's specific needs
Why wrong: Incorrect — this describes custom roles, not predefined roles.

Full breakdown with real-world context →

Question 5mediummatching

Full question →

Match each GCP storage service to its typical use case.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Object storage for unstructured data

Managed NFS file server

Block storage for VM instances

NoSQL database for large analytical workloads

Globally distributed relational database

A
Cloud Storage: Object storage for unstructured data
Cloud Storage is designed for storing and retrieving any amount of unstructured data at any time.
B
Cloud SQL: Relational database for structured data
Cloud SQL provides fully managed relational databases like MySQL, PostgreSQL, and SQL Server.
C
Cloud Bigtable: NoSQL wide-column database for large-scale analytics
Bigtable is a scalable NoSQL database for large analytical and operational workloads.
D
Firestore: NoSQL document database for mobile and web applications
Firestore is a flexible, scalable NoSQL database for mobile, web, and server development.
E
Cloud Storage: Relational database for transactional workloads
Why wrong: Incorrect — Cloud Storage is an object store, not a relational database.
F
Cloud SQL: Object storage for media files
Why wrong: Incorrect — Cloud SQL is a relational database, not an object storage service.

Full breakdown with real-world context →

Question 6mediummatching

Full question →

Match each GCP data processing service to its use case.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Stream and batch data processing (Apache Beam)

Managed Hadoop and Spark clusters

Asynchronous messaging for event ingestion

Visual data integration pipelines

Workflow orchestration (Apache Airflow)

A
Dataflow: Unified stream and batch data processing using Apache Beam
Dataflow is a unified stream and batch data processing service based on Apache Beam.
B
Dataproc: Managed Spark and Hadoop clusters
Dataproc provides managed clusters for Spark and Hadoop workloads.
C
BigQuery: Serverless data warehouse for analytics
BigQuery is a fully managed, serverless data warehouse for large-scale analytics.
D
Pub/Sub: Asynchronous and reliable messaging service
Pub/Sub is a messaging service for event ingestion and asynchronous communication.
E
Dataflow: Managed Spark and Hadoop clusters
Why wrong: Incorrect — this describes Dataproc, not Dataflow.
F
BigQuery: Asynchronous messaging service
Why wrong: Incorrect — this describes Pub/Sub, not BigQuery.

Full breakdown with real-world context →

Question 7mediummatching

Full question →

Match each GCP migration term to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Move workloads without modification

Tool to migrate VMs to GCP

Physical device for large data transfer

Online data transfer from other clouds or on-prem

Migrate databases to Cloud SQL with minimal downtime

A
Migrate for Compute Engine: Migrates virtual machines to Compute Engine with minimal downtime.
Migrate for Compute Engine is designed for migrating VMs to Compute Engine.
B
Cloud Storage Transfer Service: Transfers data from online sources to Cloud Storage.
Cloud Storage Transfer Service handles online data transfers to Cloud Storage.
C
Transfer Appliance: Physical device to transfer large datasets to Google Cloud.
Transfer Appliance is a physical device for large offline data transfers.
D
Database Migration Service: Migrates databases to Cloud SQL with minimal downtime.
Database Migration Service enables live database migrations to Cloud SQL.
E
Migrate for Compute Engine: Transfers data from online sources to Cloud Storage.
Why wrong: Incorrect — this describes Cloud Storage Transfer Service, not Migrate for Compute Engine.
F
Cloud Storage Transfer Service: Physical device to transfer large datasets to Google Cloud.
Why wrong: Incorrect — this describes Transfer Appliance, not Cloud Storage Transfer Service.

Full breakdown with real-world context →

Question 8mediummatching

Full question →

Match each GCP compute service to its characteristic.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Virtual machines with full control

Managed Kubernetes clusters

Serverless containers

Platform as a Service (PaaS)

Event-driven serverless functions

A
Compute Engine: Virtual machines on demand, IaaS.
Compute Engine provides scalable virtual machines as an infrastructure-as-a-service (IaaS) offering.
B
Compute Engine: Managed Kubernetes clusters.
Why wrong: This describes Google Kubernetes Engine (GKE), not Compute Engine.
C
Google Kubernetes Engine: Managed Kubernetes clusters.
GKE is a managed Kubernetes service for running containerized applications.
D
Google Kubernetes Engine: Serverless container execution.
Why wrong: This describes Cloud Run, which runs containers in a serverless manner.
E
Cloud Run: Serverless container execution.
Cloud Run executes stateless containers on a fully managed serverless platform.
F
Cloud Run: PaaS for web apps with auto-scaling.
Why wrong: This describes App Engine, which is a platform-as-a-service (PaaS) for web applications.

Full breakdown with real-world context →

Question 9mediummatching

Full question →

Match each GCP security service to its function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Manage encryption keys

Hardware security module for key protection

Store API keys, passwords, certificates

Manage access control

Centralized security and risk management

A
Cloud Armor: Protects against DDoS attacks and web application firewall
Cloud Armor provides DDoS protection and WAF capabilities.
B
Cloud Identity-Aware Proxy (IAP): Controls access to applications based on user identity and context
IAP uses identity and context to enforce access control.
C
Cloud Key Management Service (KMS): Manages encryption keys for cloud services
KMS handles creation, rotation, and management of encryption keys.
D
Cloud Data Loss Prevention (DLP): Scans and masks sensitive data to prevent leaks
DLP discovers and redacts sensitive data like PII.
E
Cloud Armor: Manages encryption keys for cloud services
Why wrong: Incorrect — this describes Cloud KMS, not Cloud Armor.
F
Cloud Identity-Aware Proxy (IAP): Scans for vulnerabilities in compute instances
Why wrong: Incorrect — scanning for vulnerabilities is done by Security Command Center or Web Security Scanner, not IAP.

Full breakdown with real-world context →

These PCA practice questions are part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style PCA questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

Drag and Drop Matching Questions

How to approach drag and drop matching questions

Quick answer

Related PCA topic practice pages

Managing Implementation and Ensuring Solution and Operations Reliability practice questions

Managing and Provisioning a Solution Infrastructure practice questions

Designing for Security and Compliance practice questions

Analysing and Optimising Technical and Business Processes practice questions

Design and plan a cloud solution architecture practice questions

Manage and provision cloud infrastructure practice questions

Design for security and compliance practice questions

Analyze and optimize technical and business processes practice questions

Manage implementation of cloud architecture practice questions

Ensure solution and operations reliability practice questions

PCA fundamentals practice questions

PCA scenario practice questions

Practice scenarios

Match each GCP monitoring/logging tool to its purpose.

Match each Google Cloud service to its primary purpose.

Match each GCP database service to its type.

Match each IAM role type to its description.

Match each GCP storage service to its typical use case.

Match each GCP data processing service to its use case.

Match each GCP migration term to its description.

Match each GCP compute service to its characteristic.

Match each GCP security service to its function.