Free Google Professional Cloud Architect practice questions

Sample question 1. An enterprise wants Active Directory to remain the authoritative source for users and groups, with employees signing in to Google Cloud through Cloud Identity using their existing AD credentials. Which design does Google’s reference architecture describe?

1. Create Google identities by hand for each employee.
2. Federate Cloud Identity with Active Directory as the IdP.
3. Expose the domain controllers to the internet for Google to query.
4. Service account keys mapped to each AD user.

Sample question 2. On-premises servers reach a VPC over Dedicated Interconnect. They must call Cloud Storage and BigQuery APIs over that Interconnect, never over the internet, and the data center has no internet egress for those servers. Which two configurations are required? (Choose two.)

1. Create a Cloud NAT gateway for the subnet facing the Interconnect.
2. Advertise the private.googleapis.com range from Cloud Router to on-premises.
3. Enable Private Google Access on the subnet the Interconnect uses.
4. Point on-premises DNS for googleapis.com at the private.googleapis.com VIPs.
5. Enable private services access for Cloud SQL in the VPC.

Sample question 3. A security team reviews each release for two weeks just before it goes to production, and serious findings regularly force late rework. Leadership wants security built into daily development instead. Which practice does Google’s DORA research describe for this?

1. A longer final security review with more reviewers.
2. Shifting security left into daily work.
3. Removing the security review to ship faster.
4. An annual penetration test in place of release reviews.