Network Design and Security Flashcards
6 cards from real Google Cloud Certified - Professional Cloud Architect practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Network Design and Security flashcards as text
What is the primary purpose of Cloud Identity-Aware Proxy (IAP)?
Answer: Controlling access to web applications based on user identity
Cloud IAP enables context-aware access to web applications hosted on GCP by verifying user identity and device context.
A Professional Cloud Architect must ensure traffic between microservices in GKE is encrypted in transit. Which solution is best?
Answer: Use Anthos Service Mesh or Istio mTLS
Anthos Service Mesh (based on Istio) provides mutual TLS (mTLS) to encrypt and authenticate traffic between services in GKE.
Which type of Cloud VPN is recommended for high-availability production workloads?
Answer: HA VPN
HA VPN provides a 99.99% SLA by using two VPN gateways with redundant tunnels, making it suitable for production environments.
Your organization requires that only users from specific geographic regions can access a public-facing GCP application. Which service enforces this?
Answer: Cloud Armor geo-restriction policies
Cloud Armor supports geo-based access control policies that allow or deny traffic based on the request's origin country.
An architect needs to enable private Google API access for VMs that lack external IP addresses. What should be configured?
Answer: Private Google Access on the subnet
Enabling Private Google Access on a subnet allows VMs without external IPs to reach Google APIs and services using internal IPs.
Which layer does a Google Cloud External HTTP(S) Load Balancer operate at?
Answer: Layer 7 (Application)
External HTTP(S) Load Balancer is a Layer 7 load balancer that routes traffic based on URL maps, headers, and other HTTP attributes.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- support.google.com — Retake fee, passing score, score release, score validity · verified Nov 2026
- cloud.google.com — Test delivery, eligibility, fees, exam format, renewal, time limit · verified Nov 2026