Cloud Architect Intermediate Practice Exam: Medium Difficulty 2025

A retail company is migrating a three-tier web application to Google Cloud. They need to support sudden traffic spikes during promotions, keep costs reasonable during normal traffic, and avoid managing servers. The application is stateless, and requests can take up to 10 minutes. Which architecture best meets these requirements?

A financial services company must deploy an internal API used by multiple business units. The API must be highly available across zones within a region, use a private RFC1918 address space, and be reachable from on-premises over Cloud VPN. Which design best meets the requirements?

A company wants to centralize audit logs from 30 projects into a dedicated logging project. Security requires that application teams cannot modify the log sinks or disable logging, but they should still be able to view their own logs in their project. What is the best approach?

You need to provide a repeatable way for developers to create standardized environments (VPC, subnets, firewall rules, Cloud SQL, and Cloud Run service) across dev/test/prod with minimal drift. Changes must go through review and be auditable. Which approach is best?

A healthcare company stores patient documents in Cloud Storage. They must prevent public access, ensure only a specific service account can read objects, and enforce that data is encrypted with customer-managed keys (CMEK). What is the best solution?

A company runs workloads in multiple projects within a folder. They want to restrict egress to the internet for all projects, allow access only to approved Google APIs, and centrally manage the policy. Which solution best meets the requirement?

An analytics team ingests clickstream events (~50,000 events/second). They need near-real-time dashboards and the ability to replay data for corrections. They also want to minimize operational overhead. Which design is best?

A company has microservices running on GKE across multiple namespaces. They need to attribute costs by team, set budget alerts per team, and identify the top cost drivers (CPU, memory, load balancer, and network egress). What should they do?

A platform team maintains a Cloud Run service deployed to three environments (dev, staging, prod). They need a controlled release process with automated tests, approval before production deployment, and the ability to quickly roll back. What is the best implementation approach?

A customer-facing application must meet a 99.9% availability objective. It uses a global HTTP(S) load balancer and a managed backend (either GKE or MIG). You need to reduce the impact of zonal failures and detect regressions quickly. Which design best supports reliability and operations?