AI Wisdom

Google Cloud professional level

Google Cloud Professional Cloud Architect

Code
PCA
Length
120 minutes
Price
$200 plus tax
Valid for
2 years. A $100 renewal exam is available.
Study time, our estimate
80 to 120 hours

A general architecture exam that has quietly become an AI one. Three of the four published case studies involve AI features, and Model Armor, AI Hypercomputer and Model Garden are now in scope. For most architects on Google Cloud, this is the credential that actually carries weight.

Take it if

You design systems on Google Cloud, AI or not.

Skip it if

You want an AI-only credential or you work on another cloud.

Before you start

Check yourself against this list first. If something is missing, close that gap before you pay for an exam.

  • Three years in industryGoogle recommends this, with one year on Google Cloud.
  • You have read the Well-Architected FrameworkGoogle calls familiarity a key requirement. Learn more
  • You have read the four case studiesThey are published, and two appear in each exam.

Helpful first: GAIL

All exam details
Format
50 to 60 multiple-choice and multiple-select questions
Case studies
2 per exam, 20 to 30% of questions
Length
120 minutes
Price
$200 plus tax
Valid for
2 years. A $100 renewal exam is available.
Languages
English, Japanese
Experience
3+ years in industry, 1+ year on Google Cloud
If you fail
Professional: wait 14, 60, then 365 days

What the exam covers

  • Designing and planning a cloud solution architecture~25%
  • Managing and provisioning a cloud solution infrastructure~17.5%
  • Designing for security and compliance~17.5%
  • Analyzing and optimizing technical and business processes~15%
  • Managing implementation~12.5%
  • Ensuring solution and operations excellence~12.5%

What to focus on

  • The Well-Architected Framework pillars, which run through every domain.
  • The four published case studies: Altostrat Media, Cymbal Retail, EHR Healthcare, and KnightMotives Automotive.
  • Networking: VPC, Shared VPC, Private Service Connect, load balancing and hybrid.
  • Security: IAM, VPC Service Controls, CMEK, Workload Identity Federation, and securing AI.
  • AI in the design: Gemini, Agent Platform, Model Garden and AI Hypercomputer.
  • Migration, reliability, cost, and advising delivery teams.
Everything on one mapEvery topic and key idea in this certification.
mindmap
  root((PCA))
    Design and plan
      Requirements
      Compute
      AI services
    Provision
      Shared VPC
      Hybrid
      ML workflows
    Security and compliance
      VPC Service Controls
      Workload Identity Federation
      Securing AI
    Process and implementation
      Delivery
      Business
      APIs
    Operations excellence
      Observability
      Release
      Reliability
Where should this run?Choose the least you need to manage.
flowchart TD
  A{"What are you running?"} -->|"A function"| B["Cloud Run functions"]
  A -->|"A stateless container"| C["Cloud Run"]
  A -->|"Complex containers"| D["GKE"]
  A -->|"A full VM"| E["Compute Engine"]
  E --> F{"Can it be interrupted?"}
  F -->|Yes| G["Spot VMs"]

Lesson 1 of 5, ~25% of the exam

Design and plan

The largest domain, and business requirements drive it.

Requirements
Separate business needs from technical ones.
Compute
Map the workload to Cloud Run, GKE or VMs.
AI services
Gemini, Model Garden and AI Hypercomputer are in scope.
Pillars of the Well-Architected FrameworkThese run through every exam domain.
mindmap
  root((Well-Architected))
    Operational excellence
    Security
    Reliability
    Performance
    Cost
    Sustainability

Common trap

Picking the cleverest design over what the business asked for.

Try it yourself

Sketch an architecture for each case study.

Official docs: Well-Architected FrameworkWhat is Cloud Run

Lesson 2 of 5, ~17.5% of the exam

Provision

Networking is where many candidates struggle.

Shared VPC
Central networking across projects.
Hybrid
Connecting on-premises and other clouds.
ML workflows
Agent Platform Pipelines automate the lifecycle.
Shared VPCA central team runs the network for many projects.
flowchart TD
  A["Host project: network team"] --> B["Service project: team A"]
  A --> C["Service project: team B"]
  A --> D["Service project: team C"]

Common trap

Giving every team its own unconnected VPC.

Try it yourself

Set up Shared VPC across two projects.

Official docs: Shared VPC

Lesson 3 of 5, ~17.5% of the exam

Security and compliance

Identity and data boundaries appear everywhere.

VPC Service Controls
Perimeters limit data movement.
Workload Identity Federation
Short-lived credentials with no stored keys.
Securing AI
Model Armor and Sensitive Data Protection.
Stopping data leavingIdentity alone cannot stop a stolen credential.
flowchart LR
  A["Stolen credential"] --> B["Valid IAM login"]
  B --> C{"Inside the perimeter?"}
  C -->|No| D["VPC Service Controls blocks it"]
  C -->|Yes| E["BigQuery data"]

Common trap

Using encryption keys to stop data exfiltration. Keys do not limit data movement.

Try it yourself

Deploy from GitHub Actions with no service account key.

Official docs: VPC Service ControlsWorkload Identity FederationModel Armor

Lesson 4 of 5, ~15% + ~12.5% of the exam

Process and implementation

Architects advise as well as design.

Delivery
SDLC, CI/CD, testing and disaster recovery.
Business
Stakeholders, change management and cost.
APIs
Apigee manages APIs.
Migration choicesCommon ways to move a workload.
flowchart TD
  A{"What should happen to it?"} -->|"Keep as it is"| B["Move it"]
  A -->|"Improve it"| C["Modify it"]
  A -->|"Replace it"| D["Buy a service"]
  A -->|"No longer needed"| E["Deprecate it"]

Common trap

Skipping people and process topics.

Try it yourself

Write a short migration plan with risks.

Official docs: What is Apigee

Lesson 5 of 5, ~12.5% of the exam

Operations excellence

A design has to survive production.

Observability
Monitoring, logging and alerting.
Release
Roll out progressively.
Reliability
Load testing and chaos engineering.
RTO and RPOTwo different questions about a failure.
flowchart LR
  A["Last good copy"] -->|"RPO: data you can lose"| B["Failure"]
  B -->|"RTO: time to recover"| C["Service restored"]

Common trap

Confusing backups with a low recovery time.

Try it yourself

Write down RTO and RPO for one system and match a design.

Official docs: Well-Architected Framework

Study plan

  1. Week 1: the case studies

    Read all four case studies closely and sketch an architecture for each. Note what the business actually asks for.

  2. Weeks 2 and 3: core services

    Cover networking, compute choices and storage. Build a small app on Cloud Run and then on GKE.

  3. Week 4: security and AI

    Set up VPC Service Controls and Workload Identity Federation. Add a Gemini feature with Model Armor.

  4. Week 5: exam practice

    Do the sample questions and the mock below. Time yourself on the case study questions.

Exam day and after

  • Google renamed Vertex AI to Gemini Enterprise Agent Platform, and its exams were updated to match. Old notes use the former names, so check the exam guide for the current ones.
  • The certification pages do not state a pass mark for these exams.
  • Sample questions are free on each certification page, with no limit on attempts.
  • Read the case studies in advance, because they are published. Going in unprepared wastes exam time.
  • When a question gives a business goal and a technical option, the business goal decides.
Test yourself8 practice questions, scored by exam topic.
Start the mock exam

Keep going

Exam facts checked on October 31, 2026 against Professional Cloud Architect exam guide. Lessons are our own explanations, so use the official docs as the final word, and confirm price and dates before booking.