Google Professional Cloud Architect - PCA Practice Test 2025

Zero trust is a security model in which no request is trusted because of where it comes from, so every access to a resource is authenticated, authorised and checked against policy each time.

Encryption transforms readable data into ciphertext with a key so that only someone holding the right key can turn it back, protecting the data while it is stored or in transit.

A hash function turns input of any size into a fixed-size fingerprint in a way that cannot be reversed, so that the fingerprint can verify data or store a password without holding the original.

TCP/IP is the family of protocols on which the internet runs: IP moves packets between addresses without guarantees, and TCP or UDP ride on top to deliver either a reliable ordered stream or fast unordered messages.

The OSI model is a seven-layer reference framework that separates networking into physical transmission, link, network, transport, session, presentation and application concerns, used to reason about where a problem sits rather than to describe any real protocol stack.

IP addressing is the scheme that gives every interface on a network a numeric address, with IPv4's four-byte addresses now supplemented by IPv6's much larger space, and with private ranges reserved for use inside networks that reach the internet through translation.

Serverless computing runs your code only while an event is calling it: the provider conjures an execution environment on demand, throws it away afterwards, and charges for work performed instead of for capacity sitting idle.

A container is an application packaged together with the libraries and configuration it needs, run as an isolated process on a host that is already switched on, so the same package behaves the same way on a laptop, in a build pipeline and in production.

Object storage keeps every file as a self-contained object (the bytes, a unique key and some metadata) inside a flat bucket you read and write over HTTP, with no drive to mount and no directory tree underneath it.

A VPS is a software-defined slice of one physical machine that behaves as a server in its own right, with its own operating system, reserved CPU, memory and disk, and administrative access down to the kernel.

A dedicated server is an entire physical computer rented by a single customer, with no hypervisor taking a share and no other tenants on the hardware, chosen when consistent performance, specific components or provable isolation matter more than the ability to resize in seconds.

Managed hosting is any plan where the provider runs the server on your behalf, covering updates, hardening, monitoring, backups and tuning, so the thing being sold is administration time with a machine attached rather than the machine itself.