Skip to content

Case Studies for the Professional Cloud Architect Exam

The current exam guide lists four case studies that questions may refer to. This note summarizes each in my own words, maps its requirements to Google Cloud design choices, and lists the traps. Read Google's originals first. They are short (one to two pages each) and the exam shows them next to the question.

πŸ“– Altostrat Media case study (PDF) - media library, GKE, gen AI. πŸ“– Cymbal Retail case study (PDF) - online retailer, catalog enrichment, conversational commerce. πŸ“– EHR Healthcare case study (PDF) - SaaS health records, colocation exit, hybrid. πŸ“– KnightMotives Automotive case study (PDF) - car maker, AI, data monetization, EU rules. πŸ“– Professional Cloud Architect exam guide (PDF) - lists the cases and the exam sections.

Older material. Earlier exam guides used Mountkirk Games, TerramEarth, Helicopter Racing League and Dress4Win. They are not in the current guide. The six worked examples in solution-architecture-design.md are generic and still useful as design practice, but do not spend case-study time on the retired four.

How to use a case study in the exam

  1. Read the constraints, not the story. Business requirements say why, technical requirements say what must be true. A wrong answer usually breaks one constraint.
  2. Underline the words that filter answers: "99.9%", "legacy", "on-premises", "no budget for new equipment", "auditable", "EU", "reduce cost", "minimal operational overhead".
  3. Prefer managed and the least change that meets the constraint. A case that says "legacy systems will not move" means hybrid connectivity, not migration.
  4. Check the executive statement. It states the top priority (for example reliability and cost for Altostrat).
  5. Questions test one decision at a time. Match the decision to a design pattern below.

1. Altostrat Media

Who: a media company with a large audio and video library. Wants gen AI for discovery, support and content insight.

Current state: content platform on GKE, media in Cloud Storage, BigQuery as the warehouse, Cloud Run functions for event tasks (transcoding, metadata, recommendations). Some legacy on-premises systems for ingestion and archive. Google Identity plus third-party IdPs. Cloud Monitoring and Prometheus, with alerts by email.

What they need, in short: - Reliable workflows across Google Cloud and on-premises, simple infrastructure management. - Lower storage cost for growing media, without losing availability. - Natural language, 24/7 support, summaries, metadata extraction (language and vision), harmful content detection, trend insight. - Modern CI/CD for containers, secure fast hybrid connectivity for ingestion, Kubernetes both on-premises and in cloud. - AI that is auditable and explainable.

Requirement Design direction
Hybrid ingestion, secure and fast Cloud Interconnect (Dedicated or Partner) with HA VPN as backup
Kubernetes in both places, central management GKE Enterprise / fleets, Config Sync and policy for consistency
CI/CD for containers Cloud Build and Cloud Deploy to GKE, Artifact Registry, Binary Authorization
Lower storage cost Cloud Storage classes plus Autoclass or lifecycle rules (Standard to Nearline/Coldline/Archive by access pattern)
Metadata from media Gemini multimodal models, Video Intelligence, Speech-to-Text, Vision
Summaries and chat support Gemini via the Agent Platform, Agent Builder / conversational agents, grounded in the catalog
Harmful content filtering Gemini safety settings, Model Armor on prompts and responses, Vision SafeSearch
Auditable, explainable AI Cloud Audit Logs, prompt and response logging, model monitoring, Explainable AI where models are custom, documented human review
Insight on consumption BigQuery, BigQuery ML, Looker
Alerts ignored Alerting policies by severity, notification channels with paging, SLO-based alerts

Traps: storage cost questions want lifecycle and Autoclass, not deleting media. "Auditable and explained" is a governance requirement, so logging and review matter as much as the model. Do not pick a service that cannot run on-premises when the case demands Kubernetes on-premises.

2. Cymbal Retail

Who: a growing online retailer with a huge, messy product catalog.

Current state: mix of on-premises and cloud. MySQL, SQL Server, Redis, MongoDB. Kubernetes clusters. SFTP and batch ETL integrations. A custom catalog web app that searches by names and categories. An IVR with call-center agents who key in orders. Grafana, Nagios and Elastic for monitoring. Problems: manual work, data silos, hard to add new technology.

Three goals: automate catalog enrichment with gen AI (attributes, descriptions, images from supplier data), conversational product discovery, and modernize the stack.

Requirements to remember: reduce manual effort and errors, better discovery, higher conversion, lower call-center and data-center cost. Technical: attribute generation from titles, descriptions and images, image variations, natural language search, scale, human-in-the-loop review, data security and compliance.

Requirement Design direction
Attributes and descriptions from supplier text and images Gemini multimodal models on the Agent Platform, structured output (JSON schema)
Image variations and edits Imagen / image generation and editing models
Review before the catalog updates HITL: a review app (Cloud Run) with approve, reject, edit. Workflows or Pub/Sub for the pipeline. Only approved items write to the catalog
Natural language product discovery Agent Search (formerly Vertex AI Search) for commerce (the Discovery AI product the case names) behind a conversational agent
Virtual agents on web, app, and phone Conversational Agents / Customer Engagement Suite replacing IVR menus, with handoff to a human agent
Databases to the cloud Database Migration Service: MySQL and SQL Server to Cloud SQL, Redis to Memorystore, MongoDB to a managed Mongo-compatible option
SFTP and batch ETL Cloud Storage with SFTP-capable transfer, Storage Transfer Service, Dataflow or Cloud Composer for pipelines, Datastream for change data capture
Data silos BigQuery as the unified customer and catalog store
Monitoring consolidation Cloud Monitoring, Managed Service for Prometheus, Grafana still usable
Security of prompts and customer chat Model Armor, Sensitive Data Protection, CMEK, VPC Service Controls, IAM least privilege

Traps: gen AI output should not write straight to production, so the answer with a human review step usually wins. "Reduce data-center cost" points at migration and managed services, not new hardware. Keep PII out of prompts unless needed and protect it.

3. EHR Healthcare

Who: a SaaS provider of electronic health records to medical offices, hospitals and insurers, growing fast.

Current state: several colocation facilities, with a lease about to expire. Customer apps are web-based and many are containerized on Kubernetes. MySQL, SQL Server, Redis and MongoDB. Legacy file and API integrations with insurers stay on-premises with no plan to move them. Users in Active Directory. Open-source monitoring, with email alerts that people ignore.

Business needs: onboard insurers quickly, 99.9% availability, central visibility and proactive action, healthcare trend insight and predictions, lower latency, regulatory compliance, lower admin cost.

Technical needs: keep legacy insurer interfaces connected to both on-premises and cloud, consistent management of containerized apps, secure and fast on-premises link, consistent logging and retention, monitoring and alerting, several container environments, scale and provision environments dynamically, interfaces to ingest data from new providers.

Requirement Design direction
Leave colocation, deadline set by the lease Phased migration with Migration Center for discovery and TCO. Lift and shift VMs (Migrate to Virtual Machines) first, containers to GKE, databases with Database Migration Service
Legacy insurer links stay on-premises Hybrid: Cloud Interconnect (redundant, 99.99% topology) plus HA VPN backup
Consistent container platform GKE regional clusters, fleets, Config Sync, Policy Controller, GKE Enterprise for multi-environment
99.9% availability Regional (multi-zone) GKE and managed instance groups, Cloud SQL HA or Spanner, global external load balancer. Multi-region only if the DR plan requires it
Fast onboarding of insurers Apigee or Cloud Endpoints for APIs, Pub/Sub and Dataflow ingestion, Cloud Storage landing for files, reusable Terraform modules
Users in Active Directory Cloud Identity with federation / Workforce Identity Federation, or Managed Service for Microsoft Active Directory
Consistent logging and retention Cloud Logging aggregated sinks, log buckets with retention, locked retention where required, export to BigQuery or Cloud Storage
Alerts ignored Alerting policies with severity, SLO burn-rate alerts, paging and ticket integration, an incident process
Compliance (health data) Business Associate Agreement, CMEK, VPC Service Controls, Assured Workloads where applicable, Cloud Healthcare API, DLP / Sensitive Data Protection, audit logs
Predictions and trend reports BigQuery and BigQuery ML, Looker, de-identified datasets
Dynamic environments Infrastructure as Code (Terraform), Cloud Deploy, autoscaling

Traps: the case says legacy systems will not move, so answers that migrate them fail. 99.9% does not require multi-region, and a simpler regional design is correct and cheaper. Alerting fixes need routing and ownership, not more email.

4. KnightMotives Automotive

Who: a car maker with electric, hybrid and combustion models. The newer in-vehicle experience is only on electric cars. Wants one modern experience across all models within five years and better dealer tooling.

Current state: mostly on-premises with some public cloud. Outdated mainframe supply chain, outdated ERP, many code bases and technical debt, siloed data, obsolete AI infrastructure. Dealers have no budget for new equipment. Weak connectivity at plants and in rural areas. Past data breaches.

Business needs: personalized relationship with the driver, consistent experience, better build-to-order with transparency, monetize data to fund technology, security paramount, EU data protection (especially for autonomous platforms), invest in autonomous driving, skills and communication.

Technical needs: consistent AI-enabled in-vehicle UX, reliable connectivity, plant-to-HQ network upgrades, hybrid cloud, gradual replacement of legacy, autonomous development and a simulation environment, data platform with strong security, security framework with incident response and training, improved online ordering, dealer tools, CRM.

Requirement Design direction
Hybrid and plants Cloud Interconnect or Partner Interconnect for plants, Cross-Cloud Network, SD-WAN partners. GKE Enterprise for consistent clusters
Outdated mainframe and ERP Phased modernization: Mainframe modernization options (rehost, replatform, refactor), keep running during transition, wrap with APIs (Apigee)
Vehicle telemetry at scale Pub/Sub ingestion, Dataflow, Bigtable or BigQuery, edge processing in the vehicle for low latency
Rural connectivity Design for intermittent links: on-device inference, store and forward, sync when connected
Data silos and monetization BigQuery data platform, Dataplex governance, Analytics Hub for sharing data products, Sensitive Data Protection for de-identification
AI infrastructure and simulation AI Hypercomputer: GPUs and TPUs on GKE, Dynamic Workload Scheduler for capacity, large-scale simulation on batch
EU data protection EU regions, Assured Workloads for EU, data residency and org policy location constraints, CMEK or External Key Manager, DLP, audit
Security after breaches Security Command Center, VPC Service Controls, BeyondCorp / Context-Aware Access for staff, incident response plan, SIEM (Google Security Operations), training
Unreliable online ordering Resilient, autoscaled front end (Cloud Run or GKE), Spanner or Cloud SQL HA for orders, Memorystore cache, SLOs and load testing
Dealers with no new equipment Browser-based SaaS tools, no on-site hardware, identity federation for dealer users
CRM and personalization Managed CRM integration, BigQuery for customer 360, Gemini for personalization with privacy controls

Traps: EU rules point at residency, key control and auditability, so a US multi-region answer is wrong. "Dealers have no budget" rules out solutions that need on-site hardware. Autonomous vehicle compliance is a governance requirement, so log and audit.

Cross-case patterns

Pattern Seen in
Hybrid connectivity with redundancy Altostrat, EHR, KnightMotives
Consistent Kubernetes across environments Altostrat, EHR, KnightMotives
Gen AI with guardrails and human review Altostrat, Cymbal
Legacy stays in place, integrate rather than migrate Altostrat, EHR, KnightMotives
Compliance as a design driver (health, EU, PII) EHR, KnightMotives, Cymbal
Alerts that nobody acts on Altostrat, EHR
Data platform and insight in BigQuery All four
Cost optimization of storage or data centers Altostrat, Cymbal, EHR

Practice

Write a one-page answer for each case: the three biggest constraints, the architecture in a Mermaid flowchart, the connectivity choice, the data choice, the security controls, and one thing you would NOT do and why. Then answer the case-study questions in the practice questions.