Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
All Practice Exams

100+ Free Tencent Cloud Solutions Architect Associate Practice Questions

Pass your Tencent Cloud Certified Associate — Solutions Architect (TCA-CloudComputing) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

An architect needs to distribute HTTPS traffic across three CVM instances in two AZs, with session persistence based on cookies and health checks on port 443. Which CLB configuration is required?

A
B
C
D
to track
2026 Statistics

Key Facts: Tencent Cloud Solutions Architect Associate Exam

600/1000

Passing Score

Tencent Cloud

80

Exam Questions

Tencent Cloud

90 min

Exam Duration

Tencent Cloud

$120

Exam Fee

Tencent Cloud / Kryterion (≈CNY 800)

2 years

Validity

Tencent Cloud

60-100 hrs

Recommended Study

Recommended

Kryterion

Exam Provider

Tencent Cloud

TCA-Architect requires a scaled score of 600 out of 1000 with 80 questions in 90 minutes. The fee is approximately US$120 and the credential is valid for 2 years. The exam focuses on designing solutions — choosing the right services, HA patterns, network topology, and cost model — rather than day-to-day operations. Preparation typically takes 60–100 hours.

Sample Tencent Cloud Solutions Architect Associate Practice Questions

Try these sample questions to test your Tencent Cloud Solutions Architect Associate exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1A startup wants to run a stateless web application that must automatically scale from 2 to 50 CVM instances based on CPU load, with a minimum cost during off-peak hours. Which Tencent Cloud compute billing model best supports this requirement?
A.Monthly subscription (Prepaid) instances only
B.A mix of monthly subscription instances as base capacity and Spot instances for burst
C.Pay-as-you-go (Postpaid) instances with Auto Scaling policies
D.Reserved Instances billed annually for all 50 nodes
Explanation: Pay-as-you-go (Postpaid) instances combined with Auto Scaling allow the fleet to expand and contract automatically based on CPU metrics, and you only pay for running instances. Monthly subscription instances cannot be automatically terminated by Auto Scaling, so they are unsuitable as the sole billing model for a fully elastic fleet.
2You need to design a multi-tier application where web servers in one VPC subnet must access a MySQL database in a second subnet without routing through the public internet. What is the correct network design?
A.Assign an EIP to the database and use a security group inbound rule
B.Place both subnets inside the same VPC and use a route table entry to direct traffic internally
C.Create a VPC peering connection between the two subnets
D.Use a NAT Gateway so the web servers reach the database via SNAT
Explanation: Subnets inside the same Tencent Cloud VPC can communicate with each other through the VPC's internal routing without any extra configuration; the default route table already allows intra-VPC traffic. EIPs expose resources to the public internet, VPC peering connects different VPCs (not subnets within the same VPC), and NAT Gateway handles outbound internet access, not internal database communication.
3A financial services company requires that CVM instances in a private subnet can initiate outbound HTTPS calls to public APIs but must never be directly reachable from the internet. Which Tencent Cloud component fulfills this requirement?
A.Internet Gateway attached to the subnet
B.NAT Gateway in a public subnet with a route entry pointing 0.0.0.0/0 to the NAT Gateway
C.EIP assigned directly to each private CVM instance
D.VPN Gateway with an IPsec tunnel to the external API
Explanation: A NAT Gateway placed in a public subnet and referenced in the private subnet's route table translates outbound traffic, giving private CVM instances internet access without exposing them to inbound connections. Direct EIPs and Internet Gateways both make instances directly addressable from the internet, and a VPN Gateway is for secure site-to-site or client-to-site connections, not general outbound internet HTTPS.
4Which Tencent Cloud CVM instance family is optimized for compute-intensive workloads such as batch processing, high-performance computing (HPC), and video transcoding that require the highest vCPU-to-memory ratio?
A.Standard S6
B.Memory-optimized MA3
C.Compute-optimized C6
D.High I/O IT5
Explanation: The Compute-optimized C series (e.g., C6) is designed for CPU-intensive tasks like HPC, batch processing, and transcoding; it offers a higher vCPU-to-memory ratio than the Standard family. Memory-optimized MA3 is for large in-memory workloads like Redis or SAP HANA. Standard S6 balances compute and memory. High I/O IT5 targets latency-sensitive storage workloads with local NVMe SSDs.
5A company runs separate development, staging, and production workloads in the same Tencent Cloud account. They want network isolation between environments while still allowing the production VPC to reach a shared services VPC. What is the recommended design?
A.Use three separate VPCs with non-overlapping CIDR blocks and connect production to shared services via CCN
B.Use a single VPC with subnets and security groups to segment the environments
C.Create three VPCs with identical 10.0.0.0/16 CIDRs and use NAT Gateway between them
D.Enable VPC peering between all three environment VPCs and the shared services VPC
Explanation: Three separate VPCs with non-overlapping CIDRs provide strong network isolation between environments. Cloud Connect Network (CCN) can then connect the production VPC to the shared services VPC with fine-grained route policies. Overlapping CIDRs prevent CCN or peering connections. A single-VPC design relies only on security groups and subnets, which is weaker isolation. Full-mesh peering between all environments and shared services is harder to manage and may allow unintended lateral movement.
6Your e-commerce application stores user-uploaded product images that are read frequently but rarely modified. You want the lowest cost per GB while maintaining high durability. Which COS storage class should you select?
A.STANDARD storage class
B.STANDARD_IA (Standard Infrequent Access) storage class
C.ARCHIVE storage class
D.DEEP_ARCHIVE storage class
Explanation: STANDARD_IA offers lower storage cost per GB than STANDARD, while still providing millisecond retrieval for objects read on demand. It suits data accessed less than once per month but needing quick access when read. ARCHIVE and DEEP_ARCHIVE have lower storage costs but require restore time before access, making them unsuitable for frequently served product images.
7A SaaS application requires a relational database that remains available during an AZ failure with zero application code changes. Which TencentDB for MySQL architecture achieves this?
A.Single-node edition with manual failover script
B.Two-node (High Availability) edition with multi-AZ deployment and automatic failover
C.Read replica in a second AZ with application-level write retry
D.Three-node (Finance) edition deployed within a single AZ
Explanation: TencentDB for MySQL Two-node High Availability edition supports multi-AZ deployment where the primary and replica are in different AZs. Tencent Cloud handles automatic failover to the replica if the primary AZ fails, with no application connection string change required. Single-node provides no automatic failover. Read replicas handle read scaling but require the application to manage write-path failover. Finance Edition (three-node) provides stronger consistency but may be deployed in a single AZ.
8A content delivery network is needed to serve static assets globally with low latency to users in Asia. Which Tencent Cloud service should the architect select?
A.Cloud Load Balancer (CLB) with a global anycast VIP
B.Tencent Cloud CDN with acceleration nodes across Asia-Pacific
C.ECDN (Enterprise CDN) for cross-border dynamic content acceleration
D.COS with a public-accessible bucket URL
Explanation: Tencent Cloud CDN caches static content at distributed acceleration nodes across Asia-Pacific (and globally), reducing origin load and latency for end users. ECDN is purpose-built for dynamic or cross-border content with high network jitter; it is less cost-efficient for pure static assets. CLB load-balances traffic to backend servers and is not a cache layer. Serving objects directly from a COS bucket URL does not leverage edge caching.
9An architect must select a storage solution for a fleet of 20 CVM instances that all need read and write access to the same shared dataset simultaneously. Which Tencent Cloud storage service is correct?
A.Cloud Block Storage (CBS) Premium Cloud Disk
B.Cloud Object Storage (COS) with presigned URLs
C.Cloud File Storage (CFS) NFS file system
D.TencentDB for MySQL with a shared schema
Explanation: Cloud File Storage (CFS) provides a shared NFS or SMB file system that multiple CVM instances can mount concurrently with read and write access. CBS volumes can only be attached to a single CVM at a time. COS is object storage accessed via HTTP API and is not a POSIX shared file system. TencentDB is a relational database, not a shared file system mount point.
10You need to grant a third-party auditing company temporary read access to specific COS buckets without creating a long-lived sub-user. Which CAM feature is most appropriate?
A.Create a CAM sub-user with a permanent access key scoped to the buckets
B.Share the root account password with read-only scope
C.Create a CAM role with a trust policy allowing the auditor's account to assume it and use STS temporary credentials
D.Enable public-read ACL on the COS buckets for the duration of the audit
Explanation: CAM roles with Security Token Service (STS) allow an external party to assume the role for a limited time and receive short-lived credentials. This avoids permanent long-lived keys and follows least-privilege access. Sharing the root password or creating permanent sub-user keys violate security best practices. Public-read ACLs expose the buckets to anyone on the internet.

About the Tencent Cloud Solutions Architect Associate Exam

The Tencent Cloud Certified Associate — Solutions Architect (TCA-CloudComputing) validates the ability to design scalable, highly available, cost-optimized, and secure cloud solutions on Tencent Cloud. The exam covers compute selection (CVM instance families, Auto Scaling), network design (VPC, CLB, CDN, CCN, Direct Connect), storage selection (CBS, COS, CFS), database architecture (TencentDB MySQL HA, Redis, DTS), containers and serverless (TKE, EKS, SCF, API Gateway), and security architecture (CAM, KMS, WAF, Anti-DDoS).

Questions

80 scored questions

Time Limit

90 minutes

Passing Score

600/1000

Exam Fee

$120 (Tencent Cloud / Kryterion)

Tencent Cloud Solutions Architect Associate Exam Content Outline

20%

Architecture Design Principles

High availability patterns (multi-AZ, multi-region), scalability (Auto Scaling, serverless), cost optimization (billing model selection, Reserved Instances, lifecycle policies), and security architecture (least privilege, defense in depth, encryption)

18%

Compute & Auto Scaling

CVM instance families (Standard S, Compute C, Memory MA, GPU GN, High-I/O IT, Bare Metal), Pay-as-you-go vs Prepaid vs Spot vs Reserved Instances, Auto Scaling groups, launch templates, multi-AZ balancing, and CLB health check integration

18%

Networking (VPC, CLB, CDN)

VPC CIDR design, public and private subnets, route tables, NAT Gateway, EIP, VPC peering, CCN multi-region connectivity, Direct Connect, VPN Gateway, CLB Layer-4 TCP/UDP vs Layer-7 HTTP/HTTPS, session persistence, CDN/ECDN, DNSPod geo-routing, VPC Endpoints

16%

Storage (CBS, COS, CFS)

CBS disk types (Premium, SSD, Enhanced SSD, Tremendous SSD), scheduled snapshot policies, CBS encryption with KMS, COS storage classes (STANDARD, STANDARD_IA, ARCHIVE, DEEP_ARCHIVE), lifecycle policies, versioning, CRR, COS Select, CFS NFS/SMB shared file systems

14%

Databases & Data Services

TencentDB for MySQL HA editions (Single-node, Two-node, Three-node, Cluster), read replicas and replication lag, TencentDB for Redis Sorted Sets and persistence, DBbrain index recommendations, DTS online migration and CDC data subscription, DR RPO/RTO tiers

8%

Security & Identity

CAM sub-users, groups, roles, MFA enforcement, STS temporary credentials, CAM instance roles, KMS CMKs and Exclusive HSM edition, Secrets Manager, WAF OWASP protection, Anti-DDoS Pro/Advanced, Cloud Firewall hub-and-spoke egress inspection, bucket policy VPC conditions

6%

Containers, Serverless & Integration

TKE Managed Cluster, EKS serverless pods, Kubernetes Network Policies, HPA with custom metrics, SCF event triggers (COS, timer, API Gateway), TCR container registry, TDMQ pub/sub fan-out, CKafka replication and durability, API Gateway usage plans

How to Pass the Tencent Cloud Solutions Architect Associate Exam

What You Need to Know

  • Passing score: 600/1000
  • Exam length: 80 questions
  • Time limit: 90 minutes
  • Exam fee: $120

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

Tencent Cloud Solutions Architect Associate Study Tips from Top Performers

1Focus on 'which service for which scenario' — the exam tests design decisions, not command syntax or console navigation
2Know VPC design cold: CIDR planning, public vs private subnets, NAT Gateway for outbound, CCN for multi-region, Direct Connect for on-premises
3Understand CLB Layer-4 vs Layer-7 deeply: Layer-7 is required for cookie-based stickiness, path routing, HTTPS termination, and WAF integration
4Learn COS storage class decision tree: STANDARD (hot data) → STANDARD_IA (infrequent, immediate access) → ARCHIVE (minutes restore) → DEEP_ARCHIVE (hours restore)
5Practice TencentDB for MySQL HA edition selection: Single-node (no HA) vs Two-node (AZ failover) vs Three-node (Finance, stronger consistency) vs Cluster Edition
6Master CAM role patterns for CVM, TKE, and SCF — assigning roles to compute resources is the preferred alternative to hardcoded API keys
7Understand the RPO/RTO spectrum: backup-restore (highest RPO/RTO, lowest cost) → pilot light → warm standby → active-active (lowest RPO/RTO, highest cost)
8Complete 100+ architecture scenario questions and for each wrong answer, write down the design principle that explains the correct choice

Frequently Asked Questions

What is the Tencent Cloud Solutions Architect Associate passing score?

The Tencent Cloud Certified Associate — Solutions Architect (TCA-CloudComputing) uses a scaled score of 0–1000 with a passing score of approximately 600. The exam delivers 80 questions in 90 minutes. Tencent Cloud does not publish a public pass-rate percentage; candidates with hands-on architecture experience and thorough preparation typically pass on the first attempt.

How many questions are on the TCA Solutions Architect Associate exam?

The TCA-CloudComputing Solutions Architect Associate exam has 80 questions delivered in 90 minutes. Questions are a mix of single-answer multiple choice (60 questions worth 1 point each) and multiple-select items, with scenarios focused on designing Tencent Cloud architectures for compute, networking, storage, databases, and security.

What does the Tencent Cloud Solutions Architect Associate exam cost?

The exam fee is approximately US$120 (about CNY 800), paid through the Kryterion Webassessor portal. Retakes cost the same fee. The credential is valid for 2 years and requires recertification by passing the current version of the exam before expiration.

Which Tencent Cloud services are most important for the TCA architect exam?

The highest-weight topics are: VPC design (subnets, route tables, NAT Gateway, CCN, Direct Connect), CVM instance families and Auto Scaling, CLB Layer-4 vs Layer-7 with health checks, CBS disk types and COS storage classes with lifecycle policies, TencentDB for MySQL HA editions and Redis, CAM roles with STS and KMS encryption, and architecture patterns (multi-AZ HA, cost optimization with billing modes, DR with RPO/RTO targets). Understand WHY each service is chosen over alternatives in architecture scenarios.

How is the TCA Solutions Architect different from the TCA SysOps exam?

TCA-CloudComputing (Solutions Architect) focuses on designing solutions — selecting the right instance family, network topology, HA pattern, cost model, and storage tier for business requirements. TCA-SysOps focuses on operating and maintaining workloads — monitoring, alarms, patching, scaling operations, troubleshooting, and automation. The architect exam tests design decisions; the SysOps exam tests operational tasks.

Is the Tencent Cloud Solutions Architect exam available online?

Yes. The exam is delivered through Kryterion's Webassessor platform, which supports online proctoring from any location with a webcam and stable internet connection. Candidates can also take the exam at Kryterion-authorized test centers. Register at webassessor.com/tencent.

How long should I study for the Tencent Cloud Solutions Architect Associate?

Most candidates with prior cloud architecture experience study for 6–10 weeks (60–100 hours). Allocate time across: VPC and network design (20%), CVM and Auto Scaling patterns (18%), storage selection and lifecycle (16%), database HA and DR patterns (14%), and security design (8%). Practice architecture scenario questions and review every wrong answer until you can explain the design trade-off.