Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
PracticeVideosBlogFlashcardsEspañol
All Practice Exams

100+ Free Tencent Cloud Architect Professional Practice Questions

Pass your Tencent Cloud Certified Professional — Solutions Architect (TCP-SA) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

A financial services firm needs a Tencent Cloud architecture that can handle a 50× traffic spike during trading hours while maintaining regulatory-compliant data residency (data must never leave mainland China). Which design BEST satisfies both constraints?

A
B
C
D
to track
Same family resources

Explore More Tencent Cloud Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

Tencent Cloud Certified Associate – Cloud SysOps Associate (TCA-SysOps)

Practice Questions

Tencent Cloud Certified Associate — Developer (TCA)

Practice Questions

Tencent Cloud Certified Associate — Solutions Architect (TCA)

Practice Questions

Tencent Cloud Certified Expert — Developer (TCE)

Practice Questions

Tencent Cloud Certified Expert — Solutions Architect (TCE)

Practice Questions

Tencent Cloud Certified Practitioner (TCP-Foundations)

Practice Questions
2026 Statistics

Key Facts: Tencent Cloud Architect Professional Exam

600/1000

Passing Score

Tencent Cloud

~60

Exam Questions

Tencent Cloud

120 min

Exam Time

Tencent Cloud

~$150–200

Exam Fee (USD)

Kryterion Webassessor

2 years

Validity

Tencent Cloud

80-120 hrs

Recommended Study

Estimated

5 pillars

Well-Architected Framework

Tencent Cloud

TCP-SA requires a scaled score of 600 out of 1000 with 60 questions in 120 minutes. The exam is delivered via Kryterion Webassessor (online proctored or test centres). The credential is valid for 2 years. Preparation usually takes 80–120 hours and demands deep knowledge of advanced Tencent Cloud networking (CCN, Direct Connect, GAAP), HA/DR architecture patterns, security design, and the Well-Architected Framework.

Sample Tencent Cloud Architect Professional Practice Questions

Try these sample questions to test your Tencent Cloud Architect Professional exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Your company requires a multi-region active-active architecture on Tencent Cloud where each region can independently serve traffic with sub-10ms intra-region latency. A regional failure should not cause data loss and failover should complete in under 30 seconds. Which combination BEST meets these requirements?
A.Two single-AZ deployments with COS cross-region replication and manual DNS failover
B.Multi-region TencentDB for MySQL with synchronous cross-region replication, CLB Global Anycast, and Cloud Monitor alarm-triggered auto-scaling
C.Multi-region active-active with TDSQL distributed instances, CCN inter-region bandwidth, Global Application Acceleration (GAAP), and automated health-check-based DNS switching
D.Two regions each with TencentDB MySQL HA, connected by VPN Gateway, with Route 53 latency routing
Explanation: TDSQL's distributed architecture supports synchronous multi-region writes needed for zero RPO. CCN provides low-latency private inter-region bandwidth, GAAP accelerates global end-user traffic to the nearest entry point, and automated health-check DNS switching achieves the 30-second RTO target. Single-AZ and VPN-based options introduce unnecessary latency and lack the automation required.
2An enterprise is migrating a 200 TB Oracle on-premises database to Tencent Cloud with less than 4 hours of total downtime allowed. The database is write-heavy and cannot be quiesced for longer than 10 minutes. Which migration strategy is MOST appropriate?
A.Tencent Cloud DTS full data migration with a one-time cutover during a weekend maintenance window
B.COS multipart upload of an Oracle Data Pump export, then import into TencentDB for PostgreSQL
C.DTS continuous data replication (CDC) to pre-create the schema on TencentDB, run parallel sync, then perform a brief 10-minute cutover after lag reaches zero
D.Physically ship hard drives containing Oracle backups to a Tencent Cloud data centre for restore
Explanation: DTS CDC (change data capture) continuously replicates incremental changes while the full migration runs, letting the lag approach zero before a brief cutover window. This reduces downtime to minutes rather than hours. A full-only migration or offline export/import cannot meet the 4-hour downtime SLA for a 200 TB write-heavy database.
3A globally distributed SaaS application uses Tencent Cloud CCN to connect 12 VPCs across 6 regions. The networking team notices that traffic between the Singapore and Frankfurt VPCs is routing through Beijing, adding 120ms latency. What is the MOST likely cause and resolution?
A.CCN does not support inter-continent routing; use a dedicated VPN Gateway between Singapore and Frankfurt
B.CCN inter-region bandwidth has not been purchased between the Singapore-Frankfurt link; purchase dedicated inter-region bandwidth on the CCN instance
C.The Singapore VPC CIDR overlaps with the Frankfurt VPC CIDR, causing traffic to fall back to a hub route
D.CCN only supports routing within mainland China; global routing requires Tencent Cloud Global Application Acceleration
Explanation: CCN inter-region bandwidth must be explicitly purchased per region pair. If no bandwidth is bought for Singapore-Frankfurt, CCN falls back to routing through intermediate regions (e.g., Beijing) where bandwidth is available. Purchasing the dedicated inter-region bandwidth between Singapore and Frankfurt resolves the suboptimal routing path.
4Your organization needs a 10 Gbps dedicated private connection between an on-premises data centre and Tencent Cloud VPCs in two different regions with consistent latency. Which combination of Tencent Cloud services achieves this with the LEAST operational complexity?
A.Two separate IPSec VPN Gateways, one per region, each with a 1 Gbps Internet tunnel
B.One Direct Connect physical connection to a Tencent Cloud access point, attach a Direct Connect gateway, then use CCN to distribute connectivity to both regional VPCs
C.Tencent Cloud SD-WAN connected to both regional VPCs via the public Internet with QoS policies
D.Two Direct Connect physical connections, one to each region's access point, each with a separate Direct Connect gateway
Explanation: A single Direct Connect physical port at a Tencent Cloud access point is paired with a Direct Connect gateway (DCG). The DCG can attach to CCN, which then routes the on-premises traffic to all connected regional VPCs over Tencent Cloud's private backbone — providing 10 Gbps capacity to multiple regions from a single physical connection and minimising operational overhead.
5A financial services firm needs a Tencent Cloud architecture that can handle a 50× traffic spike during trading hours while maintaining regulatory-compliant data residency (data must never leave mainland China). Which design BEST satisfies both constraints?
A.Global CLB with Anycast distributing traffic across Shanghai, Beijing, and Singapore regions; COS cross-region replication for durability
B.Shanghai and Beijing regions connected via CCN, Auto Scaling groups behind a Layer-7 CLB per region, TencentDB MySQL active-passive HA confined to mainland China regions, with COS lifecycle restricted to domestic storage classes
C.Single Shanghai region with GAAP entry points from international PoPs routing back to Shanghai, with reserved capacity instances purchased for peak load
D.Multi-region spanning Hong Kong and Singapore for low latency, with TencentDB cross-region read replicas for data locality
Explanation: Keeping both active regions (Shanghai + Beijing) inside mainland China satisfies data residency regulations. CCN provides low-latency private inter-region networking; Auto Scaling handles the 50× spike dynamically; TencentDB MySQL HA confined to China regions ensures no data leaves the regulatory boundary. COS lifecycle policies can restrict storage to domestic classes.
6You are designing a microservices platform on TKE where 30 services communicate via service mesh. The platform must enforce mTLS between all services, support canary deployments with traffic splitting at the 1% granularity, and expose metrics to Cloud Monitor. Which Tencent Cloud component BEST provides these capabilities natively?
A.Nginx ingress controller with custom Lua scripts for traffic splitting and CLS log-based metric extraction
B.Tencent Cloud Service Mesh (TCM) with Istio data plane, integrated with TKE node pools and Cloud Monitor custom metrics
C.TKE Standard cluster with Kubernetes NetworkPolicies and Prometheus Operator installed manually
D.EKS Serverless containers with API Gateway for traffic routing and manual Envoy sidecar injection
Explanation: Tencent Cloud Service Mesh (TCM) is a managed Istio-based service mesh that provides mTLS, fine-grained traffic splitting (including canary at 1% granularity), observability, and native integration with both TKE and Cloud Monitor for metrics. It eliminates the operational overhead of manually managing Envoy sidecars or Prometheus.
7An e-commerce platform on Tencent Cloud needs to reduce CVM costs by 60% for background batch-processing workloads that run 8 hours per day on a predictable schedule. These workloads are fault-tolerant and can restart from a checkpoint. Which billing strategy BEST achieves the cost target?
A.Purchase 3-year Reserved Instances for all batch workloads to lock in maximum discount
B.Use Spot (Preemptible) CVM instances for the batch fleet managed by an Auto Scaling group with a checkpoint-restart mechanism, and supplement with on-demand instances if Spot capacity is unavailable
C.Switch all instances to Monthly Subscription prepaid billing for the predictable schedule
D.Enable Auto Scaling with time-based scheduled scaling to use on-demand instances only during the 8-hour window
Explanation: Spot CVM instances offer up to 90% discount versus on-demand pricing and are ideal for fault-tolerant batch workloads with checkpoint-restart capability. Using an Auto Scaling group with mixed Spot and on-demand fallback ensures availability while maximising cost savings well beyond the 60% target.
8A media streaming company stores 5 PB of video content in COS and needs to reduce storage costs by 40% while maintaining sub-100ms access for the top 5% most-viewed content and acceptable latency for everything else. Which COS configuration BEST achieves this?
A.Store all content in COS Standard and enable CDN caching in front of COS for all objects
B.Use COS Intelligent-Tiering to automatically move objects between Standard and Standard-IA based on access patterns, with CDN distribution for frequently accessed content
C.Move all objects to COS Archive storage and configure CDN with an origin-pull restore trigger
D.Manually tag objects monthly as Standard or Infrequent Access based on view count reports
Explanation: COS Intelligent-Tiering automatically moves objects between Standard and Standard-IA tiers based on actual access frequency, reducing storage costs without manual intervention. CDN caching in front of COS ensures hot content is served with sub-100ms latency at the edge. This combination achieves cost reduction for the long tail while preserving performance for popular content.
9A healthcare application requires end-to-end encryption of data at rest and in transit, with the ability to audit every key usage event and rotate keys quarterly without application downtime. Which Tencent Cloud architecture BEST satisfies these requirements?
A.Enable CVM disk encryption using a default platform-managed key; use HTTPS for data in transit
B.Use Tencent Cloud KMS with customer-managed keys (CMKs), enable KMS key usage audit logs via CloudAudit, configure automatic key rotation with key versioning, and enforce TLS 1.2+ at CLB
C.Store sensitive data in TencentDB with TDE (Transparent Data Encryption) only; rotate credentials via Secrets Manager quarterly
D.Encrypt data at the application layer using AES-256 before writing to COS; store the encryption key in a COS bucket with server-side access logging
Explanation: KMS CMKs give full control over key lifecycle including quarterly rotation via KMS versioning (previous data encrypted with old key versions is still decryptable). CloudAudit captures every KMS API call for compliance auditing. Enforcing TLS 1.2+ at the CLB layer covers transit encryption without modifying application code.
10A Tencent Cloud architecture uses a CLB (Application Load Balancer) fronting 3 CVM-backed target groups across two AZs. During a rolling upgrade, you need to drain connections from one AZ while keeping the other fully available. Which CLB capability enables graceful connection draining?
A.Set the CLB health check interval to 0 seconds for the AZ being upgraded
B.Enable Connection Draining on the CLB backend and set a drain timeout (e.g., 300 seconds); then remove the CVM instances from the target group
C.Delete the CLB listener for the AZ being upgraded and recreate it after the upgrade
D.Configure the CLB to use IP-hash session persistence so existing connections stay on the old AZ
Explanation: CLB Connection Draining (Deregistration Delay) allows in-flight requests to complete before a backend is fully removed, up to the configured timeout. Removing instances from the target group triggers the drain period — new requests go elsewhere while existing connections finish gracefully. This is the standard zero-downtime rolling upgrade pattern on Tencent Cloud CLB.

About the Tencent Cloud Architect Professional Exam

The Tencent Cloud Certified Professional — Solutions Architect (TCP-SA) validates advanced expertise in designing complex, production-grade architectures on Tencent Cloud. It tests ability to architect high-availability and disaster recovery solutions across multiple regions, design large-scale networking (CCN, Direct Connect, GAAP), implement security architecture (KMS, CAM, zero-trust), optimise performance and cost at scale, orchestrate container and data pipelines, and apply the Tencent Cloud Well-Architected Framework. This is a Professional-tier exam above the Associate level, requiring deep hands-on architecture experience.

Questions

60 scored questions

Time Limit

120 minutes

Passing Score

600/1000

Exam Fee

~$150–200 (Tencent Cloud (via Kryterion))

Tencent Cloud Architect Professional Exam Content Outline

22%

High Availability & Disaster Recovery

Multi-region active-active, RTO/RPO selection, warm/hot/cold standby tradeoffs, TencentDB HA failover, Auto Scaling lifecycle hooks, CLB connection draining, chaos engineering

20%

Advanced Networking

CCN inter-region bandwidth, Direct Connect + DCG integration, GAAP global acceleration, Private Link, NAT Gateway scaling, BGP failover automation, VPC routing, GeoDNS

18%

Security Architecture

KMS CMK rotation, CAM condition keys and SCPs, SAML federation with ADFS, TCM zero-trust mTLS, Secrets Manager PAM, COS Block Public Access, defence-in-depth

15%

Performance & Scalability

TDSQL vs MySQL HA selection criteria, COS Intelligent-Tiering, NodeLocal DNSCache, CBS IOPS burst, HPA custom metrics, cluster autoscaler scale-to-zero, CDN cache management

13%

Data, Messaging & Cloud-Native

TDMQ FIFO/transactional queues, CKafka + Flink streaming pipelines, DLC serverless SQL, ClickHouse sharding, TKE stateful workloads, TCM service mesh, VPA, GPU node pools

7%

Cost Optimisation

Spot CVM batch patterns, Reserved Instance strategy, right-sizing workflow, resource tagging cost allocation, COS lifecycle tiering, EMR on-demand vs reserved

5%

Migration, Hybrid & Well-Architected

DTS CDC migration, Direct Connect BGP failover, Strangler Fig pattern, Tencent Cloud Well-Architected five pillars, SLO/error budget, multi-account organisation guardrails

How to Pass the Tencent Cloud Architect Professional Exam

What You Need to Know

  • Passing score: 600/1000
  • Exam length: 60 questions
  • Time limit: 120 minutes
  • Exam fee: ~$150–200

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

Tencent Cloud Architect Professional Study Tips from Top Performers

1Focus on multi-service integration scenarios — TCP-SA questions rarely test single services in isolation; practice reasoning through CCN + Direct Connect + GAAP combinations and TDSQL vs MySQL HA selection criteria
2Master the Well-Architected five pillars deeply — at least 10-15% of questions involve identifying which pillar is deficient or which practice addresses a described gap
3Understand CCN routing mechanics thoroughly: inter-region bandwidth purchase, custom routing policies, full-mesh topology, and longest-prefix-match behaviour
4Know when to use TDSQL (distributed MySQL) versus standard TencentDB MySQL HA — the key triggers are high write TPS (>10K sustained) and table sizes exceeding single-node capacity
5Practice HA/DR scenario questions with specific RTO and RPO values: cold standby (hours RTO), warm standby (15-30 min RTO, minutes RPO), hot standby (seconds RTO, near-zero RPO) cost tradeoffs
6Understand GAAP versus CDN versus CCN use cases clearly: GAAP for dynamic content to a single origin, CDN for static/cacheable content, CCN for private VPC-to-VPC/IDC connectivity
7Study KMS CMK rotation combined with CAM condition-key policies — TCP-SA tests the intersection of encryption and access control, not each in isolation
8Practice timed 120-minute mock exams with 60 questions — Professional-level time pressure is real and scenario questions require careful reading of all four options

Frequently Asked Questions

What is the difference between the TCP-SA (Professional) and TCA-CloudComputing (Associate) architect certifications?

The TCA-CloudComputing (Associate) validates the ability to select and configure individual Tencent Cloud services for standard architectures. The TCP-SA (Professional) tests advanced architecture design: multi-region active-active HA/DR, complex CCN/Direct Connect/GAAP networking, security architecture with KMS and zero-trust, Well-Architected tradeoff analysis, and enterprise-scale cost optimisation. Professional-tier questions are primarily scenario-based and require reasoning across multiple interconnected services simultaneously.

How many questions are on the Tencent Cloud Solutions Architect Professional exam?

The TCP-SA exam contains approximately 60 questions delivered over 120 minutes. Questions are a mix of single-answer multiple choice and multi-select scenario questions covering advanced topics including multi-region HA, CCN routing, TDSQL distributed databases, TKE service mesh, KMS encryption, and Well-Architected Framework principles. Tencent Cloud may adjust question counts between exam versions.

What Tencent Cloud services are most important to master for the TCP-SA?

Focus your preparation on: CCN (inter-region bandwidth, routing policies), Direct Connect + DCG topology, GAAP (global acceleration for dynamic content), TDSQL (distributed MySQL for high TPS/large tables), TKE advanced topics (TCM service mesh, cluster autoscaler, VPA, GPU nodes), KMS (CMK rotation, audit), CAM (condition keys, SAML federation, STS), TencentDB HA cross-region replication, and the Tencent Cloud Well-Architected Framework five pillars. Every question at the Professional level involves multiple services interacting.

What is the TCP-SA passing score and exam fee?

The exam uses a scaled scoring system of 0–1000, with approximately 600 required to pass. The exam fee is approximately US$150–200 depending on region, paid through the Kryterion Webassessor portal. Retakes require full payment with a 7-day cooldown period between attempts. The credential is valid for 2 years from the date of passing.

Is there a prerequisite credential required before taking the TCP-SA?

Tencent Cloud does not formally require the Associate credential as a prerequisite for the Professional exam, but strongly recommends it. The TCP-SA assumes fluency with all Associate-level services and adds advanced architectural design complexity on top. Candidates without Associate-level knowledge typically need significantly more study time to cover both foundational and advanced content.

How should I study for the TCP-SA if I already hold the TCA-CloudComputing Associate credential?

Build on Associate knowledge by focusing on: (1) multi-region and cross-AZ HA/DR design patterns with specific RTO/RPO calculations; (2) advanced CCN and Direct Connect networking scenarios including BGP failover; (3) TDSQL selection criteria versus standard MySQL HA; (4) TKE advanced operations — TCM mTLS, cluster autoscaler, VPA; (5) KMS CMK lifecycle and CAM condition-key policy design; and (6) the Well-Architected Framework applied to real tradeoff scenarios. Practice with 2-hour timed scenario exams simulating Professional-level multi-service integration questions.

Is the TCP-SA exam available in English?

Tencent Cloud certifications are primarily administered in Chinese (Simplified) through the official portal. English-language versions are available for international markets through the Kryterion Webassessor platform. Check the Webassessor portal when scheduling to confirm language availability in your region. The Coursera Solutions Architect Professional preparatory course is available in English.