Google Cloud Associate Cloud Engineer (ACE) Exam Guide
Validates knowledge of setting up, deploying, operating and securing Google Cloud environments, including access and security configuration.
The exam checks whether you can set up, deploy, run and secure Google Cloud environments, picking the right service and configuration for a scenario. Learn the four sections, practise in the console and gcloud, then use timed questions to sharpen your service choices.
1Understand the exam
Syllabus
Section 1Setting up a cloud solution environment20%
1.1Setting up cloud projects and accounts
1.2Managing billing configuration
Example scenario: A finance team wants an email when a project's monthly spend passes 80% of plan and a daily export of costs for analysis. What would you configure?
Section 2Planning and implementing a cloud solution30%
2.1Planning and implementing compute resources
2.2Planning and implementing storage and data solutions
2.3Planning and implementing networking resources
2.4Planning and implementing resources using tooling
Example scenario: A stateless web API has unpredictable traffic and should cost nothing when idle. Which compute option would you deploy it to, and why not a managed instance group?
Section 3Ensuring the successful operation of a cloud solution30%
3.1Managing compute resources
3.2Managing storage and data solutions
3.3Managing networking resources
3.4Monitoring and logging
Example scenario: A new Cloud Run revision has a suspected bug. How would you send 10% of traffic to it and roll back quickly if errors rise?
Section 4Configuring access and security20%
4.1Managing IAM
4.2Managing service accounts
Example scenario: A GKE workload needs to read one Cloud Storage bucket, and the security team has banned service account keys. What setup would you use?
An application running on a Compute Engine VM must write files to one Cloud Storage bucket. What is the most secure way to give it access?
Attach a service account to the VM and grant it a write role on that bucket
Download a service account key and store it on the VM
Make the bucket writable by allUsers
Use a developer's personal credentials on the VM
Show answer
Attach a service account to the VM and grant it a write role on that bucket. The VM gets short-lived credentials and only the permission it needs, with no key file to leak.
Choose all the correct answers from the options; two or more answers are correct.
CertUp example
A fault-tolerant batch job runs on Compute Engine and the team wants to cut cost. Which TWO choices help?
Use Spot VMs
Use a custom machine type sized to the job
Use a larger machine type than the job needs
Use a regional persistent disk for every disk
Show answer
Use Spot VMs and use a custom machine type sized to the job. Spot VMs are discounted for work that can be interrupted, and a custom type avoids paying for unused CPU or memory.
Eligibility and booking
Create a CM Connect account, choose the exam and delivery method, then pick a Pearson VUE time and pay. Your CM Connect legal name must match your ID exactly.
Read the exam guide and try Google's sample questions, then work through one course with labs. Spend the last stage on timed questions and on the services you keep mixing up.
Most candidates spend 40–100 hours. Plan for the low end if you already work in another cloud and know Linux and networking; add time if Google Cloud, Kubernetes or networking is new to you.
1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.3 h
3Learn the core conceptsWork through one main course or book, topic by topic.36 h
4Practice with mock examsTake timed practice tests and review every mistake.18 h
5Prepare for exam dayBook the exam and check the ID and delivery rules.3 h
3Learn the core concepts
Use one main course with labs. Google's own path is the most direct match to the exam guide.
Do the tasks yourself. Run each lab step in the console and again with gcloud. Delete resources when you finish so you do not pay for idle services.
4Practice with mock exams
Start with Google's sample questions to see the style. Then use a timed question set and read every explanation, including for the questions you got right.
Reschedule or cancel at least 24 hours ahead to avoid a late fee. After a fail, wait 14 days, then 60 days, then a year; you get up to four attempts in two years.
A data scientist with almost two years of light GCP use needed separate networking and Kubernetes courses before the networking and GKE questions made sense, and found the real exam harder than Google's sample questions.
Recent passers describe questions about choosing between similar services, especially compute options, IAM and billing. Reading each question twice and eliminating weak answers helped more than recalling configuration steps.
A candidate who studied for two months with Google Skills labs says typing the gcloud commands made the difference, and listed GKE, storage lifecycle, VPC changes, IAM and monitoring as frequent topics.