Google Cloud Associate Cloud Engineer credential artwork

Google Cloud Associate Cloud Engineer (ACE) Exam Guide

Validates knowledge of setting up, deploying, operating and securing Google Cloud environments, including access and security configuration.

The exam checks whether you can set up, deploy, run and secure Google Cloud environments, picking the right service and configuration for a scenario. Learn the four sections, practise in the console and gcloud, then use timed questions to sharpen your service choices.

Understand the exam

Syllabus

Section 1Setting up a cloud solution environment20%
  1. 1.1Setting up cloud projects and accounts
  2. 1.2Managing billing configuration

Example scenario: A finance team wants an email when a project's monthly spend passes 80% of plan and a daily export of costs for analysis. What would you configure?

Section 2Planning and implementing a cloud solution30%
  1. 2.1Planning and implementing compute resources
  2. 2.2Planning and implementing storage and data solutions
  3. 2.3Planning and implementing networking resources
  4. 2.4Planning and implementing resources using tooling

Example scenario: A stateless web API has unpredictable traffic and should cost nothing when idle. Which compute option would you deploy it to, and why not a managed instance group?

Section 3Ensuring the successful operation of a cloud solution30%
  1. 3.1Managing compute resources
  2. 3.2Managing storage and data solutions
  3. 3.3Managing networking resources
  4. 3.4Monitoring and logging

Example scenario: A new Cloud Run revision has a suspected bug. How would you send 10% of traffic to it and roll back quickly if errors rise?

Section 4Configuring access and security20%
  1. 4.1Managing IAM
  2. 4.2Managing service accounts

Example scenario: A GKE workload needs to read one Cloud Storage bucket, and the security team has banned service account keys. What setup would you use?

Associate Cloud Engineer standard exam guide · Updated for 2026 product names

Format

Questions
50–60
Duration
2h
Delivery
Test centre or online
Languages
English, Japanese, Spanish, Portuguese

Question types

Choose the one correct answer from the options.

CertUp example

An application running on a Compute Engine VM must write files to one Cloud Storage bucket. What is the most secure way to give it access?

  1. Attach a service account to the VM and grant it a write role on that bucket
  2. Download a service account key and store it on the VM
  3. Make the bucket writable by allUsers
  4. Use a developer's personal credentials on the VM
Show answer

Attach a service account to the VM and grant it a write role on that bucket. The VM gets short-lived credentials and only the permission it needs, with no key file to leak.

Eligibility and booking

Create a CM Connect account, choose the exam and delivery method, then pick a Pearson VUE time and pay. Your CM Connect legal name must match your ID exactly.

Make a study plan

Read the exam guide and try Google's sample questions, then work through one course with labs. Spend the last stage on timed questions and on the services you keep mixing up.

Most candidates spend 40–100 hours. Plan for the low end if you already work in another cloud and know Linux and networking; add time if Google Cloud, Kubernetes or networking is new to you.

6 weeksto be ready
  1. 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.3 h
  2. 3Learn the core conceptsWork through one main course or book, topic by topic.36 h
  3. 4Practice with mock examsTake timed practice tests and review every mistake.18 h
  4. 5Prepare for exam dayBook the exam and check the ID and delivery rules.3 h

Learn the core concepts

Use one main course with labs. Google's own path is the most direct match to the exam guide.

See all 5 ACE courses →

Do the tasks yourself. Run each lab step in the console and again with gcloud. Delete resources when you finish so you do not pay for idle services.

Practice with mock exams

Start with Google's sample questions to see the style. Then use a timed question set and read every explanation, including for the questions you got right.

See all 6 ACE practice tests →

Are you ready?

  • You can explain when to use Compute Engine, GKE, Cloud Run or Cloud Run functions for a workload.
  • You can set up IAM roles and service accounts with least privilege without looking them up.
  • You finish a fresh timed test with time to spare and can explain each wrong answer.

Prepare for exam day

Choose the checklist for your test centre or online appointment.

Before going to the test centre

  • Bring two IDs. One must be a government photo ID with your signature; the second must show your name and signature.
  • Check that your CM Connect legal name matches your ID exactly. A mismatch means no exam and a lost fee.
  • Arrive at least 15 minutes early and expect to store personal items in a locker.
  • No food or drink is allowed in the testing room.
Find a Pearson VUE test centre

Reschedule or cancel at least 24 hours ahead to avoid a late fee. After a fail, wait 14 days, then 60 days, then a year; you get up to four attempts in two years.

Google Cloud testing requirements

Advice from exam takers