What is the Associate Cloud Engineer exam and how hard is it?
The Associate Cloud Engineer (ACE) exam is a 2-hour, 50-question proctored test that validates hands-on ability to deploy and manage workloads on Google Cloud Platform. It is widely considered the most challenging entry-level cloud associate exam across all three major providers, requiring real command-line proficiency with gcloud, kubectl, and the GCP Console.
The Google Cloud Associate Cloud Engineer certification is the gateway credential for practitioners who want to work with GCP infrastructure in production. Unlike vendor-neutral cloud exams, ACE demands actual technical skill: candidates must know how to spin up Compute Engine instances, configure VPC networks, manage IAM policies, and operate Kubernetes clusters using Google Kubernetes Engine. Passing it signals to employers that you can perform real cloud engineering work from day one.
This guide covers every domain in the ACE exam blueprint, breaks down the best study resources, and provides a realistic 12-week preparation plan. Data is drawn from Google's official exam guide [1], the Cloud Skills Boost learning platform [2], Payscale compensation surveys [3], and the Tutorials Dojo ACE practice exam analysis [4].
Exam Logistics and Registration
Before building a study plan, understand what you are registering for:
| Attribute | Detail |
|---|---|
| Exam cost | $125 USD |
| Exam duration | 120 minutes |
| Number of questions | 50 multiple-choice and multiple-select |
| Passing score | Not published; community consensus is approximately 70% |
| Validity period | 2 years |
| Delivery | Remote proctored (Kryterion) or in-person test center |
| Languages | English, Japanese, Spanish, Portuguese |
| Prerequisites | None (recommended: 6+ months GCP hands-on experience) |
Registration happens through webassessor.com. Google recommends six months of hands-on GCP experience before sitting the exam, though candidates with strong AWS or Azure backgrounds often pass with less GCP-specific time.
"The Associate Cloud Engineer exam assesses your ability to set up a cloud solution environment, plan and configure a cloud solution, deploy and implement a cloud solution, ensure the successful operation of a cloud solution, and configure access and security." -- Google Cloud Certification exam guide [1]
The Five Exam Domains
Google publishes an official exam guide that divides the content into five domains. Understanding the weight of each domain is critical for allocating study time efficiently.
| Domain | Title | Approximate Weight |
|---|---|---|
| 1 | Setting up a cloud solution environment | 17.5% |
| 2 | Planning and configuring a cloud solution | 17.5% |
| 3 | Deploying and implementing a cloud solution | 25% |
| 4 | Ensuring successful operation of a cloud solution | 25% |
| 5 | Configuring access and security | 15% |
Domain 1: Setting Up a Cloud Solution Environment (17.5%)
This domain tests your ability to establish a working GCP environment from scratch. Key subtopics include:
Project and Billing Setup
- Creating and managing GCP projects using the Console and gcloud CLI
- Configuring billing accounts, linking projects, and setting budget alerts
- Using Cloud Billing reports and the pricing calculator
Identity and Access Management Foundations
- Assigning roles to users, service accounts, and groups via IAM
- Understanding the difference between primitive roles (Owner, Editor, Viewer), predefined roles, and custom roles
- Enabling and disabling APIs at the project level
Cloud SDK and CLI Proficiency
- Installing and initializing the Cloud SDK (gcloud init)
- Configuring multiple accounts and switching between projects
- Using
gcloud config setfor persistent configuration
The exam frequently tests gcloud syntax directly. Memorize common flags: --project, --zone, --region, --format, and --filter. A common trap question asks candidates to identify the correct command for a task where two syntactically similar options exist.
Domain 2: Planning and Configuring a Cloud Solution (17.5%)
This domain focuses on selecting the right GCP service for a given scenario and sizing resources appropriately.
Compute Planning
- Comparing Compute Engine, Google Kubernetes Engine, App Engine, Cloud Run, and Cloud Functions
- Choosing machine types (N1, N2, E2, C2) based on workload requirements
- Understanding preemptible and spot VM trade-offs for cost versus reliability
Storage and Database Selection
- Matching workloads to the correct storage: Cloud Storage, Persistent Disk, Filestore, or Cloud Bigtable
- Choosing between relational databases (Cloud SQL, Cloud Spanner) and NoSQL (Firestore, Bigtable, Memorystore)
- Understanding data transfer costs across regions
Networking Planning
- Designing VPC networks: subnets, CIDR ranges, and private vs. public IP allocation
- Understanding Cloud Load Balancing types: HTTP(S), TCP/UDP, internal, and external
- Planning firewall rules and network tags
"Candidates should understand the implications of choosing between regional and multi-regional deployments, especially for databases like Cloud Spanner and Cloud SQL." -- Google Cloud Architecture Center [5]
Domain 3: Deploying and Implementing a Cloud Solution (25%)
The highest-weighted domain, this section tests hands-on deployment skills. Expect scenario-based questions that require knowing exact steps to accomplish a task.
Compute Engine Deployments
- Creating VM instances from the Console, CLI, and instance templates
- Configuring managed instance groups (MIGs) with autoscaling policies
- Attaching and resizing persistent disks; creating snapshots and images
- Setting startup scripts via metadata
Google Kubernetes Engine (GKE)
- Creating standard and autopilot clusters
- Deploying workloads using kubectl apply and kubectl run
- Configuring horizontal pod autoscaling and cluster autoscaling
- Managing node pools and upgrading cluster versions
App Engine and Serverless
- Deploying applications with gcloud app deploy
- Configuring traffic splitting between versions
- Deploying Cloud Functions with HTTP and Pub/Sub triggers
- Deploying Cloud Run services from container images
Data and Storage Implementation
- Creating Cloud Storage buckets with correct access control (Uniform vs. Fine-grained)
- Loading data into BigQuery using bq load and the Console
- Configuring Cloud SQL instances: backups, high availability, and read replicas
Domain 4: Ensuring Successful Operation of a Cloud Solution (25%)
Equally weighted to Domain 3, this domain covers ongoing management and troubleshooting.
Monitoring and Logging
- Using Cloud Monitoring to create dashboards, uptime checks, and alerting policies
- Querying Cloud Logging with the Logs Explorer and log-based metrics
- Configuring log sinks to Cloud Storage and BigQuery for retention
Resource Management
- Managing and resizing VMs, GKE clusters, and App Engine versions
- Moving VMs between zones using gcloud compute instances move
- Identifying and controlling runaway costs via resource quotas
Troubleshooting
- Diagnosing connectivity issues using VPC flow logs and firewall rule logging
- Debugging failed deployments using Cloud Build logs
- Identifying IAM permission denials in audit logs
Domain 5: Configuring Access and Security (15%)
Security configuration appears throughout the exam, but this domain specifically tests IAM depth.
IAM Policy Management
- Binding roles at the organization, folder, project, and resource level
- Understanding policy inheritance and the principle of least privilege
- Auditing IAM policies with gcloud projects get-iam-policy
Service Accounts
- Creating and managing service accounts for compute workloads
- Granting roles to service accounts rather than user accounts for automation
- Generating and rotating service account keys; understanding Workload Identity Federation as the preferred alternative to key files
Data Protection
- Applying Cloud KMS keys to encrypt Cloud Storage objects and Persistent Disk
- Configuring VPC Service Controls to restrict data exfiltration
- Understanding Secret Manager for credential storage
Recommended Study Resources
Not all preparation materials are equal. The following resources are consistently rated as the most effective by ACE candidates in 2025-2026:
Official Google Resources
- Google Cloud Skills Boost: "Associate Cloud Engineer Learning Path" (free labs with monthly subscription)
- Google Cloud documentation for each service in the exam guide
- Google-provided sample questions (available on the certification page)
Third-Party Courses
- Sybex "Google Cloud Certified Associate Cloud Engineer Study Guide" by Dan Sullivan: the most comprehensive textbook, updated for current exam content
- A Cloud Guru ACE course: video-based with built-in labs
- Tutorials Dojo ACE practice exams: widely regarded as the most exam-realistic practice tests, written by former GCP engineers
Practice Environments
- Google Cloud Free Tier: 90-day trial with $300 credit; sufficient for all hands-on practice in this guide
- Qwiklabs individual labs: targeted practice on specific services without managing your own billing
"Hands-on practice is non-negotiable for ACE. Candidates who study only videos and books without building real infrastructure consistently underperform on the deployment domains." -- Tutorials Dojo ACE exam guide [4]
12-Week Study Plan
This plan assumes 10-12 hours of study per week and zero prior GCP experience. Candidates with AWS Solutions Architect Associate or Azure Administrator experience can compress weeks 1-4 significantly.
Weeks 1-2: Foundation
- Complete Google Cloud Skills Boost "Google Cloud Fundamentals: Core Infrastructure" course
- Set up a GCP free trial account and explore the Console
- Study billing, IAM basics, and project structure
Weeks 3-4: Compute
- Complete Compute Engine and GKE labs on Cloud Skills Boost
- Deploy at least 3 Compute Engine instances with different configurations
- Create a GKE cluster, deploy an application, and configure autoscaling
- Study App Engine and Cloud Run concepts
Weeks 5-6: Networking and Storage
- Build a custom VPC with subnets in multiple regions
- Configure firewall rules, Cloud NAT, and Cloud DNS
- Work through Cloud Storage, Cloud SQL, and BigQuery labs
- Study load balancing types and practice designing network architectures
Weeks 7-8: Operations and Monitoring
- Set up Cloud Monitoring dashboards and alerting policies
- Practice with Cloud Logging: querying logs, creating sinks, and log-based metrics
- Study Cloud Deployment Manager and Terraform basics for infrastructure as code
Weeks 9-10: Security and IAM Deep Dive
- Complete IAM labs: custom roles, service accounts, Workload Identity Federation
- Study Cloud KMS, VPC Service Controls, and Secret Manager
- Review audit log structure and IAM troubleshooting patterns
Weeks 11-12: Practice Exams and Gap Filling
- Complete two full Tutorials Dojo practice exams
- Review every incorrect answer against the official Google documentation
- Identify and drill weak domains using targeted Cloud Skills Boost labs
- Book the exam for the end of week 12 or early week 13
Common Exam Mistakes
Understanding where candidates fail helps you avoid the same traps:
Confusing managed and unmanaged instance groups. Managed instance groups support autoscaling and rolling updates. Unmanaged instance groups are for heterogeneous VMs with manual management. The exam frequently presents a scenario requiring one specific type.
Misidentifying the correct storage class. Cloud Storage offers Standard, Nearline, Coldline, and Archive classes. Know the minimum storage duration for each and the access frequency that makes each cost-effective.
Overlooking region vs. zone. Many GCP resources are zonal (single VM, Persistent Disk), regional (Cloud SQL, regional MIG), or multi-regional (Cloud Storage, Spanner). Wrong scope selections in exam scenarios indicate a fundamental misunderstanding.
Using Owner role in answers. The exam consistently tests least-privilege IAM. Any answer that grants Owner or broad Editor permissions is almost never correct. Look for the most specific predefined role that satisfies the scenario.
Forgetting kubectl syntax. GKE questions require familiarity with kubectl get, kubectl apply, kubectl describe, and kubectl logs. Candidates who only practice gcloud commands often lose points in the GKE subdomain.
Salary and Career Outcomes
The ACE certification is a meaningful salary signal for junior-to-mid cloud engineering roles:
| Role | Median Salary (US, 2025) | GCP Relevance |
|---|---|---|
| Cloud Engineer (junior) | $95,000 | Direct |
| Site Reliability Engineer | $130,000 | High |
| DevOps Engineer | $115,000 | High |
| Solutions Architect | $140,000 | Foundational |
Payscale data shows ACE-certified professionals earning a median base salary approximately 18% higher than uncertified cloud engineers at the same experience level [3]. The certification is most valuable at the 0-3 year experience range; at senior levels, demonstrated project portfolios carry more weight.
"ACE is the benchmark that GCP hiring managers use to filter junior cloud engineering candidates. It is the GCP equivalent of AWS SAA or AZ-104." -- Global Knowledge IT Skills and Salary Report, 2025 [6]
Maintaining and Renewing the Certification
ACE certifications are valid for two years. Google sends a renewal reminder 60 days before expiration. To recertify, candidates retake the exam and pay the $125 registration fee. There is no partial-credit option or online renewal assessment; the full exam must be passed.
Google periodically updates the exam guide to reflect new GCP services and deprecated features. Check the official certification page at cloud.google.com/certification for the current version of the exam guide before starting your study plan, particularly if you are beginning more than 90 days before your planned exam date.
References
[1] Google Cloud. "Associate Cloud Engineer Exam Guide." cloud.google.com/certification/cloud-engineer. Accessed May 2026.
[2] Google Cloud. "Cloud Skills Boost Learning Catalog." cloudskillsboost.google. Accessed May 2026.
[3] Payscale. "Google Cloud Certified Associate Cloud Engineer Salary." payscale.com. Accessed May 2026.
[4] Tutorials Dojo. "Google Certified Associate Cloud Engineer Practice Exams." tutorialsdojo.com. Accessed May 2026.
[5] Google Cloud. "Cloud Architecture Center." cloud.google.com/architecture. Accessed May 2026.
[6] Global Knowledge. "IT Skills and Salary Report 2025." globalknowledge.com. Accessed May 2026.