Google Cloud Associate Cloud Engineer (ACE) Study Guide: Exam Domains and Study Plan

The Google Cloud Associate Cloud Engineer (ACE) exam is for cloud engineers who deploy, operate, and secure workloads on Google Cloud. It tests more than product recall: you need to choose services for a given need, implement a solution, troubleshoot operations, and configure appropriate access.

This guide explains the five exam domains, common service choices, and a practical preparation plan. GCP-ACE is the shorthand used in this guide and on our site; the official certification name is Associate Cloud Engineer. Exam content can change, so check the official certification page and standard exam guide before you register and study.

Who is this exam for?

Cloud and operations engineers who deploy virtual machines, containers, networks, and managed services and keep them running.
Engineers moving from AWS, Azure, or on-premises infrastructure to Google Cloud who want to understand its resource hierarchy, networking, and managed products.
Learners starting with Google Cloud who want a structured foundation and a recognized credential.

There are no prerequisites, but Google recommends at least six months of hands-on experience with Google Cloud. If cloud concepts are new to you, start with cloud fundamentals. If you already work with AWS, the SAA-C03 guide can help you compare concepts, but do not assume AWS products and permission models map directly to Google Cloud.

Exam format and domain weights

The standard exam is two hours long and has 50–60 multiple-choice and multiple-select questions. Google recommends six or more months of hands-on experience; this is preparation guidance, not an exam prerequisite. The official page currently lists English, Japanese, Spanish, and Portuguese, but not Chinese. Confirm language, price, and scheduling details when you register.

Exam domain	Main focus	Weight
1. Setting up a cloud solution environment	Projects, organization policies, IAM, APIs, quotas, and billing	~20%
2. Planning and configuring a cloud solution	Choosing compute, storage, database, and networking services	~17.5%
3. Deploying and implementing a cloud solution	Deploying compute, containers, data, and networking resources	~25%
4. Ensuring successful operation of a cloud solution	Operations, monitoring, logging, backups, and troubleshooting	~20%
5. Configuring access and security	IAM roles, service accounts, and least privilege	~17.5%

These weights come from the official standard exam guide. Domain 3 has the largest share, but do not focus on deployment alone: the exam also covers project and billing setup, operations, and secure access.

How to study the five domains

1. Set up a cloud solution environment

Understand how organizations, folders, projects, and resources fit together. Practice creating projects, enabling APIs, checking quotas, linking billing accounts, setting budget alerts, and applying organization policies to resources.

Common confusion: A project is a common boundary for managing resources and enabling APIs. A billing account handles payment and can be linked to multiple projects. For questions about who can create resources or where costs are charged, distinguish organization policies, IAM, and billing configuration.

2. Plan and configure a cloud solution

Questions may describe a workload and ask you to choose compute, data, or networking products. Start with how the workload runs: Compute Engine runs virtual machines, GKE manages Kubernetes workloads, Cloud Run runs containers, and Cloud Functions suits event-driven functions. Then consider data access patterns, availability, location, and cost when choosing services such as Cloud SQL, Firestore, Bigtable, Spanner, BigQuery, or Cloud Storage.

Common confusion: BigQuery is designed for analytics, not as a general-purpose transactional database. Cloud SQL fits common relational database workloads; Firestore and Bigtable have different data models and access patterns. Learn when to use each product instead of memorizing names.

3. Deploy and implement a cloud solution

Know how to deploy virtual machines, managed instance groups, GKE clusters, Cloud Run services, data products, and VPC networks. For networking, read subnet, route, and firewall configurations and understand when to use Cloud VPN or VPC Network Peering. The official outline also includes implementing resources with infrastructure-as-code tools such as Terraform.

Common confusion: GKE Autopilot and Standard clusters differ in how much node management you handle. Zonal and regional clusters also differ in their failure scope. Consider availability, operational effort, ingress, and scaling needs together before choosing a deployment.

4. Ensure successful operation of a cloud solution

Practice inspecting VM, GKE, and Cloud Run status; managing disk snapshots and images, node pools, application traffic, and scaling; and working with storage lifecycles, queries, backups, restores, and cost estimates. Networking and operations topics include expanding subnets, static IP addresses, Cloud DNS, Cloud NAT, Cloud Monitoring, and Cloud Logging.

Common confusion: Monitoring uses metrics and alerts to track resource health; Logging helps search and analyze log entries. When troubleshooting, use the symptoms to decide which metrics, logs, or configuration to inspect before choosing an action. Be comfortable checking service status and audit logs too.

5. Configure access and security

Understand the differences between basic, predefined, and custom IAM roles, and grant users or service accounts only the access they need. Practice assigning service accounts to resources, configuring service account impersonation, and using short-lived credentials when appropriate.

Common confusion: A user identity represents a person; a service account usually represents an application or workload. Broad project-level permissions may be convenient, but can exceed what an application needs. Check the principal, resource scope, and minimum required permissions.

Recommended study sequence

Learn the resource model. Understand how organizations, folders, projects, regions, zones, VPCs, and IAM relate.
Build a service selection map. Compare Compute Engine, GKE, Cloud Run, Cloud SQL, BigQuery, Firestore, Bigtable, and Cloud Storage by compute model, data type, and access pattern.
Follow the official learning path and do labs. Use both the console and gcloud to create projects, deploy services, configure access, inspect logs, and set alerts. Start with the Google Cloud Engineer learning path.
Review missed questions by scenario. Record the requirement, why other options do not fit, and which product or command you would use in practice.
Return to the official exam guide before test day. Check that you can explain each subtopic, select a service, and complete the basic operation.

If you already have cloud experience, spend less time on general concepts and more on Google Cloud product differences, IAM, project and billing structure, and hands-on tasks. If you are new to cloud, reserve more time for labs instead of relying on product-name flashcards.

Readiness checklist

Explain how organizations, folders, projects, and billing accounts relate.
Choose between Compute Engine, GKE, Cloud Run, and Cloud Functions for common workloads.
Distinguish common uses of Cloud SQL, Firestore, Bigtable, Spanner, BigQuery, and Cloud Storage.
Configure basic VPCs, firewall rules, subnets, Cloud NAT, DNS, and load balancing.
Use Monitoring, Logging, and audit logs to investigate common operational issues.
Choose suitable IAM roles and service account permissions for users and workloads.
Practice creating resources, deploying an application, checking status, viewing logs, and configuring access.

Frequently asked questions

Can I register without Google Cloud work experience?

Yes. There are no registration prerequisites, though Google recommends at least six months of hands-on experience. If you are new to the platform, use labs to build the operational skills the exam expects.

Is the exam available in Chinese?

The current standard exam page lists English, Japanese, Spanish, and Portuguese, but not Chinese. Check the official certification page and scheduling system for the available options when you register.

Which products should I learn first?

Start with projects and IAM, VPC, Compute Engine, Cloud Storage, Cloud SQL, BigQuery, GKE, and Cloud Run. Then use the official guide to cover Cloud Monitoring, Cloud Logging, Firestore, Bigtable, Spanner, Pub/Sub, and the remaining topics.

Keep practicing

Use scenario questions to practice choosing Google Cloud services and explaining why the alternatives do not fit. Start GCP-ACE practice.