Google GCP-ACE (Associate Cloud Engineer) Certification Exam Syllabus
The Google GCP-ACE exam preparation guide is designed to provide candidates with necessary information about the Associate Cloud Engineer exam. It includes exam summary, sample questions, practice test, objectives and ways to interpret the exam objectives to enable candidates to assess the types of questions-answers that may be asked during the Google Cloud Platform - Associate Cloud Engineer (GCP-ACE) exam.
It is recommended for all the candidates to refer the GCP-ACE objectives and sample questions provided in this preparation guide. The Google Associate Cloud Engineer certification is mainly targeted to the candidates who want to build their career in Associate domain and demonstrate their expertise. We suggest you to use practice exam listed in this cert guide to get used to with exam environment and identify the knowledge areas where you need more work prior to taking the actual Google Associate Cloud Engineer exam.
Google GCP-ACE Exam Summary:
| Exam Name | Google Associate Cloud Engineer |
| Exam Code | GCP-ACE |
| Exam Price | $125 USD |
| Duration | 120 minutes |
| Number of Questions | 50-60 multiple choice and multiple select questions |
| Passing Score | Pass / Fail (Approx 70%) |
| Recommended Training / Books | Google Cloud training |
| Schedule Exam | Google CertMetrics |
| Sample Questions | Google GCP-ACE Sample Questions |
| Recommended Practice | Google Cloud Platform - Associate Cloud Engineer (GCP-ACE) Practice Test |
Google Cloud Engineer Syllabus:
| Section | Objectives |
|---|---|
Setting up a cloud solution environment (~20% of the exam) |
|
| Setting up cloud projects and accounts. Considerations include: |
- Creating a resource hierarchy - Applying organizational policies to the resource hierarchy - Granting members Identity and Access Management (IAM) roles within a project - Managing users and groups in Cloud Identity (manually and automated) - Enabling APIs within projects - Provisioning and setting up products in Google Cloud Observability - Assessing quotas and requesting increases - Setting up standalone organizations - Setting up cloud networking - Verifying product availability across geographical locations (e.g., regions, zones) - Configuring Cloud Asset Inventory and using Gemini Cloud Assist to analyze resources - Configuring Workforce Identity Federation |
| Managing billing configuration. Considerations include: |
- Creating one or more billing accounts - Linking projects to a billing account - Establishing billing budgets and alerts - Setting up billing exports |
Planning and implementing a cloud solution (~30% of the exam) |
|
| Planning and implementing compute resources. Considerations include: |
- Selecting appropriate compute choices for a given workload (e.g., Compute Engine, Google Kubernetes Engine [GKE], Cloud Run, Cloud Run functions, Agent Runtime on Gemini Enterprise Agent Platform [formerly Vertex AI Agent Engine]) - Launching a compute instance (e.g., availability policy, SSH keys) - Choosing the appropriate storage for Compute Engine (e.g., zonal Persistent Disk, regional Persistent Disk, Google Cloud Hyperdisk) - Creating an autoscaled managed instance group by using an instance template - Configuring OS Login - Configuring VM Manager - Using Spot VM instances and custom machine types - Installing and configuring the command-line interface (CLI) for Kubernetes (kubectl) - Deploying a GKE cluster with different configurations (e.g., GKE Autopilot, regional clusters, private clusters) - Deploying a containerized application to GKE - Deploying an application to serverless compute platforms, including for the processing of Google Cloud events (e.g., Pub/Sub events, Cloud Storage object change notification events, Eventarc) - Identifying whether to use GPUs or TPUs |
| Planning and implementing storage and data solutions. Considerations include: |
- Choosing and deploying data products (e.g., Cloud SQL, BigQuery, Firestore, Spanner, Bigtable, AlloyDB, Dataflow, Pub/Sub, Google Cloud Managed Service for Apache Kafka, Memorystore) - Choosing and deploying storage products (e.g., Cloud Storage, Filestore, Google Cloud NetApp Volumes, Google Cloud Managed Lustre) and Cloud Storage options (e.g., Standard, Nearline, Coldline, Archive) - Loading data (e.g., command-line upload, load data from Cloud Storage, Storage Transfer Service) - Maintaining multi-region redundancy across data solutions |
| Planning and implementing networking resources. Considerations include: |
- Creating a VPC with subnets (e.g., custom mode VPC, Shared VPC, VPC Network Peering) - Creating and applying VPC firewalls rules and Cloud Next Generation Firewall (Cloud NGFW) policies with ingress and egress rules and attributes (e.g., action, source, destination, targets, protocols, ports) - Using Tags (e.g., secure Tags) and service accounts in Cloud NGFW policy rules - Establishing network connectivity (e.g., Cloud VPN, VPC Network Peering, Cloud Interconnect) - Choosing and deploying load balancers - Differentiating Network Service Tiers |
| Planning and implementing resources using tooling. Considerations include: |
- Infrastructure as code tooling (e.g., Fabric FAST, Config Connector, Terraform, Helm) - AI-assisted planning and implementation (e.g., Gemini CLI, Google Antigravity, Gemini Cloud Assist, Application Design Center) |
Ensuring the successful operation of a cloud solution (~30% of the exam) |
|
| Managing compute resources. Considerations include: |
- Remotely connecting to a Compute Engine instance - Viewing current running Compute Engine instances - Working with snapshots and images (e.g., create, view, and delete images or snapshots; schedule a snapshot) - Viewing current running GKE cluster inventory (e.g., nodes, Pods, Services) - Configuring GKE to access Artifact Registry - Working with GKE node pools (e.g., add, edit, or remove a node pool; autoscaling node pool) - Working with Kubernetes resources (e.g., Pods, Services, StatefulSets) - Managing horizontal and vertical Pod autoscaling configurations - Managing GKE Autopilot Pod resource requests - Deploying new versions of a Cloud Run application - Adjusting application traffic splitting parameters (e.g., Cloud Run, Cloud Run functions, GKE) - Configuring autoscaling for a Cloud Run application - Attaching GPUs and TPUs - Deploying an agent to Agent Runtime on Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine) - Managing notebooks in Gemini Enterprise Agent Platform Workbench (formerly Vertex AI Workbench) and BigQuery - Managing developer environments (e.g., Cloud Workstations) |
| Managing storage and data solutions. Considerations include: |
- Managing and securing objects in Cloud Storage buckets - Setting object lifecycle management policies for Cloud Storage buckets - Executing queries to retrieve data from data instances (e.g., Cloud SQL, BigQuery, Bigtable, Spanner, Firestore, AlloyDB) - Estimating costs of data storage resources - Backing up and restoring database instances (e.g., Cloud SQL, Firestore, Spanner, AlloyDB, Bigtable) - Reviewing job status (e.g., Dataflow, BigQuery) - Using Database Center to manage the Google Cloud database fleet - Configuring customer-managed encryption keys (CMEK) |
| Managing networking resources. Considerations include: |
- Resizing a subnet’s IPv4 address range - Reserving static external or internal IP addresses - Adding custom static routes in a VPC - Using Cloud DNS and Cloud NAT - Managing VPC firewall rules and Cloud NGFW policies |
| Monitoring and logging. Considerations include: |
- Creating Cloud Monitoring alerts based on resource metrics - Creating and ingesting Cloud Monitoring custom metrics (e.g., from applications or logs) - Configuring audit logs (e.g., VPC Flow Logs, audit logs, firewall logs) - Exporting logs to external systems (e.g., on-premises, BigQuery) - Configuring log buckets, log analytics, and log routers - Viewing and filtering logs in Cloud Logging - Viewing specific log message details in Cloud Logging - Using cloud diagnostic tools (e.g., Cloud Trace, Cloud Profiler, Query Insights, index advisor) to investigate an application issue - Viewing the Personalized Service Health dashboard - Configuring and deploying Ops Agent - Deploying Google Cloud Managed Service for Prometheus - Using Gemini Cloud Assist for Cloud Monitoring - Using Active Assist to optimize resource utilization - Using Cloud Hub to monitor active events and application health data |
Configuring access and security (~20% of the exam) |
|
| Managing IAM. Considerations include: |
- Viewing and creating IAM policies - Attaching roles and policy inheritance in the Organization hierarchy - Managing the various role types and defining custom IAM roles |
| Managing service accounts. Considerations include: |
- Creating service accounts, including Google-managed service accounts - Using service accounts in IAM policies with minimum permissions - Assigning service accounts to resources - Managing IAM permissions of a service account - Managing service account impersonation - Creating and managing short-lived service account credentials - Using a Google Cloud service account with a GKE application - Provisioning Workload Identity Federation |
- GCP-ACE Associate Cloud Engineer |
- GCP-ACE Prep Guide |
- GCP-ACE |
- Google GCP-ACE Study Guide |
- Google Associate Cloud Engineer Cert Guide |
- GCP-ACE Books |
- GCP-ACE Exam Cost |
- GCP-ACE Passing Score |
- GCP-ACE Syllabus |
- Associate Cloud Engineer Exam Books |
- Google Cloud Platform - Associate Cloud Engineer (GCP-ACE) |
- Associate Cloud Engineer Certification Syllabus |
- Associate Cloud Engineer Exam Prep Guide |
- Associate Cloud Engineer Exam Price |
- Associate Cloud Engineer Study Guide |
- Associate Cloud Engineer Training |
- Google Associate Certification
