Associate Cloud Engineer Exam Notes
The Google Cloud Associate Cloud Engineer certification is aimed at engineers who deploy applications, monitor operations and maintain cloud infrastructure day to day. The exam is a proctored, multiple-choice and multiple-select test taken at a test centre or online; Google's certification page lists the current format, duration and fee, and our ACE study plan page walks through registration and a week-by-week revision schedule.
Google structures the exam guide in five sections, and so do we. Section 1 covers setting up environments: hierarchy, billing, identities and tools. Section 2 covers planning: choosing compute, storage, database and network designs and pricing them. Section 3 covers deploying and implementing: actually building on GKE, Cloud Run, Compute Engine and the data services. Section 4 covers operations: logging, monitoring and observability. Section 5 covers access and security: IAM, service accounts, encryption and perimeters.
How to use these notes
Work through the sections in order if you are new: the exam assumes the hierarchy and IAM knowledge from Sections 1 and 5 in almost every scenario. If you are revising, go straight to the services you use least — the comparison pages and the section quizzes are the fastest way to find your gaps. Every notes page ends with the traps that the exam sets around that service, and every section ends with a ten-question quiz with full explanations.
What the questions feel like
ACE questions are short scenarios, not definitions. A typical item gives you a workload, a constraint — cost, latency, a compliance rule, a team that must not get more access than it needs — and four plausible actions, of which one fits every constraint and the others each break one. That is why these notes spend so much space on comparisons and traps: the exam is testing judgement between similar services far more than recall of any single service. Hands-on time matters for the same reason; an hour in a free-tier project is worth several hours of rereading, and our study plan page turns the notes into a six-week schedule that mixes both.
The five ACE sections
Section 1 of the Associate Cloud Engineer exam guide covers everything that happens before real workloads run: creating and organising projects, setting up billing, establishing identities, and learning the tools you will use every day.
Section 2 is the planning section: given a business requirement, can you choose the right compute, storage, database and network design, and estimate what it will cost? It carries one of the largest weights in the exam guide, and it rewards candidates who can compare services against each other rather than merely describe them..
Section 3 turns plans into running systems.
Section 4 is about keeping systems healthy once they are live: collecting and reading logs with Cloud Logging, building metrics, dashboards and alerts in Cloud Monitoring, tracing latency and errors with the observability tools, and using Cloud Audit Logs and Cloud Asset Inventory to answer 'who changed what, and when?'.
Section 5 covers configuring access and security: IAM roles and policies, service accounts and keys, organisation policy constraints, encryption with Cloud KMS, secrets with Secret Manager, and the perimeter and data-protection services — Cloud Armor, Identity-Aware Proxy, VPC Service Controls and Sensitive Data Protection..
Study aid disclaimer: Cloud Cert Notes is an independent educational study aid. It is not affiliated with, endorsed by, or sponsored by Google, Microsoft, Amazon, Oracle, or Alibaba. Google Cloud, Associate Cloud Engineer, and Cloud Digital Leader are trademarks of Google LLC; all other certification names and product names are trademarks of their respective owners. Always confirm service details against the official provider documentation before sitting an exam.