ACE · Associate

Google Associate Cloud Engineer

Practise deploying, securing and operating workloads on Google Cloud.

Start Free

Your free account includes a full ACE practice exam.

ExamNova practice

Your first session

Questions: 50
Time limit: 120 min
Coverage: 5 domains

Practise, review your answers and see where to focus next.

Preview a question

Is ACE your next step?

For learners developing practical Google Cloud engineering skills. Associate Cloud Engineer connects environment setup, deployment, daily operations and access control rather than concentrating on one service.

Set up the environment

Understand projects, resource organisation, identity and the configuration needed before deploying a workload.

Choose and deploy a solution

Compare compute, storage, networking and managed-service options for the application’s requirements.

Operate with confidence

Work through monitoring, updates, service accounts and access decisions that keep a solution running.

Official certification guide ↗

What you’ll study

Explore the domains and topics in your ExamNova study path.

Setting Up a Cloud Solution Environment20% practice balance

Explore Setting Up a Cloud Solution Environment

Setting Up Cloud Projects and Accounts

Cloud Shell and Google Cloud CLI Basics
Google Cloud CLI Configurations and Component Updates
Google Cloud CLI Initialization and Active Project
IAM Conditions and Role Recommendations
IAM Grants and Cloud Identity Groups
Programmatic Project and Folder Management
Project Identity and Organization Policies
Resource Hierarchy and Inheritance
Service Account Authentication with Google Cloud CLI
kubectl and Google Cloud CLI Output Filtering

Managing Billing Configuration

Billing Accounts and Project Linking
Billing Currency and Account Settings
Billing Exports and Reporting
Billing Roles and Account Types
Budgets and Alert Thresholds

Planning and Configuring a Cloud Solution17.5% practice balance

Explore Planning and Configuring a Cloud Solution

Planning and Configuring Compute Resources

Accelerators and Autoscaling Planning
Compute Service Selection
Cloud Run and Event-Driven Architectures
Committed Use Discounts
Instance Templates and Instance Group Types
Machine Types and Custom Machine Types
Pricing Calculator Basics
Pricing Models and Rightsizing Recommendations
Sustained Use Discounts and Pricing Estimates

Planning and Configuring Data Storage Options

Cloud SQL High Availability and Read Replicas
Cloud Spanner and BigQuery Planning
Cloud Storage Classes and Use Cases
Persistent Disk and Local SSD Planning
Storage Transfer Service and Filestore

Planning and Configuring Network Resources

Cloud CDN and TLS Policies
Hybrid Connectivity and Internal Load Balancing
Load Balancer Selection
Shared VPC and Cloud NAT
TCO and Network Egress Cost Planning
VPC Modes, Subnets, and IP Ranges

Deploying and Implementing a Cloud Solution25% practice balance

Explore Deploying and Implementing a Cloud Solution

Deploying and Implementing Compute Engine Resources

Instance Templates and Group Customization
Snapshots and Managed Instance Groups
VM Creation and Custom Images

Deploying and Implementing Google Kubernetes Engine Resources

GKE Cluster Creation and Kubernetes Manifests
Helm and CI/CD for GKE

Deploying and Implementing Cloud Run and Cloud Functions Resources

Cloud Run and Eventarc Deployment

Deploying and Implementing Data Solutions

Cloud SQL High Availability and Private Connectivity
Cloud SQL Instance Creation and Connections
Cloud Storage Bucket and Object Commands
Signed URLs and Storage Event Notifications

Deploying and Implementing Networking Resources

Cross-Region Load Balancing and IAP
Firewall Policies and Static Routes
HTTP(S) Load Balancer Proxies
Load Balancer Health Checks
VPC Network and Subnet Creation

Implementing Resources Through Infrastructure as Code

Cloud Foundation Toolkit
Config Connector
Helm
IaC Validation and Drift Review
Terraform

Ensuring Successful Operation of a Cloud Solution20% practice balance

Explore Ensuring Successful Operation of a Cloud Solution

Managing Compute Engine Resources

Custom Machine Images
Disk Attachment and Serial Console Access
Managed Instance Group Scaling and Rolling Updates
VM Lifecycle and Snapshot Operations

Managing Google Kubernetes Engine Resources

GKE Node Auto-Provisioning and Node Pools

Managing Cloud Run Resources

Cloud Run Revision and Scaling Operations

Managing Storage and Database Solutions

Storage and Database Operations

Managing Networking Resources

VPC Subnet and Address Operations

Monitoring and Logging

Alerting, SLOs, and Notification Channels
Application Debugging and Network Analyzer
Application Performance Troubleshooting
Filtering Cloud Audit Logs
Logs Explorer and Filter Queries
Metrics Explorer, Dashboards, and Uptime Checks
Quota Limit Resolution
Quotas, Limits, and Service Health
Structured Logging, Log Metrics, and Routing
Third-Party Integrations, MQL, and AIOps
Trace, Profiler, and Error Diagnostics
VM Startup Troubleshooting

Configuring Access and Security17.5% practice balance

Explore Configuring Access and Security

Managing Identity and Access Management (IAM)

Admin Activity and Data Access Logs
Audit Log Exports and Real-Time Alerts
Audit Log Investigation
Audit Logs for Security and Compliance
Basic and Predefined IAM Roles
Custom Roles and Policy Inheritance
IAM Conditions and Audit Log Analysis
Managing IAM Policies with Google Cloud CLI
Policy Troubleshooter and IAM Recommender
System Event Logs and Log Filtering

Managing Service Accounts

Creating Service Accounts with Google Cloud CLI
Default Compute Engine Service Account
Service Account Impersonation and Keys
Service Account Key Automation
Workload Identity and Service Account User Role

Percentages show ExamNova’s practice balance. Consult the official guide for the vendor’s current exam outline.

Try focused practice

Explore a topic with sample questions and explanations.

Managing Identity and Access Management (IAM)Monitoring and Logging Setting Up Cloud Projects and Accounts Planning and Configuring Data Storage Options 3. Deploying and Implementing a Cloud Solution 1. Setting Up a Cloud Solution Environment 4. Ensuring Successful Operation of a Cloud Solution 2. Planning and Configuring a Cloud Solution 5. Configuring Access and Security

Try a question before you start.

Read the scenario. Consider your answer, then reveal the reasoning.

Google recommends hands-on Google Cloud experience. Use question explanations to identify which platform tasks to revisit in your own learning.

A company has a containerized HTTP service and wants a serverless deployment model without managing Kubernetes clusters. Which Google Cloud option should the company use?

A regional persistent disk without a VM
Cloud Run
Cloud Router only
A firewall rule with no target

Show answer and explanations

A regional persistent disk without a VM — A persistent disk stores block data but does not run a containerized HTTP service by itself.

Cloud Run — Cloud Run runs containerized applications in a managed serverless environment.

Cloud Router only — Cloud Router exchanges routes and does not host application containers.

A firewall rule with no target — A firewall rule controls traffic but does not provide a serverless runtime.

A clearer way to prepare.

One place to practise, understand your results and plan the next session.

Practise with purpose

Start with your free exam. Explore Exam, Endless and Custom practice modes as you build your study routine.

Understand the answer

Review the reasoning behind your answers and return to the decisions that need another look.

Find your next focus

Use domain-level performance and readiness to see strengths, gaps and areas you have yet to assess.

Put it into practice.

Explore hands-on tasks connected to ACE. These are real Labs from the catalogue.

Lab

Grant the export job what it needs and nothing else

Rewrite bucket-policy.json so it grants exactly the access the review approved: the nightly export job creates objects in the bucket, the analytics group reads and lists them, and nobody else has anything. Scope each grant to this bucket and write each principal with its type. Check who currently depends on the public grant before removing it.

medium · About 12 min

Lab

Get the orders rollout unstuck

Update orders.yaml so the Service reaches the orders Pods and a rollout replaces them without losing capacity or sending traffic to a Pod before it is ready. Keep the three-replica capacity and the workload identity already configured.

medium · About 18 min

Make ACE your next step.

Create your free account. Start practising.

Start Free