ACE Is a Working-Operator Exam
The Google Cloud Associate Cloud Engineer (ACE) exam is not a vocabulary test for cloud products. Google's current exam guide describes an Associate Cloud Engineer as someone who deploys and secures applications, services, and infrastructure and performs common platform tasks "supported by AI tooling." The exam asks whether you can set up a cloud solution environment, deploy workloads, keep them running, and configure access securely. If your prep is only watching videos, you will feel exposed when questions ask what you would actually click, configure, monitor, or fix.
The standard ACE exam is 2 hours long with 50-60 multiple-choice and multiple-select questions, costs $125 plus applicable tax, has no prerequisites, and is offered in English, Japanese, Spanish, and Portuguese. Google recommends 6+ months of hands-on Google Cloud experience. Since March 2, 2026, every Google Cloud certification exam has been delivered through Pearson VUE, either online-proctored or at a test center.
What Changed for ACE in 2026
Two changes make most older ACE prep advice stale.
Delivery moved from Kryterion Webassessor to Pearson VUE. Google's official transition notice set February 22, 2026 as the last Kryterion testing day, blacked out scheduling from February 23 through March 1, and opened Pearson VUE delivery with a first available test date of March 2, 2026. If a course or forum post tells you to "register on Webassessor," it predates the switch. You now schedule through Pearson VUE and choose the online-proctored OnVUE exam or a test center (search for "Google Cloud" in the Pearson VUE catalog).
The exam guide was refreshed into four weighted sections and now includes AI tooling. Google states that its certification exams are being updated to reflect product updates announced at Google Cloud Next '26. The current ACE exam guide tests Gemini Cloud Assist, the Gemini CLI, Agent Runtime on Gemini Enterprise Agent Platform (formerly Vertex AI Agent Engine), Cloud Hub, and Database Center alongside the classic operator topics. It also names newer platform pieces that older prep materials skip: Cloud Next Generation Firewall (Cloud NGFW) policies, Hyperdisk, AlloyDB, Google Cloud Managed Service for Apache Kafka, NetApp Volumes, Managed Lustre, and infrastructure-as-code tooling such as Terraform, Helm, Config Connector, and Fabric FAST.
If your study materials are built on the retired five-domain outline (17.5/17.5/25/20/20), they no longer match the exam guide. Re-map your plan to the current four sections below.
The Current Blueprint: Four Sections With Weights
| Section | Weight | What it covers in practice |
|---|---|---|
| 1. Setting up a cloud solution environment | ~20% | Resource hierarchy, organizational policies, Cloud Identity users and groups, enabling APIs, quotas, billing accounts, budgets and exports, Workforce Identity Federation |
| 2. Planning and implementing a cloud solution | ~30% | Choosing compute (Compute Engine, GKE, Cloud Run, Cloud Run functions, Agent Runtime), storage and data products, VPCs and Cloud NGFW rules, load balancers, Network Service Tiers, IaC tooling |
| 3. Ensuring the successful operation of a cloud solution | ~30% | Managing compute, storage, and network resources; snapshots; GKE node pools and autoscaling; Cloud Monitoring alerts, Cloud Logging, Ops Agent, Managed Service for Prometheus, Active Assist, Cloud Hub |
| 4. Configuring access and security | ~20% | IAM policies and role types, custom roles, service accounts, impersonation, short-lived credentials, Workload Identity Federation |
Planning-implementation plus operations is roughly 60% of the exam. That is why hands-on lab time beats another documentation read-through: most of the test rewards people who have actually deployed, broken, and fixed workloads.
Build Your Prep Around Tasks, Not Services
A service list can become endless: Compute Engine, GKE, Cloud Run, Cloud Run functions, Cloud Storage, Cloud SQL, BigQuery, Spanner, VPC, Cloud NAT, Cloud DNS, Cloud Monitoring, Cloud Logging, IAM, Secret Manager, and more. The better frame is task-based.
Can you create a project, enable APIs, assign least privilege, deploy an app, expose it safely, monitor it, view logs, investigate quota or permission issues, and choose the right managed service for a simple requirement? If yes, you are closer to exam-ready than someone who can recite product names without using them.
A 6-Week Hands-On Plan
| Week | Lab focus | Review focus |
|---|---|---|
| 1 | Projects, billing, IAM, Cloud Shell, gcloud | Resource hierarchy and roles |
| 2 | Compute Engine, instance groups, load balancing basics | VM operations and access |
| 3 | Cloud Run, Cloud Run functions, GKE basics | Choosing compute by workload |
| 4 | Cloud Storage classes, Cloud SQL, BigQuery basics | Storage and data fit |
| 5 | VPC, firewall and Cloud NGFW rules, Cloud NAT | Network troubleshooting |
| 6 | Monitoring, logging, backup, mixed timed practice | Operational response |
Match lab time to the weights: weeks 2-5 map to the two ~30% sections, so protect that time first. Use the free tier and temporary labs carefully, and destroy resources after practice so cost does not become a distraction.
IAM Is Where Many Candidates Lose Easy Points
ACE questions often turn on whether a user, group, or service account has the right role at the right scope. Learn the difference between project-level access, resource-level access, service account identity, and service account impersonation. Avoid broad basic roles unless the scenario clearly permits them, and know when a custom role is the intended answer.
The current guide also expects the modern credential patterns: short-lived service account credentials, Workload Identity Federation for workloads outside Google Cloud, and Workforce Identity Federation for human users. A useful exam heuristic: if an answer choice involves creating and downloading a service account key, look hard for an option that attaches a service account or uses impersonation or federation instead. Key files are a last resort.
When a question says a workload cannot access another service, ask whether the issue is API enablement, IAM binding, service account assignment, network path, or product configuration.
Hands-On Drills That Beat Video-Only Prep
Build one disposable project and run a complete operator loop. Create the project, attach billing if needed, enable APIs, create a least-privilege service account, deploy one workload, expose it with the appropriate access path, inspect logs, create a basic alerting policy, and then delete the resources. Repeat the same loop with a different compute option so you can explain why Cloud Run, Compute Engine, or GKE fits the scenario.
For IAM, practice failure diagnosis. Give a service account too little access, watch the failure, then fix the binding at the narrowest useful scope. ACE distractors often sound plausible because several layers can block access. Train yourself to test API enablement, IAM role, service account attachment, network route, firewall rule, and product-specific configuration before guessing.
Five ACE Traps That Cost Real Points
- Storage class economics. Nearline, Coldline, and Archive carry 30-day, 90-day, and 365-day minimum storage durations. Questions give you an access pattern and expect the cheapest class that fits it, not just the coldest one.
- Service account keys as a reflex. Attached service accounts, impersonation, and Workload Identity Federation are almost always the intended answer over downloadable JSON keys.
- Basic roles under pressure. Owner, Editor, and Viewer feel convenient in scenarios, but least privilege with predefined roles is what the exam rewards.
- Spot VMs everywhere. Spot VMs cut cost only for fault-tolerant, interruptible work. If the scenario needs steady availability, they are the distractor.
- One load balancer for everything. Know which load balancer fits HTTP(S) versus TCP/UDP traffic and global versus regional scope, and how Network Service Tiers change the picture.
Scoring, Renewal, and Scheduling
Google does not publish a passing score for ACE, so do not anchor your readiness to a guessed cutoff; the "about 70%" figures on forums are unofficial estimates. Use section-level performance, hands-on confidence, and timed mixed sets instead. If you can only pass questions immediately after watching a service-specific lesson, you are not yet operator-ready.
Plan beyond the first pass, because the certification is valid for 3 years and the renewal rules now matter:
- Renewal window. You can start renewing 180 days before your certification's inactive date.
- Renewal exam. A shorter renewal exam - 20 multiple-choice and multiple-select questions in 1 hour for $75 plus tax, offered in English and Japanese - extends the certification by 3 years. No score report is provided for the renewal exam.
- Continuing education. ACE is one of the few Google Cloud certifications (with Cloud Digital Leader, Professional Cloud Architect, and Professional Data Engineer) that can also be renewed by completing designated courses or skill badges on Google Skills during the certification's final active year; this path extends validity by 1 year.
- Path lock. For ACE (and PDE/CDL), once you make your first renewal attempt you cannot switch between the shorter renewal exam and the standard exam. Google Skills continuing education is never mandatory - renewing by the standard exam always remains available.
For scheduling, register through Pearson VUE and pick the online-proctored option or a test center. If you test online, run the system check early and prepare your ID and testing space per the OnVUE rules so logistics do not disrupt exam day.
Official Google ACE Sources
Use the Google Cloud Associate Cloud Engineer certification page, the current exam guide PDF, the renewal exam guide, and Google's official sample questions linked from the certification page to confirm current objectives, delivery, cost, length, and experience recommendations before you schedule.
Practice as a Cloud Engineer
Use practice questions as diagnostic data, not a score-chasing game. After each timed block, tag every miss with one primary cause: content gap, vocabulary gap, careless reading, scenario judgment, or pacing. A repeated section miss needs a study block and a repeated lab. A pacing miss needs timed drills. A careless miss needs a slow-down habit on question stems.
Final Two-Week Readiness Plan
Two weeks out, stop measuring progress by pages completed and start measuring repeatable performance. In week one, alternate a weak-section lab, a mixed timed set, and a short closed-book recall session where you write the four sections, their weights, and your personal trap list from memory. In the final week, reduce new material, rework every question you missed twice, and re-run the operator loop end to end in under an hour.
You are ready when you can explain all four sections without reading the guide, finish timed sets without rushing the final questions, and predict your miss patterns before checking the results. Passing ACE is less about a secret resource and more about a tight loop: official exam guide, focused labs, timed practice, miss analysis, and targeted repair.
Buy on Amazon
Take courses on Udemy
Learning path on Pluralsight