All 5 domains
19 official sections
80–105 hrs suggested study
-
Domain 01
~20%
This section covers setting up the Google Cloud foundation: creating the resource hierarchy, applying organization policies, granting IAM roles, managing Cloud Identity, enabling APIs and quotas, and configuring billing accounts, budgets and exports.
Inside this domain
- Setting up cloud projects and accounts
- Managing billing configuration
Watch for Per-project policy
- Sections
- 2
Read the domain guide →
-
Domain 02
~17.5%
This section covers choosing the right Google Cloud services for a workload: selecting compute options, picking data storage and database products, and planning network resources such as load balancing and service tiers.
Inside this domain
- Planning and configuring compute resources
- Planning and configuring data storage options
- Planning and configuring network resources
Watch for VM for serverless
- Sections
- 3
Read the domain guide →
-
Domain 03
~25%
This is the largest, most hands-on GCP ACE section. It covers actually deploying resources: Compute Engine instances and managed instance groups, GKE clusters and workloads, Cloud Run and Functions, data products, VPC networking, and infrastructure as code.
Inside this domain
- Deploying and implementing Compute Engine resources
- Deploying and implementing Google Kubernetes Engine resources
- Deploying and implementing Cloud Run and Cloud Functions resources
- Deploying and implementing data solutions
- and 2 more sections
Watch for Standalone VMs for scaling
- Sections
- 6
Read the domain guide →
-
Domain 04
~20%
This section covers operating deployed resources: managing Compute Engine, GKE and Cloud Run, managing storage and databases, managing networking, and monitoring and logging with Cloud Monitoring and Cloud Logging.
Inside this domain
- Managing Compute Engine resources
- Managing Google Kubernetes Engine resources
- Managing Cloud Run resources
- Managing storage and database solutions
- and 2 more sections
Watch for Image for backup
- Sections
- 6
Read the domain guide →
-
Domain 05
~17.5%
This section covers securing access to Google Cloud: managing Identity and Access Management with the role types and custom roles, and managing service accounts including least-privilege use, impersonation and short-lived credentials.
Inside this domain
- Managing Identity and Access Management (IAM)
- Managing service accounts
Watch for Basic role for a task
- Sections
- 2
Read the domain guide →
Domain names, weights and sections come from Google Cloud's official outline (Associate Cloud Engineer exam guide (current)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.