GCP Prep
AssociateCloud EngineerDevOpsDeveloper

Associate Cloud Engineer

Associate Cloud Engineer certifies that you can deploy applications, monitor operations and manage enterprise solutions on Google Cloud. It is a practical exam: it assumes you have spent real hours in the console and on the command line, and it rewards muscle memory over theory.

Study GuidePractice Test

Overview

Associate Cloud Engineer is the certification we recommend to most people, most of the time. It is the one that changes what you can actually do at work rather than only what you can talk about.

The defining characteristic of the exam is that it is command-line literate. A meaningful share of questions show you a gcloud command and ask what it does, or describe an outcome and ask which command produces it. You cannot pass this reliably by reading alone.

The second characteristic is precision about IAM. Questions routinely offer four roles that all sound plausible and ask for the one granting least privilege that still works. This is the single highest-yield area to over-prepare.

Budget six to ten weeks. Spend at least a third of that time with a real project open, breaking and fixing things. The free tier is enough for almost everything you need to practise.

Level
Associate
Exam length
120 minutes
Questions
50–60 multiple choice and multiple select
Registration fee
USD $125 (plus tax where applicable)
Valid for
3 years
Delivery
Online proctored, or onsite at a test centre
Recommended experience (official)
Google recommends at least 6 months of hands-on experience building solutions with Google Cloud.

Our difficulty rating

3/5

Our recommended preparation

6–10weeks

Difficulty and preparation time are GCP Prep's own editorial assessments, not official figures.

Who Should Take This Certification?

  • Engineers moving into a cloud-facing role
  • System administrators and support engineers modernising their skills
  • Developers who deploy and operate what they build
  • Anyone who wants one certification that proves practical competence

Skills Covered

  • Setting up projects, billing accounts and the resource hierarchy
  • Deploying and managing Compute Engine, GKE, Cloud Run and App Engine workloads
  • Configuring VPC networks, firewall rules and load balancing
  • Choosing and configuring storage and database services
  • IAM roles, service accounts and least-privilege access
  • Monitoring, logging, alerting and basic troubleshooting
  • Fluency with the gcloud command line and Cloud Shell

Exam Topics

Weightings are shown only where they are officially published — we do not estimate them.

1.Setting up a cloud solution environment

~17.5%
  • Organisations, folders, projects and how policy inherits down the hierarchy
  • Billing accounts, budgets, alerts and exporting billing data
  • Installing and configuring the Cloud SDK and gcloud configurations
  • Enabling APIs and managing service accounts for a project

2.Planning and configuring a cloud solution

~17.5%
  • Estimating cost with the pricing calculator and choosing machine types
  • Selecting a compute option: virtual machines, containers or serverless
  • Choosing a storage class and a database product for a given workload
  • Planning networks, subnets and IP address ranges

3.Deploying and implementing a cloud solution

~25%
  • Launching Compute Engine instances, instance templates and managed instance groups
  • Creating GKE clusters and deploying workloads with kubectl
  • Deploying containers to Cloud Run and applications to App Engine
  • Configuring Cloud Storage buckets, lifecycle rules and access
  • Creating VPCs, subnets, firewall rules and load balancers
  • Deploying data solutions such as Pub/Sub topics and BigQuery datasets

4.Ensuring successful operation of a cloud solution

~20%
  • Managing instances: snapshots, images, autoscaling and resizing
  • Managing Kubernetes workloads, deployments and services
  • Working with Cloud Monitoring dashboards, alerting policies and uptime checks
  • Querying and exporting logs with Cloud Logging
  • Diagnosing and resolving common operational failures

5.Configuring access and security

~20%
  • Assigning predefined and custom IAM roles at the right level of the hierarchy
  • Creating and managing service accounts and their keys
  • Understanding basic, predefined and custom role differences
  • Viewing audit logs to answer who did what, and when

Preparation Roadmap

Our suggested order of study. Tick steps as you complete them — progress is saved in this browser.

Loading your progress…

Progress is saved in this browser

  1. Cloud fundamentals and the resource hierarchy

    Projects, folders, organisations, regions, zones and billing. Everything else in the exam assumes this is second nature.

  2. Compute

    Compute Engine first — machine types, images, snapshots, instance groups, autoscaling — then Cloud Run for the serverless model.

  3. Storage

    Cloud Storage classes, lifecycle policies and access control. Know exactly when Nearline beats Standard and when it does not.

  4. Networking

    VPCs, subnets, firewall rules, routes and the load balancer decision tree. Firewall rule precedence is reliably tested.

  5. IAM and security

    The highest-yield topic per hour spent. Predefined versus custom roles, service accounts, inheritance and least privilege.

  6. Databases and data

    Cloud SQL, Firestore, Bigtable and BigQuery — enough to choose correctly and deploy a basic instance.

  7. Kubernetes

    Create a cluster, deploy a workload, expose it, scale it. You need working kubectl fluency, not cluster-design depth.

  8. Monitoring, logging and operations

    Dashboards, alerting policies, uptime checks, log queries and log sinks.

  9. Command-line drilling

    Work through the common gcloud and kubectl commands until you can read one and predict its effect without thinking.

  10. Practice questions and timed mock exam

    Topic-by-topic practice, then full-length timed mocks. Track weak topics and go back to the console, not the notes.

Certification ready

Study Resources

Learning-hub topics that cover this certification's material, written by us.

Official documentation and training remain the authoritative source for exam content. Our material explains concepts in our own words and is designed to sit alongside it, not replace it.

Practice Questions & Mock Exam

We have 32 original questions relevant to this certification, each with an explanation of why the correct answer is correct and why every distractor is not.

Practice test

Work through questions at your own pace with immediate explanations.

Timed mock exam

Full-length, timed, with results and per-topic breakdown at the end.

Career Opportunities

Cloud Engineer

The role this exam is named for: provisioning, operating and supporting workloads day to day.

DevOps Engineer

A common entry point. Pair it with CI/CD and infrastructure-as-code experience to be competitive.

Site Reliability Engineer

The operations and monitoring portion maps directly onto SRE fundamentals.

Cloud Support Engineer

Breadth across products plus troubleshooting is exactly what support roles screen for.

Explore career resources

Frequently Asked Questions

How long does it take to prepare for Associate Cloud Engineer?
Six to ten weeks is realistic for someone with general IT experience but limited Google Cloud exposure. If you already work on the platform daily, three to five weeks of focused revision is usually enough. If you are entirely new to infrastructure, plan for three months and do not rush it.
Can I pass without hands-on practice?
It is possible but a bad trade. The exam tests recognition of commands and console workflows, and that knowledge does not survive being read once. Build things on the free tier — a VM behind a load balancer, a GKE deployment, a Cloud Run service — and the questions start answering themselves.
Is Associate Cloud Engineer worth it without work experience?
Yes, with a caveat: on its own it opens fewer doors than people hope. Paired with two or three projects you can talk through in detail, it is a strong signal for a junior cloud role. The certification gets you read; the projects get you hired.
Should I do Cloud Digital Leader first?
Only if you want a gentle on-ramp or need the business vocabulary for your job. It is not a prerequisite and it does not make Associate Cloud Engineer meaningfully easier. Most people can start here directly.
What trips people up most?
IAM role selection and firewall rule evaluation. Both have several plausible-looking answers where only one is correct, and both reward precision rather than general understanding.