ACE logo
Focused certification exam prep
Start practice

ACE Exam Domains 2026: Complete Guide to All 4 Content Areas

TL;DR
  • ACE has exactly four domains: setup, planning/implementation, operations, and access/security.
  • The exam runs 50-60 questions in 2 hours, all multiple choice or multiple select.
  • The current guide adds Gemini Cloud Assist, Gemini CLI, and Application Design Center to existing domain topics.
  • The exam costs $125 USD plus tax, with a $75 renewal option available closer to expiration.

Domain Overview and Weighting

Google Cloud's Associate Cloud Engineer exam guide organizes every scored item into four content areas. Unlike some vendor exams that publish exact percentage weightings per domain, Google groups tasks into these four buckets without assigning fixed percentages, which means candidates need to treat all four as roughly equal priorities rather than gambling on one being "worth more" than another. This article breaks down each domain in detail, and if you want a single-domain deep dive, we've published standalone guides for Domain 1, Domain 2, Domain 3, and Domain 4.

The four domains as defined in the current exam guide are:

  • Domain 1: Setting up a cloud solution environment
  • Domain 2: Planning and implementing a cloud solution
  • Domain 3: Ensuring the successful operation of a cloud solution
  • Domain 4: Configuring access and security

Each domain maps to a phase of the cloud engineer's actual workflow: get the project and billing structure ready, build the workloads, keep them running, and lock down who can touch what. That workflow framing matters more than memorizing a domain list - Google's scenario-based questions often blend two domains in a single item, so understanding the lifecycle helps you reason through ambiguous answer choices.

Why Domain Boundaries Blur: A question about deploying a Cloud Run service with a custom service account touches Domain 2 (implementation) and Domain 4 (access) simultaneously. Don't study domains in isolation - study the workflows that cross them.

Domain 1: Setting Up a Cloud Solution Environment

Domain 1 covers everything that happens before you deploy a single workload: organizing resources, setting up billing, and provisioning the initial project structure. This is foundational, administrative knowledge that examiners expect you to execute quickly since it underlies every later task.

Domain 1 Core Tasks

Candidates must understand the mechanics of setting up cloud projects and provisioning access before any workload configuration begins.

  • Creating projects, assigning billing accounts, and understanding the resource hierarchy (organization, folder, project)
  • Managing billing budgets, alerts, and export configurations
  • Installing and configuring the Cloud SDK, gcloud CLI, and Cloud Shell for day-to-day administration
  • Provisioning users and groups via Cloud Identity, and understanding how IAM roles attach at each hierarchy level

Newer exam updates have layered in Gemini Cloud Assist and Gemini CLI as tools you may be asked about in the context of environment setup - specifically how these AI-assisted interfaces help scaffold resources or troubleshoot configuration without replacing your understanding of the underlying gcloud commands. Expect questions that test whether you know when a console action, a CLI command, or an infrastructure-as-code approach is the right tool.

Domain 2: Planning and Implementing a Cloud Solution

Domain 2 is the largest practical domain in terms of raw topic count. It covers actually building the solution: compute, storage, networking, and increasingly, application deployment patterns backed by tools like Application Design Center and Cloud Run functions.

Domain 2 Core Tasks

This domain tests hands-on deployment decisions across compute, storage, and networking services.

  • Choosing between Compute Engine, GKE, Cloud Run, and Cloud Run functions based on workload requirements
  • Configuring storage: Cloud Storage bucket classes and lifecycle rules, Cloud SQL, Spanner, and Firestore basics
  • Setting up VPC networks, subnets, firewall rules, and load balancing
  • Deploying applications using Application Design Center and understanding Agent Runtime concepts on the Gemini Enterprise Agent Platform

This is the domain where hands-on lab time pays off most directly. Reading about the differences between regional and multi-regional storage classes is very different from actually configuring lifecycle policies in a console or via gcloud. If you're still building your study plan around this domain specifically, our ACE Study Guide 2026 walks through lab sequencing in more detail.

Key Takeaway

Spend more lab hours than reading hours on Domain 2 - it rewards muscle memory with the console and CLI far more than definitions.

Domain 3: Ensuring the Successful Operation of a Cloud Solution

Domain 3 shifts from "build it" to "keep it running." This is operations: monitoring, logging, managing compute instance groups, and maintaining Kubernetes workloads once they're live.

Domain 3 Core Tasks

Operational competence is tested through scenario questions about scaling, monitoring, and maintaining existing deployments.

  • Managing Compute Engine resources: instance groups, autoscaling, and load balancer health checks
  • Managing GKE resources: node pools, workloads, and basic troubleshooting of pod failures
  • Using Cloud Monitoring and Cloud Logging to set up alerts, dashboards, and log-based metrics
  • Managing storage and database maintenance tasks, including backups and basic performance tuning

Observability topics have expanded here as Google Cloud's monitoring stack matures - expect questions that expect you to interpret a dashboard or log query rather than just define what Cloud Monitoring does. This domain rewards candidates who have actually broken something in a sandbox project and then had to diagnose why.

Domain 4: Configuring Access and Security

Domain 4 is compact but unforgiving. IAM logic, service accounts, and security fundamentals show up throughout the exam, not just in questions explicitly labeled as access-related - this domain's concepts bleed into nearly every other domain's scenario questions.

Domain 4 Core Tasks

Security and access questions test precise understanding of IAM roles, service accounts, and the principle of least privilege.

  • Understanding IAM primitive, predefined, and custom roles, and how policies bind at organization, folder, and project levels
  • Creating and managing service accounts, including key management and impersonation patterns
  • Configuring Cloud Identity users and groups for access control
  • Applying security best practices across networking (firewall scoping) and storage (bucket-level permissions)

Many candidates underestimate Domain 4 because it feels conceptually simple compared to Domain 2's breadth. In practice, IAM questions are often the trickiest on the exam because Google tests edge cases: what happens when a user has a role at the folder level but a more restrictive deny at the project level, for example. Precision matters more than breadth here.

Security Threads Everywhere: Roughly a quarter of questions across all domains touch IAM or service accounts in some way, even when the question is nominally about compute or storage. Master Domain 4 early so it reinforces everything else.

How the Domains Show Up in Actual Questions

Understanding domain names is only half the battle - you also need to understand the question format they're delivered in. ACE questions are exclusively multiple choice and multiple select, delivered across 50-60 questions in a 2-hour window. Google does not publish which questions are scored versus unscored, so treat every item as if it counts.

Most questions are scenario-based: a short paragraph describing a business requirement or technical constraint, followed by four or five answer choices where more than one option is technically plausible but only one satisfies the stated constraint (cost, latency, compliance, or existing architecture). This format means memorizing service names and definitions is not sufficient - you need to practice selecting the best answer among several correct-sounding ones.

DomainPrimary FocusTypical Question Style
Domain 1Environment setup, billing, IAM basicsDirect configuration and tool-selection questions
Domain 2Compute, storage, networking, app deploymentScenario-based service-selection questions
Domain 3Monitoring, scaling, maintenanceDiagnostic and troubleshooting scenarios
Domain 4IAM, service accounts, securityPrecision-based policy and permission questions

If you're trying to gauge how tough this format actually is relative to other associate-level cloud exams, our How Hard Is the ACE Exam? Complete Difficulty Guide 2026 breaks down the format challenges in more depth, and our ACE Pass Rate 2026 article discusses what the available data suggests about outcomes.

Mapping the Domains to a Study Schedule

Rather than studying domains in the order Google lists them, it often makes sense to sequence your preparation by dependency. Domain 4 concepts (IAM, service accounts) underpin so much of Domains 2 and 3 that reviewing access fundamentals early pays dividends later.

Week 1

Domain 1 + Domain 4 Fundamentals

  • Set up a free-tier project and configure billing alerts
  • Practice IAM role assignment at project and folder levels
  • Install and configure gcloud CLI and Cloud Shell
Week 2-3

Domain 2 Deep Dive

  • Deploy workloads across Compute Engine, GKE, and Cloud Run
  • Configure Cloud Storage lifecycle rules and Cloud SQL instances
  • Build a basic VPC with firewall rules and a load balancer
Week 4

Domain 3 Operations

  • Set up Cloud Monitoring dashboards and alerting policies
  • Practice autoscaling configuration and troubleshooting failed pods
  • Review log-based metrics and basic backup procedures
Week 5

Integration and Practice Exams

  • Run full-length timed practice tests mixing all four domains
  • Revisit weak-domain topics identified from practice scores
  • Review service account key management edge cases

This sequencing is only a starting framework - the exact pace depends on your existing familiarity with Google Cloud. For a more detailed week-by-week breakdown tailored to different experience levels, see the full ACE Study Guide 2026: How to Pass on Your First Attempt.

Registration, Fees, and Retake Mechanics

Domain content is only useful if you understand how the exam itself is administered. The ACE exam is registered through Google Cloud Certification's CM Connect/CertMetrics system, and you can take it either online-proctored from home or onsite-proctored at a Pearson VUE testing center.

  • Standard exam fee: $125 USD plus applicable tax
  • Renewal exam fee: $75 USD plus tax, available once you're within the renewal eligibility window
  • Duration: 2 hours for the standard exam; the renewal exam is a shorter 1 hour with 20 questions
  • Prerequisites: none formally required, though Google recommends 6+ months of hands-on Google Cloud experience
  • Validity: 3 years from the date of passing
  • Attempt limits: up to 4 attempts within a 2-year period, with mandatory waiting periods after failed attempts

Renewal eligibility opens 180 days before your certification expires, and you can renew through the full standard exam, the shorter renewal exam, or eligible Google Skills renewal options where available. For a complete breakdown of every cost consideration - including retake fees and how they stack up against other associate-level certifications - see ACE Certification Cost 2026: Complete Pricing Breakdown.

No Open-Book Allowance: There is no official open-book policy for ACE. Strict ID verification, workspace scanning, and exam-security rules apply for both online-proctored and onsite delivery, so plan your test environment accordingly if testing remotely.

Who Hires for These Skills

The four domains map fairly directly onto job responsibilities for cloud support engineers, junior DevOps engineers, and infrastructure generalists working in Google Cloud environments. Employers hiring for these roles typically want someone who can independently provision a project (Domain 1), deploy a workload (Domain 2), keep it healthy (Domain 3), and not accidentally expose it to the internet (Domain 4) - the certification is essentially a proxy for "can be trusted with day-to-day cloud operations without heavy supervision."

If you're trying to understand how this credential fits into a broader career path, our ACE Jobs guide covers common titles and responsibilities, and ACE Salary Guide 2026: Complete Earnings Analysis discusses compensation considerations. For a broader look at whether the investment of time and the $125 fee makes sense for your situation, read Is the ACE Certification Worth It? Complete ROI Analysis 2026.

Before diving into domain-specific prep, it's worth reviewing what the credential actually represents at a foundational level. Our explainer articles on What Is ACE?, ACE Meaning, and What Is ACE Certification? are good starting points if you're new to the ecosystem, alongside our general ACE Certification overview and ACE Training resource roundup.

Once you've mapped the domains against your own experience, the most efficient next step is running full-length timed simulations that mix all four content areas the way the real exam does. You can start practicing with realistic scenario questions on our practice test platform, and revisit the main practice site as you track domain-by-domain accuracy through your prep.

Frequently Asked Questions

Are the four ACE domains equally weighted on the exam?

Google does not publish fixed percentage weightings for each domain, so candidates should prepare all four areas with roughly equal seriousness rather than assuming one is scored more heavily.

Which domain is hardest for most candidates?

Domain 4 (access and security) is often underestimated because it appears conceptually simple but tests precise IAM edge cases, while Domain 2 is the broadest in raw topic count and requires the most hands-on lab time.

Do the domains include newer AI tooling like Gemini Cloud Assist?

Yes, the current exam guide has been updated to include Gemini Cloud Assist, Gemini CLI, Application Design Center, and Agent Runtime concepts within the relevant setup and implementation domains.

How many questions come from each domain?

Google does not publish an exact question count per domain. The exam includes 50-60 total questions across all four domains within a 2-hour session.

Can I retake the exam if I fail on one domain?

Yes. Candidates get up to 4 attempts within a 2-year period, though waiting periods apply after failed attempts, and each retake covers all four domains again, not just the weak area.

Ready to pass your ACE exam?

Put this into practice with free ACE questions across every exam domain.