- Domain Overview and Weighting
- Domain 1: Setting Up a Cloud Solution Environment
- Domain 2: Planning and Implementing a Cloud Solution
- Domain 3: Ensuring the Successful Operation of a Cloud Solution
- Domain 4: Configuring Access and Security
- How the Domains Show Up in Actual Questions
- Mapping the Domains to a Study Schedule
- Registration, Fees, and Retake Mechanics
- Who Hires for These Skills
- Frequently Asked Questions
- ACE has exactly four domains: setup, planning/implementation, operations, and access/security.
- The exam runs 50-60 questions in 2 hours, all multiple choice or multiple select.
- The current guide adds Gemini Cloud Assist, Gemini CLI, and Application Design Center to existing domain topics.
- The exam costs $125 USD plus tax, with a $75 renewal option available closer to expiration.
Domain Overview and Weighting
Google Cloud's Associate Cloud Engineer exam guide organizes every scored item into four content areas. Unlike some vendor exams that publish exact percentage weightings per domain, Google groups tasks into these four buckets without assigning fixed percentages, which means candidates need to treat all four as roughly equal priorities rather than gambling on one being "worth more" than another. This article breaks down each domain in detail, and if you want a single-domain deep dive, we've published standalone guides for Domain 1, Domain 2, Domain 3, and Domain 4.
The four domains as defined in the current exam guide are:
- Domain 1: Setting up a cloud solution environment
- Domain 2: Planning and implementing a cloud solution
- Domain 3: Ensuring the successful operation of a cloud solution
- Domain 4: Configuring access and security
Each domain maps to a phase of the cloud engineer's actual workflow: get the project and billing structure ready, build the workloads, keep them running, and lock down who can touch what. That workflow framing matters more than memorizing a domain list - Google's scenario-based questions often blend two domains in a single item, so understanding the lifecycle helps you reason through ambiguous answer choices.
Domain 1: Setting Up a Cloud Solution Environment
Domain 1 covers everything that happens before you deploy a single workload: organizing resources, setting up billing, and provisioning the initial project structure. This is foundational, administrative knowledge that examiners expect you to execute quickly since it underlies every later task.
Domain 1 Core Tasks
Candidates must understand the mechanics of setting up cloud projects and provisioning access before any workload configuration begins.
- Creating projects, assigning billing accounts, and understanding the resource hierarchy (organization, folder, project)
- Managing billing budgets, alerts, and export configurations
- Installing and configuring the Cloud SDK, gcloud CLI, and Cloud Shell for day-to-day administration
- Provisioning users and groups via Cloud Identity, and understanding how IAM roles attach at each hierarchy level
Newer exam updates have layered in Gemini Cloud Assist and Gemini CLI as tools you may be asked about in the context of environment setup - specifically how these AI-assisted interfaces help scaffold resources or troubleshoot configuration without replacing your understanding of the underlying gcloud commands. Expect questions that test whether you know when a console action, a CLI command, or an infrastructure-as-code approach is the right tool.
Domain 2: Planning and Implementing a Cloud Solution
Domain 2 is the largest practical domain in terms of raw topic count. It covers actually building the solution: compute, storage, networking, and increasingly, application deployment patterns backed by tools like Application Design Center and Cloud Run functions.
Domain 2 Core Tasks
This domain tests hands-on deployment decisions across compute, storage, and networking services.
- Choosing between Compute Engine, GKE, Cloud Run, and Cloud Run functions based on workload requirements
- Configuring storage: Cloud Storage bucket classes and lifecycle rules, Cloud SQL, Spanner, and Firestore basics
- Setting up VPC networks, subnets, firewall rules, and load balancing
- Deploying applications using Application Design Center and understanding Agent Runtime concepts on the Gemini Enterprise Agent Platform
This is the domain where hands-on lab time pays off most directly. Reading about the differences between regional and multi-regional storage classes is very different from actually configuring lifecycle policies in a console or via gcloud. If you're still building your study plan around this domain specifically, our ACE Study Guide 2026 walks through lab sequencing in more detail.
Key Takeaway
Spend more lab hours than reading hours on Domain 2 - it rewards muscle memory with the console and CLI far more than definitions.
Domain 3: Ensuring the Successful Operation of a Cloud Solution
Domain 3 shifts from "build it" to "keep it running." This is operations: monitoring, logging, managing compute instance groups, and maintaining Kubernetes workloads once they're live.
Domain 3 Core Tasks
Operational competence is tested through scenario questions about scaling, monitoring, and maintaining existing deployments.
- Managing Compute Engine resources: instance groups, autoscaling, and load balancer health checks
- Managing GKE resources: node pools, workloads, and basic troubleshooting of pod failures
- Using Cloud Monitoring and Cloud Logging to set up alerts, dashboards, and log-based metrics
- Managing storage and database maintenance tasks, including backups and basic performance tuning
Observability topics have expanded here as Google Cloud's monitoring stack matures - expect questions that expect you to interpret a dashboard or log query rather than just define what Cloud Monitoring does. This domain rewards candidates who have actually broken something in a sandbox project and then had to diagnose why.
Domain 4: Configuring Access and Security
Domain 4 is compact but unforgiving. IAM logic, service accounts, and security fundamentals show up throughout the exam, not just in questions explicitly labeled as access-related - this domain's concepts bleed into nearly every other domain's scenario questions.
Domain 4 Core Tasks
Security and access questions test precise understanding of IAM roles, service accounts, and the principle of least privilege.
- Understanding IAM primitive, predefined, and custom roles, and how policies bind at organization, folder, and project levels
- Creating and managing service accounts, including key management and impersonation patterns
- Configuring Cloud Identity users and groups for access control
- Applying security best practices across networking (firewall scoping) and storage (bucket-level permissions)
Many candidates underestimate Domain 4 because it feels conceptually simple compared to Domain 2's breadth. In practice, IAM questions are often the trickiest on the exam because Google tests edge cases: what happens when a user has a role at the folder level but a more restrictive deny at the project level, for example. Precision matters more than breadth here.
How the Domains Show Up in Actual Questions
Understanding domain names is only half the battle - you also need to understand the question format they're delivered in. ACE questions are exclusively multiple choice and multiple select, delivered across 50-60 questions in a 2-hour window. Google does not publish which questions are scored versus unscored, so treat every item as if it counts.
Most questions are scenario-based: a short paragraph describing a business requirement or technical constraint, followed by four or five answer choices where more than one option is technically plausible but only one satisfies the stated constraint (cost, latency, compliance, or existing architecture). This format means memorizing service names and definitions is not sufficient - you need to practice selecting the best answer among several correct-sounding ones.
| Domain | Primary Focus | Typical Question Style |
|---|---|---|
| Domain 1 | Environment setup, billing, IAM basics | Direct configuration and tool-selection questions |
| Domain 2 | Compute, storage, networking, app deployment | Scenario-based service-selection questions |
| Domain 3 | Monitoring, scaling, maintenance | Diagnostic and troubleshooting scenarios |
| Domain 4 | IAM, service accounts, security | Precision-based policy and permission questions |
If you're trying to gauge how tough this format actually is relative to other associate-level cloud exams, our How Hard Is the ACE Exam? Complete Difficulty Guide 2026 breaks down the format challenges in more depth, and our ACE Pass Rate 2026 article discusses what the available data suggests about outcomes.
Mapping the Domains to a Study Schedule
Rather than studying domains in the order Google lists them, it often makes sense to sequence your preparation by dependency. Domain 4 concepts (IAM, service accounts) underpin so much of Domains 2 and 3 that reviewing access fundamentals early pays dividends later.
Domain 1 + Domain 4 Fundamentals
- Set up a free-tier project and configure billing alerts
- Practice IAM role assignment at project and folder levels
- Install and configure gcloud CLI and Cloud Shell
Domain 2 Deep Dive
- Deploy workloads across Compute Engine, GKE, and Cloud Run
- Configure Cloud Storage lifecycle rules and Cloud SQL instances
- Build a basic VPC with firewall rules and a load balancer
Domain 3 Operations
- Set up Cloud Monitoring dashboards and alerting policies
- Practice autoscaling configuration and troubleshooting failed pods
- Review log-based metrics and basic backup procedures
Integration and Practice Exams
- Run full-length timed practice tests mixing all four domains
- Revisit weak-domain topics identified from practice scores
- Review service account key management edge cases
This sequencing is only a starting framework - the exact pace depends on your existing familiarity with Google Cloud. For a more detailed week-by-week breakdown tailored to different experience levels, see the full ACE Study Guide 2026: How to Pass on Your First Attempt.
Registration, Fees, and Retake Mechanics
Domain content is only useful if you understand how the exam itself is administered. The ACE exam is registered through Google Cloud Certification's CM Connect/CertMetrics system, and you can take it either online-proctored from home or onsite-proctored at a Pearson VUE testing center.
- Standard exam fee: $125 USD plus applicable tax
- Renewal exam fee: $75 USD plus tax, available once you're within the renewal eligibility window
- Duration: 2 hours for the standard exam; the renewal exam is a shorter 1 hour with 20 questions
- Prerequisites: none formally required, though Google recommends 6+ months of hands-on Google Cloud experience
- Validity: 3 years from the date of passing
- Attempt limits: up to 4 attempts within a 2-year period, with mandatory waiting periods after failed attempts
Renewal eligibility opens 180 days before your certification expires, and you can renew through the full standard exam, the shorter renewal exam, or eligible Google Skills renewal options where available. For a complete breakdown of every cost consideration - including retake fees and how they stack up against other associate-level certifications - see ACE Certification Cost 2026: Complete Pricing Breakdown.
Who Hires for These Skills
The four domains map fairly directly onto job responsibilities for cloud support engineers, junior DevOps engineers, and infrastructure generalists working in Google Cloud environments. Employers hiring for these roles typically want someone who can independently provision a project (Domain 1), deploy a workload (Domain 2), keep it healthy (Domain 3), and not accidentally expose it to the internet (Domain 4) - the certification is essentially a proxy for "can be trusted with day-to-day cloud operations without heavy supervision."
If you're trying to understand how this credential fits into a broader career path, our ACE Jobs guide covers common titles and responsibilities, and ACE Salary Guide 2026: Complete Earnings Analysis discusses compensation considerations. For a broader look at whether the investment of time and the $125 fee makes sense for your situation, read Is the ACE Certification Worth It? Complete ROI Analysis 2026.
Before diving into domain-specific prep, it's worth reviewing what the credential actually represents at a foundational level. Our explainer articles on What Is ACE?, ACE Meaning, and What Is ACE Certification? are good starting points if you're new to the ecosystem, alongside our general ACE Certification overview and ACE Training resource roundup.
Once you've mapped the domains against your own experience, the most efficient next step is running full-length timed simulations that mix all four content areas the way the real exam does. You can start practicing with realistic scenario questions on our practice test platform, and revisit the main practice site as you track domain-by-domain accuracy through your prep.
Frequently Asked Questions
Google does not publish fixed percentage weightings for each domain, so candidates should prepare all four areas with roughly equal seriousness rather than assuming one is scored more heavily.
Domain 4 (access and security) is often underestimated because it appears conceptually simple but tests precise IAM edge cases, while Domain 2 is the broadest in raw topic count and requires the most hands-on lab time.
Yes, the current exam guide has been updated to include Gemini Cloud Assist, Gemini CLI, Application Design Center, and Agent Runtime concepts within the relevant setup and implementation domains.
Google does not publish an exact question count per domain. The exam includes 50-60 total questions across all four domains within a 2-hour session.
Yes. Candidates get up to 4 attempts within a 2-year period, though waiting periods apply after failed attempts, and each retake covers all four domains again, not just the weak area.
- ACE Domain 1: Setting up a cloud solution environment - Complete Study Guide 2026
- ACE Domain 2: Planning and implementing a cloud solution - Complete Study Guide 2026
- ACE Domain 3: Ensuring the successful operation of a cloud solution - Complete Study Guide 2026
- ACE Domain 4: Configuring access and security - Complete Study Guide 2026