Passmates Start free
Written by a Google Cloud Certified Associate Cloud Engineer

Pass the Google Cloud Associate Cloud Engineer exam with an AI tutor

Passmates is an AI tutoring platform for the Google Cloud Associate Cloud Engineer (ACE) certification. It tracks your score across all four official exam domains, finds the domain you are weakest in, and drills you on it with scenario questions written by a certified engineer.

$20 USD per month, cancel anytime. Everything on this page, the sample questions and the full explanations, is free and requires no account.

Start the Associate Cloud Engineer course Try 6 free questions
Exam length
2 hours
Questions
50–60
Exam fee
$125 USD
Valid for
3 years

What the Associate Cloud Engineer certification is worth

The Associate Cloud Engineer is the recommended entry point into Google Cloud. It proves you can deploy applications, monitor operations, and manage enterprise solutions using the console and the command line. Here is what earning it changes for you.

Why start with the Associate Cloud Engineer

It is the fastest route to a recognized Google Cloud credential, and it builds the hands-on foundation every later exam assumes.

Proof you can operate Google Cloud

Validates that you can deploy and manage compute, storage, networking, and IAM using both the Cloud Console and the gcloud command line, not just talk about them.

The foundation for Professional certs

The Professional Data Engineer and Machine Learning Engineer exams assume the operational basics this exam covers, so ACE is the natural first step before specializing.

Fastest credential to earn

With some hands-on experience most candidates are exam-ready in three to five weeks, so it is a quick, concrete win on your resume.

Career value

A recognized associate credential opens the door to cloud roles and signals verified, hands-on skill to hiring managers.

A verified first step

  • Entry into cloud roles. A common requirement or strong signal for junior and associate cloud, DevOps, and support positions.
  • Independent verification. A third party confirms your Google Cloud skills, which carries more weight than a self-reported resume line.
  • A clear next step. It positions you to specialize with a Professional certification once the fundamentals are proven.

Where it leads

ACE is the base of the Google Cloud certification path.

Recommended next step
Professional Data Engineer or ML Engineer
Both build directly on the operational foundation this exam certifies.

Google Certified perks

Passing also unlocks the official benefits Google extends to its certified community.

Digital credential and verification

A verified digital badge (via Credly) to display on your LinkedIn profile and resume.

Exclusive certified community

Access to the Google Cloud Certified Directory and alumni networks for job boards and networking.

Certified swag and event access

Exclusive certified merchandise and discounts or access to select Google Cloud events.

Free Associate Cloud Engineer sample questions

These six questions are drawn from the Passmates bank and published in full: question, options, correct answer, and the reasoning for why each distractor fails. No account, no email, no paywall.

Reviewed September 2026 against the current Google Cloud exam guide.

Configuring access and security Scenario · Medium

A developer needs to read objects from one specific Cloud Storage bucket and nothing else. Following least privilege, how should you grant the access?

  1. AGrant roles/storage.objectViewer on that specific bucket.
  2. BGrant roles/storage.admin at the project level.
  3. CAdd the developer to the project Editor basic role.
  4. DMake the bucket public by granting allUsers read access.
Show answer & explanationHide answer & explanation
Correct answer: A

Least privilege means the narrowest predefined role on the smallest scope. roles/storage.objectViewer grants read-only object access, and granting it on the one bucket confines it to exactly what the developer needs.

Why the others fail
  • B grants full administrative control over every bucket in the project, far more than read on one bucket.
  • C basic Editor is a broad, legacy role across the whole project and is the opposite of least privilege.
  • D exposes the data to the entire internet, a security incident rather than a grant to one developer.
Planning and implementing Scenario · Medium

You need a managed Kubernetes cluster but you do not want to manage node infrastructure, sizing, or upgrades, and you want to pay for the resources your pods request. Which option fits best?

  1. AGKE in Autopilot mode.
  2. BGKE Standard with node pools you size and manage.
  3. CA Compute Engine managed instance group running kubeadm.
  4. DCloud Run.
Show answer & explanationHide answer & explanation
Correct answer: A

GKE Autopilot is a mode of GKE where Google provisions and manages the nodes, handles upgrades, and bills you for the CPU and memory your running pods request. That matches all three constraints: a real Kubernetes cluster, no node management, and per-pod-resource billing.

Why the others fail
  • B is Kubernetes but you own node sizing, scaling, and upgrades, which the requirement rules out.
  • C is fully self-managed Kubernetes on raw VMs, the most operational option of all.
  • D runs containers but is not a Kubernetes cluster, so it does not meet the stated need.
Ensuring successful operation Scenario · Medium

A Compute Engine managed instance group serving a web app must add VMs when average CPU is high and remove them when it drops, with no manual intervention. What do you configure?

  1. AEnable autoscaling on the managed instance group based on CPU utilization.
  2. BManually resize the group each morning based on yesterday's traffic.
  3. CPut a load balancer in front and leave the group at a fixed size.
  4. DReplace the group with one larger VM.
Show answer & explanationHide answer & explanation
Correct answer: A

A managed instance group supports autoscaling driven by a metric such as average CPU utilization. It adds instances when the target is exceeded and removes them when load falls, with no manual step, which is exactly the requirement.

Why the others fail
  • B is manual and cannot react to load within the day.
  • C balances traffic across a fixed fleet but never changes the number of VMs.
  • D scales up once and cannot scale in or out with demand, and it reintroduces a single point of failure.
Setting up the environment Scenario · Easy

You frequently switch between two projects on the command line and want to keep separate settings (project, region, account) for each without editing config every time. What is the cleanest approach?

  1. ACreate a named gcloud configuration per project and activate the one you need.
  2. BReinstall the Cloud SDK each time you switch projects.
  3. CUse a separate Google account for each project.
  4. DChange the project's billing account before each session.
Show answer & explanationHide answer & explanation
Correct answer: A

gcloud configurations let you store multiple named sets of properties (account, project, region, zone) and switch between them with a single activate command. That is exactly the tool for juggling several projects on one machine. You can also pass --project per command for a one-off override.

Why the others fail
  • B reinstalling changes nothing about which project is active and wastes time.
  • C separate accounts are unnecessary; one account can hold access to many projects.
  • D billing accounts are unrelated to which project your CLI targets.
Planning and implementing Scenario · Hard

An application needs a relational database with strong consistency, SQL, and horizontal scalability across regions for a global user base. Which Google Cloud service should you choose?

  1. ACloud Spanner.
  2. BCloud SQL.
  3. CFirestore.
  4. DBigQuery.
Show answer & explanationHide answer & explanation
Correct answer: A

Cloud Spanner is the managed relational database built for exactly this combination: SQL, strong consistency, and horizontal scale across regions worldwide. It is the answer whenever a scenario pairs relational plus global plus horizontal scalability.

Why the others fail
  • B Cloud SQL is a managed regional relational database and does not scale horizontally across regions the way the requirement needs.
  • C Firestore is a NoSQL document database, not relational SQL.
  • D BigQuery is an analytics warehouse for large-scale queries, not a transactional application database.
Ensuring successful operation Scenario · Medium

You need to be alerted when a Compute Engine VM's memory usage stays above 90 percent. What do you need to put in place?

  1. AInstall the Ops Agent on the VM, then create a Cloud Monitoring alerting policy on the memory metric.
  2. BDo nothing extra; memory alerts work out of the box for every VM.
  3. CEnable VPC Flow Logs on the subnet.
  4. DTurn on Cloud Audit Logs for Compute Engine.
Show answer & explanationHide answer & explanation
Correct answer: A

Guest memory utilization is not collected by default. You install the Ops Agent to send memory (and other guest) metrics to Cloud Monitoring, then create an alerting policy with a 90 percent threshold and a notification channel. Both steps are required.

Why the others fail
  • B is the common trap: CPU and network are available without an agent, but guest memory is not, so nothing would fire.
  • C VPC Flow Logs record network traffic, not VM memory.
  • D Cloud Audit Logs record who did what through the API, not resource utilization.

The full Passmates bank holds 1,050 scenario questions for this exam, all with explanations at this depth, plus four full-length timed mock exams.

Unlock the full bank for $20/mo

How Passmates prepares you

  1. STEP 1

    Diagnostic, not a syllabus

    Your first session is ten scenario questions that locate your weakest domain. You start studying the gap, not chapter one.

  2. STEP 2

    Domain-level scoring

    Every answer updates a separate score for each of the four official domains, so progress is legible instead of a single vague percentage.

  3. STEP 3

    Adaptive drilling

    The tutor pulls questions weighted toward your weak domains and explains why each distractor fails, which is where the exam is actually won.

  4. STEP 4

    Readiness score

    Course completion, practice scores, and study consistency combine into a predicted pass likelihood, so you book the exam on evidence.

Frequently asked questions

Direct answers about the exam and about Passmates. Each answer stands alone, so it can be quoted without the surrounding page.

How hard is the Google Cloud Associate Cloud Engineer exam?

It is a two-hour exam of roughly 50 to 60 questions. Google does not publish a passing score, so most candidates target 70 percent or higher on realistic practice tests before booking. Compared with the Professional exams it tests breadth and hands-on operation of Google Cloud (the console, the gcloud command line, IAM) more than deep architecture judgment, so the fastest way to prepare is to actually run the tasks, not just read about them.

How long does it take to prepare for the Associate Cloud Engineer exam?

Candidates with some hands-on Google Cloud experience typically need three to five weeks at a few hours per week. If cloud is new to you, plan for eight to ten weeks and spend most of that time in the console and the gcloud command line rather than on question banks, because the exam assumes you have performed these operations yourself.

What are the domains of the Associate Cloud Engineer exam?

There are four: setting up a cloud solution environment; planning and implementing a cloud solution; ensuring successful operation of a cloud solution; and configuring access and security. Passmates scores you on each domain separately so you can see which one is holding your readiness score down.

How much does Passmates cost, and can I cancel?

The Associate Cloud Engineer course is $20 USD per month, billed through Stripe. There is no setup fee and no minimum term. You can cancel any course at any time from your billing page, and you keep full access until the end of the period you have already paid for. Cancelling one course does not affect any other course on your account.

Does the Associate Cloud Engineer certification expire?

Yes. The Associate Cloud Engineer certification is valid for three years from the date it is awarded. To stay certified you retake the exam before it expires; Google typically opens recertification ahead of the expiry date.

Should I take the Associate Cloud Engineer before a Professional exam?

It is not a formal prerequisite, but it is the recommended starting point. The Associate Cloud Engineer builds the hands-on foundation (projects, IAM, compute, storage, networking, monitoring) that the Professional Data Engineer and Professional Machine Learning Engineer exams assume you already have.

Is Passmates affiliated with Google?

No. Passmates is an independent study platform with no affiliation with, endorsement by, or sponsorship from Google LLC. Our questions are written by certified engineers based on Google's published exam guide; they are not real exam questions, and any provider claiming to sell real exam content is violating Google's exam terms.

Start the Associate Cloud Engineer course

$20 USD per month. Billed through Stripe. Cancel any time from your billing page, and you keep access until the end of the period you have already paid for.

No credit card required to try the first three tutoring sessions.

Create your account Read the free questions again