Length: 2 hours
Registration fee: $125 (plus tax where applicable)
Languages: English, Japanese, Spanish, Portuguese
Exam format: 50-60 multiple choice and multiple select questions
Exam delivery method:
a. Take the online-proctored exam from a remote location
b. Take the onsite-proctored exam at a testing center
Prerequisites: None
Recommended experience: 6+ months hands-on experience with Google Cloud
Certification Renewal / Recertification: Candidates must recertify in order to maintain their certification status. Effective October 1, 2022 the Associate Cloud Engineer certification is valid for three years from the date of certification. Recertification is accomplished by retaking the exam during the recertification eligibility time period and achieving a passing score. You may attempt recertification starting 60 days prior to your certification expiration date.
Associate Cloud Engineer Certification exam guide
An Associate Cloud Engineer deploys and secures applications, services, and infrastructure, monitors operations of multiple projects, and maintains enterprise solutions to ensure that they meet target performance metrics. This individual has experience working with public clouds and on-premises solutions. They are able to perform common platform-based tasks to maintain and scale one or more deployed solutions that leverage Google-managed or self-managed services on Google Cloud.
Examkingdom Google Associate-Cloud-Engineer Exam pdf
Best Google Associate-Cloud-Engineer Downloads, Google Associate-Cloud-Engineer Dumps at Certkingdom.com
Section 1: Setting up a cloud solution environment (~20% of the exam)
1.1 Setting up cloud projects and accounts. Considerations include:
● Creating a resource hierarchy
● Applying organizational policies to the resource hierarchy
● Granting members IAM roles within a project
● Managing users and groups in Cloud Identity (manually and automated)
● Enabling APIs within projects
● Provisioning and setting up products in Google Cloud Observability
● Assessing quotas and requesting increases
1.2 Managing billing configuration. Considerations include:
● Creating one or more billing accounts
● Linking projects to a billing account
● Establishing billing budgets and alerts
● Setting up billing exports
Section 2: Planning and configuring a cloud solution (~17.5% of the exam)
2.1 Planning and configuring compute resources. Considerations include:
● Selecting appropriate compute choices for a given workload (e.g., Compute Engine, Google Kubernetes Engine, Cloud Run, Cloud Functions)
● Using Spot VM instances and custom machine types as appropriate
2.2 Planning and configuring data storage options. Considerations include:
● Product choice (e.g., Cloud SQL, BigQuery, Firestore, Spanner, Bigtable)
● Choosing storage options (e.g., zonal Persistent Disk, regional Persistent Disk, Standard, Nearline, Coldline, Archive)
2.3 Planning and configuring network resources. Considerations include:
● Load balancing
● Availability of resource locations in a network
● Network Service Tiers
Section 3: Deploying and implementing a cloud solution (~25% of the exam)
3.1 Deploying and implementing Compute Engine resources. Considerations include:
● Launching a compute instance (e.g., assign disks, availability policy, SSH keys)
● Creating an autoscaled managed instance group by using an instance template
● Configuring OS Login
● Configuring VM Manager
3.2 Deploying and implementing Google Kubernetes Engine resources. Considerations include:
● Installing and configuring the command line interface (CLI) for Kubernetes (kubectl)
● Deploying a Google Kubernetes Engine cluster with different configurations (e.g., Autopilot, regional clusters, private clusters, GKE Enterprise)
● Deploying a containerized application to Google Kubernetes Engine
3.3 Deploying and implementing Cloud Run and Cloud Functions resources. Considerations include:
● Deploying an application
● Deploying an application for receiving Google Cloud events (e.g., Pub/Sub events,
Cloud Storage object change notification events, Eventarc)
● Determining where to deploy an application by using Cloud Run (fully managed), Cloud Run for Anthos, or Cloud Functions
3.4 Deploying and implementing data solutions. Considerations include:
● Deploying data products (e.g., Cloud SQL, Firestore, BigQuery, Spanner, Pub/Sub, Dataflow, Cloud Storage, AlloyDB)
● Loading data (e.g., command line upload, load data from Cloud Storage, Storage Transfer Service)
3.5 Deploying and implementing networking resources. Considerations include:
● Creating a VPC with subnets (e.g., custom mode VPC, Shared VPC)
● Creating ingress and egress firewall rules and policies (e.g., IP subnets, network tags, service accounts)
● Peering external networks (e.g., Cloud VPN, VPC Network Peering)
3.6 Implementing resources through infrastructure as code. Considerations include:
● Infrastructure as code tooling (e.g., Cloud Foundation Toolkit, Config Connector, Terraform, Helm)
Section 4: Ensuring successful operation of a cloud solution (~20% of the exam)
4.1 Managing Compute Engine resources. Considerations include:
● Remotely connecting to the instance
● Viewing current running VM inventory (e.g., instance IDs, details)
● Working with snapshots (e.g., create a snapshot from a VM, view snapshots, delete a snapshot, schedule a snapshot)
● Working with images (e.g., create an image from a VM or a snapshot, view images, delete an image)
4.2 Managing Google Kubernetes Engine resources. Considerations include:
● Viewing current running cluster inventory (e.g., nodes, Pods, Services)
● Configuring Google Kubernetes Engine to access Artifact Registry
● Working with node pools (e.g., add, edit, or remove a node pool)
● Working with Kubernetes resources (e.g., Pods, Services, Statefulsets)
● Managing Horizontal and Vertical autoscaling configurations
4.3 Managing Cloud Run resources. Considerations include:
● Deploying new versions of an application
● Adjusting application traffic splitting parameters
● Setting scaling parameters for autoscaling instances
4.4 Managing storage and database solutions. Considerations include:
● Managing and securing objects in Cloud Storage buckets
● Setting object lifecycle management policies for Cloud Storage buckets
● Executing queries to retrieve data from data instances (e.g., Cloud SQL, BigQuery, Spanner, Firestore, AlloyDB)
● Estimating costs of data storage resources
● Backing up and restoring database instances (e.g., Cloud SQL, Firestore)
● Reviewing job status (e.g., Dataflow, BigQuery)
4.5 Managing networking resources. Considerations include:
● Adding a subnet to an existing VPC
● Expanding a subnet to have more IP addresses
● Reserving static external or internal IP addresses
● Working with Cloud DNS and Cloud NAT
4.6 Monitoring and logging. Considerations include:
● Creating Cloud Monitoring alerts based on resource metrics
● Creating and ingesting Cloud Monitoring custom metrics (e.g., from applications or logs)
● Exporting logs to external systems (e.g., on-premises, BigQuery)
● Configuring log buckets, log analytics, and log routers
● Viewing and filtering logs in Cloud Logging
● Viewing specific log message details in Cloud Logging
● Using cloud diagnostics to research an application issue
● Viewing Google Cloud status
● Configuring and deploying Ops Agent
● Deploying Managed Service for Prometheus
● Configuring audit logs
Section 5: Configuring access and security (~17.5% of the exam)
5.1 Managing Identity and Access Management (IAM). Considerations include:
● Viewing and creating IAM policies
● Managing the various role types and defining custom IAM roles (e.g., basic, predefined, custom)
5.2 Managing service accounts. Considerations include:
● Creating service accounts
● Using service accounts in IAM policies with minimum permissions
● Assigning service accounts to resources
● Managing IAM of a service account
● Managing service account impersonation
● Creating and managing short-lived service account credentials
Exam overview
Step 1: Get real world experience
Before attempting the ACE exam, we recommend that you get 6+ months hands-on experience with Google Cloud.
Get started with free usage of over 20 products, including BigQuery and Compute Engine, up to monthly limits. Plus, new Google Cloud customers get $300 in free credits on signup.
Step 2: Understand what’s on the exam
The ACE exam guide contains a complete list of topics that may be included on the exam. Review the exam guide to determine if your skills align with the topics on the exam.
Step 3: Round out your skills with training
Prepare for the exam by following the Cloud Engineer learning path. Explore online training, in-person classes, hands-on labs, and other resources from Google Cloud.
Start preparing
Prepare for the exam with Googlers and certified experts. Get valuable exam tips and tricks for the Associate Cloud Engineer exam and hear insights from industry experts.
Sign up
Complete the “Preparing for the Associate Cloud Engineer Examination” course to familiarize yourself with the exam materials and to do a final check for exam readiness.
Go to course
Step 4: Review the sample questions
Familiarize yourself with the format of exam questions by reviewing example content that may be covered on the Associate Cloud Engineer exam.
Step 5: Schedule an exam
Register and select the option to take the exam remotely or at a nearby testing center.
Review exam terms and conditions and data sharing policies.
Sample Question and Answers
QUESTION 1
Every employee of your company has a Google account. Your operational team needs to manage a
large number of instances on Compute Engine. Each member of this team needs only administrative
access to the servers. Your security team wants to ensure that the deployment of credentials is
operationally efficient and must be able to determine who accessed a given instance.
What should you do?
A. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
B. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the oecompute.osAdminLogin role to the Google group corresponding to this team.
D. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
Answer: C
QUESTION 2
You need to create a custom VPC with a single subnet. The subnets range must be as large as possible. Which range should you use?
A. .00.0.0/0
B. 10.0.0.0
C. 172.16.0.0
D. 192.168.0.0
Answer: B
QUESTION 3
You want to select and configure a cost-effective solution for relational data on Google Cloud
Platform. You are working with a small set of operational data in one geographic location. You need
to support point-in-time recovery. What should you do?
A. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.
B. Select Cloud SQL (MySQL). Select the create failover replicas option.
C. Select Cloud Spanner. Set up your instance with 2 nodes.
D. Select Cloud Spanner. Set up your instance as multi-regional.
Answer: A
QUESTION 4
You want to configure autohealing for network load balancing for a group of Compute Engine
instances that run in multiple zones, using the fewest possible steps. You need to configure recreation
of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
A. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP).
B. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP).
D. Create a managed instance group. Verify that the autoscaling setting is on.
Answer: C
QUESTION 5
You are using multiple configurations for gcloud. You want to review the configured Kubernetes
Engine cluster of an inactive configuration using the fewest possible steps. What should you do?
A. Use gcloud config configurations describe to review the output.
B. Use gcloud config configurations activate and gcloud config list to review the output.
C. Use kubectl config get-contexts to review the output.
D. Use kubectl config use-context and kubectl config view to review the output.
Answer: D
QUESTION 6
Your company uses Cloud Storage to store application backup files for disaster recovery purposes.
You want to follow Googles recommended practices. Which storage option should you use?
A. Multi-Regional Storage
B. Regional Storage
C. Nearline Storage
D. Coldline Storage
Answer: D
Explanation:
Reference: https://cloud.google.com/storage/docs/storage-classes#nearline
https://cloud.google.com/blog/products/gcp/introducing-coldline-and-a-unified-platform-for-datastorage
Cloud Storage Coldline: a low-latency storage class for long-term archiving Coldline is a new Cloud
Storage class designed for long-term archival and disaster recovery. Coldline is perfect for the
archival needs of big data or multimedia content, allowing businesses to archive years of data.
Coldline provides fast and instant (millisecond) access to data and changes the way that companies
think about storing and accessing their cold data.
QUESTION 7
Several employees at your company have been creating projects with Cloud Platform and paying for
it with their personal credit cards, which the company reimburses. The company wants to centralize
all these projects under a single, new billing account. What should you do?
A. Contact cloud-billing@google.com with your bank account details and request a corporate billing account for your company.
B. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
C. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organization.
D. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
Answer: D