Google Cloud Associate Cloud Engineer
Google Cloud
Complete guide to passing the Google Cloud Associate Cloud Engineer exam on your first attempt.
$125
Not published
3 years
Global
Google Cloud
$96,800-$130,390
Are you ready for Google Cloud Associate Cloud Engineer?
Loading quiz...
Complete Overview
The Google Cloud Associate Cloud Engineer is a two-hour, 50 to 60 question certification exam that costs $125 plus tax and tests whether you can deploy applications, monitor operations and manage enterprise solutions on Google Cloud. It is Google's associate-level engineering credential, aimed at people who already administer or build on a cloud platform, and Google recommends at least six months of hands-on Google Cloud experience before sitting it. There are no formal prerequisites. Questions are multiple choice and multiple select, and the exam is delivered either online-proctored from a remote location through Pearson OnVUE or onsite at a Pearson VUE test centre. Exam content is available in English, Japanese, Spanish and Portuguese. The certification is valid for three years. The official exam guide divides the content into four sections with published weights: setting up a cloud solution environment at roughly 20%, planning and implementing a cloud solution at roughly 30%, ensuring the successful operation of a cloud solution at roughly 30%, and configuring access and security at roughly 20%. Those four blocks account for the whole exam. Google does not publish a passing score for this or any of its cloud certifications. The company states that its exams are designed only to determine whether a candidate meets a minimum passing standard, so results are reported as pass or fail with no numeric score attached. Candidates see a provisional pass or fail message on screen immediately after submitting, and Google confirms the official result within 7 to 10 days. Candidates who do not pass can open a section-level score report under Exam History showing approximate performance against each section weight, which is the only score feedback Google provides. The current exam guide reflects recent Google Cloud product renaming and includes newer services throughout: Cloud Next Generation Firewall policies with secure tags, Google Cloud Hyperdisk, GKE Autopilot, Cloud Run functions, Eventarc, Workforce Identity Federation, Workload Identity Federation, Database Center, Cloud Hub, Google Cloud Managed Service for Prometheus, and AI tooling such as Gemini Cloud Assist and the Agent Runtime on Gemini Enterprise Agent Platform, formerly Vertex AI Agent Engine. Candidates studying from material written before those renames will meet product names on the exam they have never seen. Retake rules are strict. After a first failure you wait 14 days, after a second you wait 60 days, and after a third you wait 365 days before a fourth attempt, with a maximum of four attempts within two years at associate level. The $125 fee is payable on every attempt. Renewal works differently from the initial exam: certified candidates within the eligibility window, which opens 180 days before expiry at associate level, can either sit the standard exam again, take a shorter one-hour, 20-question renewal exam for $75, or complete designated courses and skill badges in Google Skills. The renewal exam extends certification for three years, while the Google Skills route extends it for one year. Online-proctored candidates face a fully clear desk rule: no scratch paper, no writing instruments, no external monitors, no food or water, and no breaks of any kind during the session.
Why Get Google Cloud Associate Cloud Engineer Certified?
At $125, it is one of the cheapest associate-level cloud certifications from a major provider
The exam is 2 hours for 50 to 60 questions, which is over 2 minutes per question
Four published sections carry weights of about 20%, 30%, 30% and 20%, so study time can be allocated precisely
Certification is valid for 3 years, longer than the 2-year cycle used by several competing programs
Renewal costs $75 for a 1-hour, 20-question exam rather than a full retake at $125
Content is offered in English, Japanese, Spanish and Portuguese, and can be taken online or at a test centre
There are no prerequisites, so it can be a first cloud certification with 6 months of hands-on practice
Exam Format & Structure
Duration
2 hours
Questions
50-60
Passing Score
Not published. Google reports pass or fail only and does not release a cut score
Question Types
- Multiple choice with one correct answer
- Multiple select where the number of correct answers is stated
- Scenario-based items describing a business or technical requirement and asking for the appropriate Google Cloud service or command
Delivery Method
Online-proctored through Pearson OnVUE from a remote location, or onsite-proctored at a Pearson VUE test centre
- The renewal exam is a separate, shorter assessment: 1 hour, 20 questions, $75
- Registration fee is $125 plus tax where applicable, payable on every attempt
- Online candidates may check in from 10 minutes before the scheduled time and up to 20 minutes after; missing that window forfeits the fee
- No breaks are permitted during the exam and the workspace must be clear of scratch paper, notes, smart devices, food and water
- The exam guide was updated to reflect Google Cloud product renaming, so product names in older study material may no longer match
How scoring works
Score scale
Pass or fail. Google does not release a numeric score scale for its cloud certification exams
Score needed to pass
Not published
Roughly what that means raw
Not published. No question count or percentage equivalent to the passing standard is released
When results arrive
A provisional pass or fail appears on the testing screen immediately after submission, with official confirmation from Google in 7 to 10 days
How the scale is built
Google states that its exams are designed to determine only whether an individual meets a minimum passing standard, so results are reported as pass or fail with no score attached. Candidates who do not pass can open a detailed score report under Exam History, which breaks performance down by section against the approximate percentage weight of each section.
- Section-level feedback is not available for beta exams or for the renewal exam
- The score report shows approximate section weighting rather than a per-question breakdown
- There is no partial credit visible to the candidate, and multiple select items require all correct options
Pacing and time budget
50-60 questions in 120 minutes gives you 2 minutes per question at 60 questions, or 2 minutes 24 seconds at 50 questions per question.
| At this point | You should have answered |
|---|---|
| 30 min | 15 questions answered, with no more than 2 flagged |
| 60 min | 30 questions answered, half the exam complete |
| 90 min | 45 questions answered, flagged items listed |
| 110 min | All 50 to 60 questions answered, leaving 10 minutes for flagged items |
- No question is worth more than any other, so a 4-minute question costs you two easy ones
- Flag and move on at the 3-minute mark rather than working an item to certainty
- Multiple select questions state how many answers to pick, and counting your selections takes 5 seconds and prevents an automatic loss
- There is no penalty for a wrong answer, so leave nothing blank when the clock runs down
- There are no breaks, so plan hydration and rest before check-in rather than during the session
Where the marks are
| Topic | Weight | Why it scores |
|---|---|---|
| IAM roles, inheritance and least privilege | 20% section, plus scenarios throughout | Identity appears in the dedicated 20% access and security section and inside scenarios in every other section. Knowing that basic roles such as Owner and Editor are almost never the least-privilege answer, and that a custom role is correct only when no predefined role fits, resolves a large share of questions by elimination alone. |
| Compute selection: Compute Engine, GKE, Cloud Run and Cloud Run functions | 30% section | The planning and implementing section opens with compute choice, and scenario questions supply the deciding facts: request pattern, container versus VM, need for node control, and event-driven triggers. Learning the four options as a decision tree converts these into fast answers. |
| Cloud Monitoring and Cloud Logging | 30% section | Alert policies, custom metrics, Ops Agent, Managed Service for Prometheus, log buckets, log routers, log analytics and audit logs all sit inside the operations section. These topics are frequently under-studied relative to their share of the exam, so hours spent here have an unusually high return. |
| Service accounts, impersonation and Workload Identity Federation | 20% section | Half of the access and security section is service account management: creating them, attaching them to resources, granting minimum permissions, impersonation, short-lived credentials, and giving GKE workloads access through Workload Identity Federation. The last of these is a common answer to any question about a Pod calling a Google Cloud API. |
| VPC design, Cloud NGFW policies and load balancer selection | 30% section | Networking is a large slice of the planning section, covering custom mode VPCs, Shared VPC, VPC Network Peering, firewall rules with secure tags and service accounts, Cloud VPN and Cloud Interconnect, and choosing between load balancer types. Load balancer selection questions turn on protocol, scope and whether traffic is internal or external. |
| Storage class and database product selection | 30% section | Cloud Storage classes are chosen by access frequency and minimum storage duration, and database questions turn on whether the workload is relational, analytical, document, wide-column or in-memory. Both are pure decision-table knowledge that can be memorised in a single study session and recur repeatedly. |
| Resource hierarchy, organization policy and billing | 20% section | The setup section rewards precision about scope: organization, folder, project. Questions ask where a policy or a role binding should be attached so that it applies to the right set of resources, and billing budget, alert and export mechanics come up as standalone items. |
| gcloud command syntax | Cuts across all four sections | A recurring question format shows four gcloud commands that differ by one flag or one subcommand. Console-only preparation leaves you guessing on these. Rebuilding labs from the command line makes the correct option visible on sight rather than by reasoning. |
The numbers
$125 plus tax, per attempt
Registration fee
Source: Google Cloud Associate Cloud Engineer certification page
2 hours, 50 to 60 multiple choice and multiple select questions
Exam length and format
Source: Google Cloud Associate Cloud Engineer certification page
3 years
Certification validity
Source: Google Cloud Associate Cloud Engineer certification page
Not published; Google reports pass or fail only
Passing score
Source: Google Cloud Certification Help, Google Cloud Certification FAQs
14 days, then 60 days, then 365 days; four attempts in two years at associate level
Retake wait periods
Source: Google Cloud Certification Help, Important Program Policies
Provisional result on screen; official confirmation in 7 to 10 days
Official result timing
Source: Google Cloud Certification Help, Google Cloud Certification FAQs
If you fail
Wait before retaking
14 days after a first failure, 60 days after a second failure, and 365 days after a third failure before a fourth attempt.
Attempt limit
Four attempts within a two-year period at associate level. Foundational-level exams allow up to ten attempts in a one-year period with at least 14 days between failures.
Retake fee
$125 plus tax on every attempt. Google states that payment is required each time you take an exam.
Circumventing the retake policy by registering under a different name or by any other means violates the exam terms and conditions and results in a denied or revoked certification. You may not attempt the same exam while currently certified unless you are inside the recertification eligibility period, which opens 180 days before expiry at associate level.
Exam Domains & Topics
The joint-largest section covers choosing and standing up compute, storage, data and networking resources. It spans Compute Engine, GKE, Cloud Run and Cloud Run functions, storage class and disk type selection, database product choice, VPC and subnet design, firewall policy, load balancer selection, and infrastructure as code tooling including Terraform, Config Connector and Helm.
Key Topics to Master:
- Selecting compute for a workload: Compute Engine, GKE, Cloud Run, Cloud Run functions, Agent Runtime
- Compute Engine storage choices: zonal and regional Persistent Disk, Google Cloud Hyperdisk
- Autoscaled managed instance groups from an instance template
- GKE cluster configurations: Autopilot, regional clusters, private clusters
- Data products: Cloud SQL, BigQuery, Firestore, Spanner, Bigtable, AlloyDB, Dataflow, Pub/Sub, Memorystore
- Cloud Storage classes: Standard, Nearline, Coldline, Archive
- VPC creation with custom mode, Shared VPC and VPC Network Peering
- Cloud NGFW policies with ingress and egress rules, secure tags and service accounts
- Cloud VPN, Cloud Interconnect and load balancer selection
- Infrastructure as code with Terraform, Config Connector, Fabric FAST and Helm
The other 30% section covers day-two operations: connecting to and managing instances, snapshots and images, GKE node pools and workload autoscaling, Cloud Run traffic splitting, managing Cloud Storage objects and lifecycle policies, backing up and restoring databases, resizing subnets, reserving static IPs, and the whole of Cloud Monitoring and Cloud Logging.
Key Topics to Master:
- Connecting to Compute Engine instances and working with snapshots and images
- GKE node pool management, autoscaling, and viewing cluster inventory
- Horizontal and vertical Pod autoscaling and GKE Autopilot resource requests
- Cloud Run deployments, traffic splitting and autoscaling configuration
- Cloud Storage object security and lifecycle management policies
- Backing up and restoring Cloud SQL, Firestore, Spanner, AlloyDB and Bigtable
- Resizing subnet IPv4 ranges, reserving static IPs, custom static routes
- Cloud DNS and Cloud NAT
- Cloud Monitoring alerts, custom metrics, Ops Agent and Managed Service for Prometheus
- Cloud Logging: log buckets, log routers, log analytics, audit logs and VPC Flow Logs
- Cloud Trace, Cloud Profiler and the Personalized Service Health dashboard
This section covers everything that happens before workloads exist: creating the resource hierarchy, applying organization policies, granting IAM roles within a project, managing users and groups in Cloud Identity, enabling APIs, assessing quotas and requesting increases, configuring Cloud Asset Inventory, and the whole of billing account setup, budgets, alerts and exports.
Key Topics to Master:
- Creating a resource hierarchy of organization, folders and projects
- Applying organization policies to the resource hierarchy
- Granting IAM roles within a project
- Managing users and groups in Cloud Identity, manually and automated
- Enabling APIs within projects and provisioning Google Cloud Observability
- Assessing quotas and requesting increases
- Verifying product availability across regions and zones
- Configuring Cloud Asset Inventory and Workforce Identity Federation
- Creating billing accounts and linking projects to them
- Establishing billing budgets, alerts and billing exports
The final section is entirely about identity. It covers viewing and creating IAM policies, how role bindings inherit down the organization hierarchy, the difference between basic, predefined and custom roles, and service account management including impersonation, short-lived credentials, attaching service accounts to resources, and Workload Identity Federation for GKE and external identities.
Key Topics to Master:
- Viewing and creating IAM policies
- Role attachment and policy inheritance through the organization hierarchy
- Basic, predefined and custom IAM roles, and when a custom role is required
- Creating service accounts, including Google-managed service accounts
- Using service accounts in IAM policies with minimum permissions
- Assigning service accounts to resources and managing their IAM permissions
- Service account impersonation and short-lived credentials
- Using a Google Cloud service account with a GKE application
- Provisioning Workload Identity Federation
Recommended Study Plan
- 1Create a Google Cloud account and claim the $300 in free credits available to new customers
- 2Build an organization, folder and project structure and move a project between folders
- 3Apply an organization policy constraint and confirm it blocks a resource creation
- 4Create a billing account, link two projects, and set a budget with an alert threshold
- 5Configure a billing export to BigQuery and query the resulting table
- 1Grant basic, predefined and custom roles and compare the permission sets with gcloud iam roles describe
- 2Create a custom role from a permission list and attach it at folder level to see inheritance
- 3Create a service account, attach it to a Compute Engine VM, and call an API from the VM
- 4Practise service account impersonation with gcloud --impersonate-service-account
- 5Manage users and groups in Cloud Identity and map a group to an IAM role
- 1Launch instances with different machine types, availability policies and SSH key configurations
- 2Attach zonal and regional Persistent Disks and compare them with Hyperdisk options
- 3Create an instance template and an autoscaled managed instance group behind a load balancer
- 4Configure OS Login and VM Manager on a small fleet
- 5Create a Spot VM and a custom machine type and compare the billed rates
- 1Create a custom mode VPC with subnets in two regions and resize one subnet range
- 2Write Cloud NGFW policies with ingress and egress rules using secure tags and service accounts
- 3Set up VPC Network Peering between two VPCs and test connectivity
- 4Deploy a global external Application Load Balancer and a regional internal load balancer
- 5Configure Cloud NAT and Cloud DNS private zones and resolve a name from a VM
- 1Create Cloud Storage buckets in each storage class and set a lifecycle policy that transitions objects
- 2Load data from local disk, from Cloud Storage and with Storage Transfer Service
- 3Provision Cloud SQL, take a backup, and restore it into a new instance
- 4Run queries against BigQuery, Firestore and Bigtable and compare the access patterns
- 5Configure a customer-managed encryption key on a bucket and on a Cloud SQL instance
- 1Deploy a Standard cluster and an Autopilot cluster and list the differences in node control
- 2Install and configure kubectl through gcloud container clusters get-credentials
- 3Add, edit and remove node pools and enable node pool autoscaling
- 4Configure horizontal and vertical Pod autoscaling and observe them under load
- 5Give a GKE workload access to Artifact Registry and a Google Cloud API through Workload Identity Federation
- 1Deploy a container to Cloud Run and roll out a new revision with traffic splitting
- 2Configure Cloud Run autoscaling minimum and maximum instances
- 3Deploy a Cloud Run function triggered by a Pub/Sub message
- 4Trigger a workload from a Cloud Storage object change notification through Eventarc
- 5Compare cost and cold start behaviour between Cloud Run and a GKE Deployment
- 1Create Cloud Monitoring alert policies on CPU, memory and a custom log-based metric
- 2Install and configure the Ops Agent on a VM and confirm metrics arrive
- 3Route logs to a log bucket and export a subset to BigQuery with a log router sink
- 4Enable VPC Flow Logs and data access audit logs and query them in Log Analytics
- 5Use Cloud Trace and Cloud Profiler to inspect a slow request path
- 1Rebuild week 3 and week 4 labs entirely from gcloud commands with no console use
- 2Learn the gcloud config configurations command for switching projects and accounts
- 3Write Terraform for a VPC, a subnet, a firewall rule and a VM, then destroy it
- 4Deploy the same resources with Config Connector and compare the manifests
- 5Drill the flags that distinguish similar commands, such as gcloud compute instances create versus gcloud compute instance-templates create
- 1Read the official exam guide line by line and mark any bullet you cannot demonstrate
- 2Complete Google's sample questions and review every explanation, including for correct answers
- 3Take the Preparing for the Associate Cloud Engineer Examination course as a readiness check
- 4Run two full 2-hour timed practice sets and record time spent per question
- 5Rebuild any lab covering a topic you missed twice in practice
- 1List every product in the current exam guide and write one sentence on when to choose it
- 2Check the newer names in the guide, including Cloud NGFW, Database Center, Cloud Hub and Gemini Enterprise Agent Platform
- 3Redo the three labs from earlier weeks you found slowest
- 4Practise scenario elimination: for each sample question, state why each wrong option is wrong
- 5Complete the Cloud Engineer learning path modules you have skipped
- 1Confirm your legal first and last name in the registration matches your government photo ID in Romanized characters
- 2Run the Pearson OnVUE system check on the machine and network you will use, if testing online
- 3Clear the testing room of monitors, notes, devices, food and water and plan a session with no breaks
- 4Do one final 2-hour timed set and stop new material 48 hours before the exam
- 5Review the four section weights and confirm your study hours matched 20 / 30 / 30 / 20
Ready to pass Google Cloud Associate Cloud Engineer?
Get 500+ practice questions, video walkthroughs, and a pass guarantee.
Best Study Resources
Associate Cloud Engineer exam guide
Official syllabusGoogle's own section-by-section list of examinable topics with the four section weights. It is the definitive scope document and is updated when product names or services change, so re-read it in the week before you sit.
Free
Cloud Engineer learning path on Google Skills
Official course pathGoogle's structured sequence of courses, hands-on labs and skill badges aligned to the exam. Completing designated courses and skill badges here also counts as a certification renewal route worth one further year.
Free tier with paid options
Preparing for the Associate Cloud Engineer Examination
Official readiness courseA short Google course that walks through the exam structure and provides a readiness check rather than new technical content. Google recommends it as the final step before scheduling the standard exam.
Free
Official sample questions
Practice questionsGoogle's own sample set, useful mainly for calibrating question style and the wording of multiple select items. Read the explanations for questions you answered correctly as well, because the reasoning matters more than the score.
Free
Google Cloud free tier and $300 credit
Practice environmentOver 20 products carry monthly free usage limits and new customers receive $300 in credits at signup. This is enough to build every lab in a 12-week plan, including a GKE cluster, Cloud SQL instance and load balancer.
Free
gcloud CLI reference
ReferenceThe complete command and flag reference. A large share of exam questions present four near-identical gcloud commands, so recognising which flag belongs to which command is worth more than console familiarity.
Free
Google Cloud Skills Boost hands-on labs (Qwiklabs)
Hands-on labsTimed labs that provision a temporary Google Cloud project so you can build and destroy real infrastructure without touching your own billing account. The GKE, IAM and networking quests map directly to the two 30% sections.
Subscription, with free introductory labs
Google Cloud Certification Help centre
Policy documentationThe official source for retake wait periods, attempt limits, online proctoring rules, ID requirements, accommodation requests and renewal eligibility windows. Every policy figure on this page is drawn from it.
Free
Google Cloud architecture and product documentation
ReferenceProduct pages give the quota limits, storage class retention minimums and IAM role definitions that scenario questions hinge on. The decision trees on storage and database selection pages match how the exam frames product choice.
Free
Common Mistakes to Avoid
Studying only through the Cloud Console and never using gcloud
Many questions present four gcloud commands that differ by a single flag or subcommand. Rebuild every lab from the command line at least once, and learn the distinction between resource-level commands such as gcloud compute instances create and template-level commands such as gcloud compute instance-templates create.
Using study material written before the recent Google Cloud product renaming
Read the current official exam guide and note every new name, including Cloud Next Generation Firewall, Database Center, Cloud Hub, Google Cloud Hyperdisk and the Agent Runtime on Gemini Enterprise Agent Platform. Google states directly on the certification page that the exam was updated to reflect branding changes.
Confusing basic, predefined and custom IAM roles
Learn the three tiers explicitly. Basic roles such as Owner, Editor and Viewer apply broadly and are almost never the right answer for a least-privilege scenario. Predefined roles are service-specific. A custom role is correct only when no predefined role gives the exact permission set required.
Guessing at Cloud Storage class selection
Learn each class by its access frequency and minimum storage duration rather than by name. Scenario questions describe how often data is read and how long it is kept, and the correct class follows from those two facts plus the retrieval cost.
Underestimating the two 30% sections
Planning and implementing a cloud solution and ensuring successful operation are each worth roughly 30%, which together is 60% of the exam. Compute, storage, networking, GKE, Cloud Run, monitoring and logging sit inside those two sections and deserve the majority of study hours.
Skipping Cloud Monitoring and Cloud Logging as boring administration
Monitoring and logging occupy a substantial part of the operations section, covering alert policies, custom metrics, Ops Agent, log buckets, log routers, log analytics and audit logs. Build at least one alert policy and one export sink by hand so the terminology is familiar.
Assuming a retake can happen quickly after a failure
Google enforces 14 days after a first failure, 60 days after a second and 365 days after a third, with four attempts allowed in two years at associate level. Treat the first attempt as the one that counts and schedule it only after two clean timed practice runs.
Arriving for an online exam with a second monitor or notes on the desk
Google's online testing rules prohibit external monitors, scratch paper, writing instruments, note-taking materials, smart devices, wearables, food and water. Clear the entire workspace before check-in, because the proctor will not begin the session otherwise.
Registering with a name that does not match your photo ID
Your legal first and last name in the registration must match your government-issued photo ID, and Pearson requires Romanized characters in the legal name field. A mismatch results in the exam being denied and the $125 fee forfeited.
Expecting a numeric score to gauge how close you came
Google reports pass or fail only and does not release a cut score. If you fail, open the section-level score report under Exam History, which shows approximate performance against each section weight, and rebuild study time around the weakest section before the 14-day window ends.
Exam Day Tips
- 1
Check in between 10 minutes before and 20 minutes after your scheduled start time; outside that window the session is cancelled and the fee is forfeited
- 2
Run the Pearson OnVUE system test and download the OnVUE application at least 24 hours before your scheduled exam, on the exact machine and network you will use
- 3
Remove external monitors and clear the desk of paper, pens, phones, wearables, food and water before check-in
- 4
Plan for a single unbroken sitting, because no breaks are allowed and leaving the camera view cancels the session
- 5
Budget just over 2 minutes per question at 60 questions and flag anything that passes 3 minutes rather than stalling on it
- 6
Read multiple select questions for the stated number of correct answers and count your selections before moving on
- 7
Eliminate options by least privilege first: basic roles such as Owner and Editor are rarely the intended answer in an IAM scenario
- 8
Watch for the scope of a question, since the same task differs at organization, folder and project level
- 9
Expect the provisional pass or fail on screen immediately after you submit, and allow 7 to 10 days for Google to confirm the official result
- 10
If you fail, download the section-level score report from Exam History the same week, while the detail of the questions is still fresh
Career Paths & Salary Ranges
Cloud engineer or cloud systems administrator
Provisions and maintains Google Cloud projects, VPCs, instances and managed services for internal teams. The Associate Cloud Engineer exam was written around this role, which is why the four sections mirror a typical operations workload from project setup through monitoring.
$96,800 US median for network and computer systems administrators, BLS May 2024
Cloud support or technical account engineer
Handles customer or internal tickets on Google Cloud services, diagnosing IAM permission failures, quota rejections, networking issues and billing questions. The certification signals breadth across services, which matters more here than depth in any one.
$73,340 US median for computer network support specialists, BLS May 2024
Cloud systems analyst
Translates business requirements into Google Cloud service selections and cost models. The planning and implementing section, at roughly 30% of the exam, covers exactly this decision work across compute, storage, database and networking choices.
$103,790 US median for computer systems analysts, BLS May 2024
Cloud security engineer
Owns IAM policy, service account hygiene, Workload Identity Federation, firewall policy and audit logging. The configuring access and security section covers roughly 20% of the associate exam, and Google's Professional Cloud Security Engineer is the natural next credential.
$124,910 US median for information security analysts, BLS May 2024
Cloud architect
Designs multi-project, multi-region environments and the landing zone that application teams deploy into. Associate Cloud Engineer is normally the first step, with the Professional Cloud Architect certification following once the hands-on operations experience is in place.
$130,390 US median for computer network architects, BLS May 2024
Prerequisites & Requirements
- No formal prerequisites. Any candidate can register and sit the exam
- Google recommends 6 or more months of hands-on experience with Google Cloud
- Experience working with public clouds or on-premises infrastructure solutions
- Comfort with a command line, since gcloud, gsutil and kubectl syntax appear directly in answer options
- A Google Cloud account, which new customers can open with $300 in free credits plus free tier usage on more than 20 products
- A government-issued photo ID whose legal first and last name match the registration, entered in Romanized characters
- For online testing, a machine and network that pass the Pearson OnVUE system check, plus a private room with a clear desk
Frequently Asked Questions
How much does the Associate Cloud Engineer exam cost?
The standard exam is $125 plus tax where applicable, and the fee is payable on every attempt including retakes. The shorter renewal exam, available only to candidates with an active certification inside the renewal eligibility window, costs $75. Certifying also places a 50% discount code in the Benefits section of your CM Connect account.
What is the passing score for the Associate Cloud Engineer exam?
Google does not publish one. The company states that its exams are designed only to determine whether an individual meets a minimum passing standard, so only pass or fail results are provided. No numeric score or percentage cut point is released to candidates.
How many questions are on the exam and how long is it?
The standard exam is 50 to 60 multiple choice and multiple select questions in 2 hours. The renewal exam is 20 questions in 1 hour.
What happens if I fail the exam?
You see a provisional fail on screen immediately after submitting. You can then open a detailed score report under Exam History showing section-level performance broken down by approximate section weight. That report is the only feedback Google gives, and section-level feedback is not available for beta or renewal exams. You must wait 14 days before a second attempt and pay the $125 fee again.
How long do I have to wait to retake the exam?
Fourteen days after a first failure, 60 days after a second failure, and 365 days after a third failure before a fourth attempt. At associate level the maximum is four attempts within a two-year period. Registering under a different name to bypass these limits is a terms and conditions violation that results in a denied or revoked certification.
When do I get my official result?
A provisional pass or fail appears on the testing screen immediately after you submit the exam. Google asks candidates to allow 7 to 10 days for the official result to be confirmed, after which the certification and digital badge appear in your account.
How long is the certification valid and how do I renew it?
Three years. At associate level the renewal eligibility window opens 180 days before the expiration date. Inside that window you can take the standard exam again for $125, take the 1-hour, 20-question renewal exam for $75, or complete designated courses and skill badges in Google Skills. The exam routes extend certification by three years; the Google Skills route extends it by one year.
Can I take the exam online or must I go to a test centre?
Both options are available. Online-proctored exams run through Pearson OnVUE from a remote location, and onsite-proctored exams run at Pearson VUE test centres. Search for Google Cloud when booking a centre. The content, length and fee are identical.
What are the rules for the online-proctored exam?
The testing area must be completely clear of external monitors, scratch paper, writing instruments, note-taking materials, smart devices, wearables, food and water. No breaks are allowed and the exam must be taken in one sitting. Check-in opens 10 minutes before the scheduled time and closes 20 minutes after it.
What identification do I need?
A government-issued photo ID whose legal first and last name match the name on your exam registration. Pearson requires the legal name field to use Romanized characters in order to schedule. A mismatch results in being denied entry to the exam and forfeiting the fee.
What materials am I allowed to use during the exam?
None. There is no open-book component, no scratch paper, no calculator and no access to documentation. Online candidates must keep the desk clear throughout, and test centre candidates store all belongings before entering the testing room.
Are accommodations available for candidates with disabilities?
Yes. Accommodations, including medical accommodations that require breaks during the exam, must be requested and approved through CM Connect before you schedule the exam. Google advises allowing 2 to 4 weeks for the request to be processed, so start well ahead of your intended test date.
Which languages is the exam offered in?
The standard Associate Cloud Engineer exam is available in English, Japanese, Spanish and Portuguese. The shorter renewal exam is available in English and Japanese only.
Does the exam fee differ by region?
The registration fee is $125 in US dollars plus tax where applicable, and Google lists the same figure across regions. Local tax treatment varies by country, so the amount charged at checkout can exceed $125 depending on where you are registered.
How does Associate Cloud Engineer compare with Cloud Digital Leader?
Cloud Digital Leader is Google's foundational certification and tests cloud concepts and business value without requiring hands-on engineering work. Associate Cloud Engineer is one level above and expects you to deploy, operate and secure real resources, with Google recommending six or more months of hands-on Google Cloud experience. Associate Cloud Engineer runs 2 hours at $125; Cloud Digital Leader is shorter and cheaper.
How does it compare with Professional Cloud Architect?
Professional Cloud Architect is the next tier, focused on designing and planning solutions rather than deploying and operating them, and it uses case studies alongside standard questions. Associate Cloud Engineer covers the hands-on operations skills that the professional exam assumes you already have. Most candidates take the associate exam first, though it is not a formal prerequisite.
Which section carries the most weight?
Two sections tie at roughly 30% each: planning and implementing a cloud solution, and ensuring the successful operation of a cloud solution. Together they account for about 60% of the exam. Setting up a cloud solution environment and configuring access and security carry roughly 20% each.
Can I take the exam while my certification is still active?
Not outside the renewal window. Google states that you may not attempt the same exam while currently certified unless you are within the recertification eligibility period, which opens 180 days before expiry for associate-level certifications and 60 days before expiry for professional-level ones.
Does the exam test AI tooling on Google Cloud?
Yes, in places. The current exam guide references Gemini Cloud Assist for analysing resources and for Cloud Monitoring, Gemini CLI and Google Antigravity under AI-assisted planning, deploying an agent to the Agent Runtime on Gemini Enterprise Agent Platform, and managing notebooks in Gemini Enterprise Agent Platform Workbench, formerly Vertex AI Workbench.
Is any Kubernetes knowledge required?
Yes. The exam guide includes installing and configuring kubectl, deploying GKE clusters in Autopilot, regional and private configurations, deploying containerised applications, managing node pools, working with Pods, Services and StatefulSets, and configuring horizontal and vertical Pod autoscaling. It stops well short of the depth tested by CKA or CKAD.
Pass Google Cloud Associate Cloud Engineer — Guaranteed
94% pass rate on first attempt
One-time • Lifetime access
One-time payment