Skip to content

Google Cloud Associate Cloud Engineer - Fact Sheet

Quick Reference

Exam Code: Associate Cloud Engineer Duration: 120 minutes Questions: 50-60 questions Passing Score: ~70% (not officially published) Cost: $125 USD Validity: 3 years Difficulty: ⭐⭐⭐

Exam Domains

Domain Weight Key Focus
Setting up a cloud solution environment 20% Projects, billing, CLI, IAM setup
Planning and configuring a cloud solution 17.5% Compute, storage, networking planning
Deploying and implementing a cloud solution 25% GCE, GKE, App Engine, Cloud Run, data solutions
Ensuring successful operation 20% Management, monitoring, logging
Configuring access and security 17.5% IAM, service accounts, audit logs

Core Google Cloud Services

Compute Services

Compute Engine (GCE) - Virtual machine instances with customizable configurations - Machine types: N1, N2, E2, C2, M1, A2 - Preemptible VMs: Up to 80% cost savings, 24-hour max lifetime - Instance groups: Managed (auto-scaling) and unmanaged - Persistent disks: Standard, SSD, balanced, extreme - 📖 Compute Engine Documentation - Complete GCE guide - 📖 Machine Types - VM sizing and families - 📖 Preemptible VMs - Cost-effective instances - 📖 Instance Groups - Auto-scaling and load balancing - 📖 Persistent Disks - Block storage options

Google Kubernetes Engine (GKE) - Managed Kubernetes clusters - Autopilot mode: Fully managed, optimized configurations - Standard mode: Flexible node pool management - Workload Identity: Secure pod-to-GCP service authentication - Cluster autoscaler: Automatic node provisioning - 📖 GKE Documentation - Complete GKE guide - 📖 GKE Autopilot - Fully managed mode - 📖 GKE Standard - Cluster architecture - 📖 Workload Identity - Pod authentication - 📖 Cluster Autoscaler - Auto-scaling nodes

App Engine - Platform as a Service (PaaS) for applications - Standard environment: Auto-scaling, sandbox runtime - Flexible environment: Docker containers, custom runtimes - Traffic splitting: A/B testing and gradual rollouts - Versions and services: Multi-version deployment - 📖 App Engine Documentation - Complete App Engine guide - 📖 Standard vs Flexible - Environment comparison - 📖 Scaling Configuration - Instance scaling - 📖 Traffic Splitting - Version management - 📖 App Engine Deployment - Deployment workflows

Cloud Run - Fully managed serverless containers - Auto-scales from 0 to N instances - Pay-per-use: Charged only when processing requests - Cloud Run for Anthos: Hybrid and multi-cloud - Concurrency: Handle multiple requests per container - 📖 Cloud Run Documentation - Complete Cloud Run guide - 📖 Container Requirements - Container specs - 📖 Auto-scaling - Scaling behavior - 📖 Service Configuration - Service settings - 📖 Cloud Run Pricing - Cost optimization

Cloud Functions - Event-driven serverless functions - Runtimes: Node.js, Python, Go, Java, Ruby, .NET - 1st gen: HTTP and background functions - 2nd gen: Built on Cloud Run, improved performance - Event sources: Cloud Storage, Pub/Sub, Firestore, HTTP - 📖 Cloud Functions Documentation - Complete guide - 📖 Event Triggers - Trigger types - 📖 Functions Framework - Local development - 📖 Best Practices - Performance optimization - 📖 2nd Generation - Next-gen functions

Storage Services

Cloud Storage - Object storage with global availability - Storage classes: Standard, Nearline, Coldline, Archive - Lifecycle policies: Automatic tier transitions - Versioning: Object version history - Access control: IAM, ACLs, signed URLs - 📖 Cloud Storage Documentation - Complete guide - 📖 Storage Classes - Class comparison - 📖 Lifecycle Management - Automatic transitions - 📖 Access Control - IAM and ACLs - 📖 Object Versioning - Version control - 📖 Signed URLs - Temporary access

Cloud SQL - Managed relational databases: MySQL, PostgreSQL, SQL Server - High availability: Regional and cross-regional replication - Read replicas: Scale read operations - Automated backups: Point-in-time recovery - Maintenance windows: Scheduled updates - 📖 Cloud SQL Documentation - Complete guide - 📖 High Availability - HA configuration - 📖 Read Replicas - Replica setup - 📖 Backup and Recovery - Backup strategies - 📖 Connection Options - Connectivity methods

Cloud Firestore - NoSQL document database - Native and Datastore modes - Real-time updates: Live synchronization - Offline support: Mobile and web - ACID transactions: Strong consistency - 📖 Firestore Documentation - Complete guide - 📖 Data Model - Documents and collections - 📖 Queries - Query syntax - 📖 Security Rules - Access control - 📖 Indexing - Query optimization

Cloud Bigtable - Wide-column NoSQL database - Petabyte-scale, sub-10ms latency - Time-series data, IoT, financial data - HBase API compatible - Replication: Multi-cluster, multi-region - 📖 Bigtable Documentation - Complete guide - 📖 Schema Design - Best practices - 📖 Performance - Optimization guide - 📖 Replication - Multi-cluster setup

BigQuery - Serverless data warehouse - SQL queries on petabyte-scale data - Columnar storage, automatic optimization - Streaming inserts: Real-time data ingestion - Federated queries: Query external data sources - 📖 BigQuery Documentation - Complete guide - 📖 Query Syntax - SQL reference - 📖 Loading Data - Data ingestion - 📖 Partitioning - Table optimization - 📖 Cost Optimization - Cost management

Networking Services

Virtual Private Cloud (VPC) - Isolated network environment - Subnets: Regional IP ranges - Firewall rules: Ingress and egress control - VPC peering: Connect VPCs globally - Shared VPC: Multi-project networking - 📖 VPC Documentation - Complete guide - 📖 Subnet Creation - Subnet design - 📖 Firewall Rules - Network security - 📖 VPC Peering - VPC connectivity - 📖 Shared VPC - Multi-project networks

Cloud Load Balancing - Global load balancing with single anycast IP - HTTP(S) Load Balancing: Layer 7, global - TCP/UDP Load Balancing: Layer 4, regional/global - Internal Load Balancing: Private load balancing - SSL termination: Certificate management - 📖 Load Balancing Documentation - Complete guide - 📖 HTTP(S) Load Balancing - Layer 7 balancing - 📖 TCP/UDP Load Balancing - Layer 4 balancing - 📖 Internal Load Balancing - Private balancing - 📖 SSL Certificates - Certificate management

Cloud CDN - Content delivery network - Global edge locations - Cache control: Custom TTL policies - HTTPS support: SSL/TLS termination - Origin: GCS buckets or HTTP(S) backends - 📖 Cloud CDN Documentation - Complete guide - 📖 Cache Keys - Caching behavior - 📖 Signed URLs - Secure content delivery

Cloud VPN and Interconnect - Cloud VPN: IPsec tunnels to on-premises - Cloud Interconnect: Dedicated physical connections - Partner Interconnect: Carrier connections - Cloud Router: Dynamic BGP routing - 📖 Cloud VPN Documentation - VPN setup - 📖 Cloud Interconnect - Dedicated connectivity - 📖 Cloud Router - Dynamic routing

Identity and Access Management

IAM (Identity and Access Management) - Who: Members (users, groups, service accounts, domains) - What: Resources (projects, GCS buckets, GCE instances) - How: Roles (basic, predefined, custom) - Policy binding: Member + Role + Resource - Conditional access: Context-aware policies - 📖 IAM Documentation - Complete IAM guide - 📖 IAM Roles - Role types - 📖 Custom Roles - Role creation - 📖 Policy Management - Policy structure - 📖 Conditional Access - Context-based access - 📖 Best Practices - Security guidelines

Service Accounts - Machine-to-machine authentication - Types: User-managed, Google-managed - Key management: JSON keys, rotation - Short-lived tokens: OAuth 2.0 access tokens - Impersonation: Service account as another identity - 📖 Service Accounts - Complete guide - 📖 Key Management - Key lifecycle - 📖 Best Practices - Security guidelines - 📖 Impersonation - Identity delegation

Operations and Monitoring

Cloud Monitoring (formerly Stackdriver) - Metrics collection: Infrastructure and application metrics - Custom metrics: Application-specific monitoring - Dashboards: Visualization and reporting - Alerting policies: Notification channels - Uptime checks: Availability monitoring - 📖 Cloud Monitoring Documentation - Complete guide - 📖 Metrics Explorer - Metric visualization - 📖 Alerting - Alert configuration - 📖 Custom Metrics - Application metrics - 📖 Dashboards - Dashboard creation

Cloud Logging (formerly Stackdriver Logging) - Centralized log management - Log types: Admin, system, access, agent logs - Log sinks: Export to GCS, BigQuery, Pub/Sub - Log-based metrics: Metrics from log entries - Retention: 30 days default, configurable - 📖 Cloud Logging Documentation - Complete guide - 📖 Log Router - Log routing - 📖 Log Sinks - Export configuration - 📖 Query Language - Log filtering - 📖 Audit Logs - Audit logging

Cloud Trace and Debugger - Cloud Trace: Distributed tracing, latency analysis - Cloud Debugger: Live application debugging - Error Reporting: Error aggregation and alerts - Cloud Profiler: CPU and memory profiling - 📖 Cloud Trace Documentation - Distributed tracing - 📖 Cloud Debugger - Live debugging - 📖 Error Reporting - Error tracking - 📖 Cloud Profiler - Performance profiling

Command Line Tools

gcloud CLI - Project management: gcloud projects list/create/delete - Compute: gcloud compute instances create/start/stop - Storage: gsutil cp/mb/rm - Configuration: gcloud config set/get - Authentication: gcloud auth login/application-default - 📖 gcloud CLI Documentation - Complete reference - 📖 gcloud Commands - Command reference - 📖 gcloud Configuration - Config management - 📖 gsutil Documentation - Storage tool

kubectl - Kubernetes cluster management - Deployment: kubectl apply/create/delete - Pods: kubectl get pods/logs/exec - Services: kubectl expose/port-forward - 📖 kubectl Cheat Sheet - Command reference - 📖 GKE kubectl - Cluster access

Key Exam Concepts

High Availability Patterns

  • Multi-region deployments
  • Regional managed instance groups
  • Health checks and auto-healing
  • Load balancer redundancy
  • Database replication (Cloud SQL, Spanner)

Cost Optimization

  • Committed use discounts: 1-year or 3-year
  • Sustained use discounts: Automatic monthly discounts
  • Preemptible VMs: 80% cost reduction
  • Custom machine types: Right-sizing
  • Cloud Storage lifecycle policies: Auto-tiering

Security Best Practices

  • Least privilege IAM: Minimum necessary permissions
  • Service account keys: Avoid long-lived keys
  • VPC Service Controls: Perimeter security
  • Encryption: At-rest (default), in-transit (SSL/TLS)
  • Audit logging: Admin, data access, system event logs

Deployment Strategies

  • Blue/green deployment: Zero-downtime updates
  • Rolling updates: Gradual instance replacement
  • Canary deployments: Traffic splitting
  • Infrastructure as Code: Deployment Manager, Terraform
  • CI/CD: Cloud Build, Cloud Deploy

Common Scenarios

Scenario 1: Web Application with Auto-scaling - Solution: Managed instance group + HTTP(S) Load Balancer + Cloud CDN

Scenario 2: Microservices Architecture - Solution: GKE cluster + Cloud Load Balancing + Cloud SQL/Firestore

Scenario 3: Data Pipeline - Solution: Cloud Storage → Cloud Functions/Dataflow → BigQuery

Scenario 4: Hybrid Connectivity - Solution: Cloud VPN or Interconnect + Cloud Router + Shared VPC

Scenario 5: Serverless API - Solution: Cloud Functions or Cloud Run + API Gateway + Cloud Firestore

Essential Documentation

Exam Tips

Keywords: - "High availability" → Multi-region, managed instance groups, load balancing - "Cost-effective" → Preemptible VMs, committed use, sustained use discounts - "Secure" → IAM, service accounts, VPC firewall, encryption - "Serverless" → Cloud Functions, Cloud Run, App Engine - "Data warehouse" → BigQuery - "Real-time" → Pub/Sub, Cloud Functions, Firestore

Focus Areas: - IAM roles and service accounts (critical!) - gcloud CLI commands for all services - Compute options: When to use GCE vs GKE vs App Engine vs Cloud Run - Networking: VPC, subnets, firewall rules, load balancing - Monitoring and logging setup - Cost optimization techniques

Pro Tip: This is a hands-on exam. Practice using the gcloud CLI extensively and deploy real applications on GCP. Understand the "why" behind service selection, not just the "how"!