Skip to content
CertificationsHow it worksReadinessPricingSign inStart practising free
GCP-ACE~20% of the exam

Configuring access and security

IAM policies and role types, custom roles, and service accounts — creation, least privilege, impersonation and workload identity federation.

Practise 2 questionsAll of GCP-ACE

What this domain is worth

Google Cloud publishes this domain at ~20% of GCP-ACE. On a 55-question scored exam that is roughly 11 questions. It is the third heaviest of the 4 domains, which is why our mock exams allocate questions by weight rather than evenly.

Taken from the published exam guide, checked 2026-09-11.

What it covers

IAM

1

Policies, inheritance through the hierarchy, role types and custom roles.

Practise IAM →

Service accounts

1

Least privilege, attachment to resources, impersonation, short-lived credentials and workload identity.

Practise Service accounts →

The other GCP-ACE domains

Setting up a cloud solution environment~20%
2 questions
Planning and implementing a cloud solution~30%
3 questions
Ensuring the successful operation of a cloud solution~30%
2 questions