About This Domain
Domain 5 — Configuring Access and Security — accounts for ~15% of the ACE certification exam. This domain evaluates your understanding of iam policies and bindings, custom roles, service account best practices, and related concepts. IAM, firewall rules, and security best practices. To pass this section you need practical knowledge of how these services and patterns work together in real-world architectures.
What You'll Be Tested On
- IAM policies and bindings
- Custom roles
- Service account best practices
- VPC firewall rules
- Audit logging
Key Google Cloud Services in This Domain
Study Strategy for Domain 5
This domain represents ~15% of the total exam, making it a significant scoring area. Balance theoretical study with hands-on practice.
Exam Tips for Domain 5
Service accounts should follow least privilege. Avoid user-managed keys when possible.
Frequently Asked Questions
How many questions on the ACE exam come from Domain 5?
Domain 5 (Configuring Access and Security) makes up ~15% of the ACE exam, approximately 16 questions.
What services should I focus on for Domain 5?
Key services include Access & Security.
How should I prepare for Configuring Access and Security questions?
Start by reviewing the key topics listed above, then practice with domain-specific questions. Focus on understanding real-world scenarios.
What's the best order to study the ACE domains?
Many candidates start with the highest-weighted domains first: Setting Up a Cloud Solution Environment (~20%), Planning and Configuring a Cloud Solution (~20%), Deploying and Implementing a Cloud Solution (~25%), Ensuring Successful Operation (~20%), Configuring Access and Security (~15%).
Practice Domain 5 Questions
Test your knowledge of Configuring Access and Security with practice questions from our ACE question bank.
Start Practice Quiz →