ACE logo
Focused certification exam prep
Start practice

ACE Domain 2: Planning and implementing a cloud solution - Complete Study Guide 2026

TL;DR
  • Domain 2 is the implementation-heavy domain: deploying compute, storage, networking, and apps.
  • You must know when to choose Compute Engine, GKE, Cloud Run, or Cloud Run functions for a given workload.
  • Expect scenario questions comparing gcloud, Console, Terraform, and Gemini Cloud Assist workflows.
  • The exam has 50-60 questions in 2 hours, so Domain 2 scenarios need fast, confident decisions.

What Domain 2 Actually Covers

If Domain 1 is about getting your project, billing, and organization structure ready, Domain 2 is where you actually build things. "Planning and implementing a cloud solution" is the doing-work domain of the Associate Cloud Engineer exam: choosing the right compute option, standing up storage and databases, deploying applications, and wiring together networked resources so a workload actually runs in production.

This domain sits at the center of the four ACE exam domains, and it tends to feel the most "hands-on" of the group because Google is testing whether you've actually deployed resources yourself rather than just read about them. If you've spent real time in the Google Cloud console or the gcloud CLI, this domain rewards that muscle memory directly.

Why this domain matters: Planning and implementing decisions show up constantly in real ACE job postings. Hiring managers expect certified engineers to know not just what a service does, but which service fits a given cost, scale, or operational constraint - which is exactly what this domain tests.

Compute Deployment Decisions

A large share of Domain 2 questions revolve around choosing and configuring compute resources. You need working knowledge of Compute Engine instance creation, including machine types, custom machine types, preemptible/Spot VMs, instance templates, and managed instance groups with autoscaling and health checks.

Compute Engine Essentials

Candidates must understand how to launch and manage VM-based workloads efficiently and cost-consciously.

  • Creating instances from images, snapshots, or custom images
  • Configuring instance templates for managed instance groups
  • Choosing Spot VMs vs. standard VMs for fault-tolerant vs. always-on workloads
  • Setting up autoscaling policies based on CPU, load balancing capacity, or custom metrics

You'll also be expected to reason about when a VM-centric approach is the wrong call. Google increasingly tests whether candidates recognize that a container or serverless option is a better fit - this is where Cloud Run, Cloud Run functions, and GKE decisions come into play, covered in more detail below.

Storage and Database Selection

Domain 2 also tests your ability to match a storage or database service to a workload's access pattern, consistency needs, and scale. This is less about memorizing every feature and more about pattern recognition.

ServiceBest FitWatch For On Exam
Cloud StorageUnstructured object data, backups, static assetsStorage class selection (Standard, Nearline, Coldline, Archive) and lifecycle rules
Cloud SQLRelational, managed MySQL/PostgreSQL/SQL ServerHigh availability configuration, read replicas, automated backups
Cloud SpannerGlobal relational scale with strong consistencyWhen horizontal scale outgrows Cloud SQL
FirestoreDocument-based NoSQL for app backendsNative mode vs. Datastore mode distinctions
BigQueryAnalytics on large structured datasetsDataset/table setup rather than deep query tuning

Scenario questions often describe a business requirement in plain language - "a mobile app needs a flexible schema and automatic scaling" - and expect you to map that to Firestore rather than Cloud SQL, or recognize when Cloud Storage lifecycle management beats manually deleting old objects.

Key Takeaway

Practice matching workload descriptions to services rather than memorizing feature lists in isolation - the exam almost always frames storage and database questions as a scenario, not a definition question.

Deploying Networked Resources

Where Domain 1 covers designing the VPC and IAM foundation, Domain 2 tests the implementation side of networking: deploying resources that actually sit inside that structure and are reachable the way they need to be.

Networking Deployment Topics

Expect direct, practical questions rather than deep network theory.

  • Configuring firewall rules to allow or restrict traffic to deployed instances
  • Setting up load balancers (HTTP(S), TCP/UDP, internal) in front of compute resources
  • Reserving and assigning static external and internal IP addresses
  • Configuring Cloud DNS records for deployed services
  • Connecting workloads across VPCs using peering or Shared VPC where relevant to deployment

If you've never manually built a load balancer end-to-end - backend service, health check, URL map, forwarding rule - this is a gap worth closing before exam day. Reading about it isn't the same as clicking through the steps once yourself.

Deployment Tools: Console, gcloud, Terraform, and Gemini Cloud Assist

The current exam guide reflects Google Cloud's evolving AI tooling, and Domain 2 is where that shows up most. You should be comfortable recognizing how a task can be accomplished through multiple paths and picking the appropriate one for a given scenario.

  • Console: best for one-off tasks, quick verification, or when a candidate needs to reason about UI-driven workflows described in a question.
  • gcloud CLI: the backbone of most exam scenarios - expect commands for creating instances, buckets, and networking resources to appear in question wording or answer options.
  • Terraform / Infrastructure as Code: increasingly referenced for repeatable deployments; you don't need deep Terraform authoring skills, but you should recognize IaC as the right answer when a question stresses repeatability or version control.
  • Gemini Cloud Assist and Gemini CLI: newer additions to the guide, testing whether you understand how AI-assisted troubleshooting and command generation fit into a deployment workflow - not as a replacement for understanding, but as an accelerant.

Application Design Center and Google Antigravity are also referenced in the current guide as part of how Google is modernizing app deployment tooling. You won't need to be an expert in every one of these tools, but you should know what each is for at a conceptual level, since the exam guide explicitly lists them.

Practical tip: Spend time in the actual gcloud CLI, not just the console. A meaningful share of Domain 2 scenario questions are written assuming familiarity with command structure and flags, even when the question itself doesn't require you to type a command.

GKE, Cloud Run, and Serverless Choices

Container and serverless deployment decisions are a recurring theme across the ACE exam, and Domain 2 is where they're tested most directly. You need to know the operational differences well enough to pick the right one under time pressure.

Container and Serverless Decision Points

  • GKE: workloads needing fine-grained orchestration control, custom networking, or multi-container pod design
  • Cloud Run: stateless containerized services that need to scale to zero and require minimal operational overhead
  • Cloud Run functions: event-driven, single-purpose functions triggered by events (HTTP, Pub/Sub, Cloud Storage)
  • App Engine: still referenced for fully managed application hosting, though less emphasized than in earlier exam versions

A typical exam pattern presents a workload constraint - "must scale to zero when idle" or "needs custom node pool configuration" - and asks which platform fits. The distinction between Cloud Run and Cloud Run functions specifically has become more prominent as Google has consolidated its serverless functions branding, so make sure you understand the current naming and capability boundaries rather than relying on older study material.

How Domain 2 Questions Are Written

The Associate Cloud Engineer exam uses multiple-choice and multiple-select questions, drawn from a pool of 50-60 questions across all four domains, with a 2-hour time limit. Google doesn't publish how many questions belong to each domain or how many are scored versus unscored, so you can't assume Domain 2 gets a fixed slice - but its scenario-heavy nature means it often takes longer per question than Domain 1's more conceptual items.

Domain 2 questions typically follow one of a few patterns:

  • "Which service should you use" scenarios: a short business or technical requirement followed by four service options.
  • "What's the correct sequence" questions: ordering deployment steps, such as creating an instance template before a managed instance group.
  • Multiple-select trade-off questions: asking you to pick two correct actions where partial credit doesn't exist - you need both right.
  • Tooling questions: comparing a Console-based approach against a CLI or IaC approach for the same outcome.

If you want a broader sense of how question difficulty compares across all four domains, How Hard Is the ACE Exam? breaks down where most candidates report the most friction, and ACE Pass Rate 2026 discusses what the available data suggests about overall difficulty without relying on invented numbers.

Scheduling Domain 2 in Your Prep

Because Domain 2 is implementation-heavy, it benefits more from hands-on lab time than from flashcard-style review. If you're building a study calendar around all four domains, plan the middle stretch of your prep for this one, after you've set up your environment (Domain 1) but before you focus purely on operations and security.

Week 2

Compute and Storage Deployment

  • Launch Compute Engine instances with instance templates and a managed instance group
  • Create Cloud Storage buckets with lifecycle rules; set up a Cloud SQL instance with a read replica
Week 3

Networking and Container Deployment

  • Build an HTTP(S) load balancer end-to-end in front of an instance group
  • Deploy a container to Cloud Run and a function to Cloud Run functions; compare the workflows
Week 4

Tooling Fluency and Review

  • Repeat two or three of the above deployments using gcloud instead of the console
  • Review Gemini Cloud Assist and Application Design Center at a conceptual level

For a full week-by-week plan covering all four domains together, see the ACE Study Guide 2026, which lays out a complete first-attempt strategy rather than just this domain in isolation.

Domain 2 vs. the Other Three Domains

It helps to see how Domain 2 fits alongside the other content areas so you know how to allocate review time.

DomainPrimary FocusStudy Emphasis
Domain 1: Setting up a cloud solution environmentProjects, billing, org structure, initial configurationConceptual + light hands-on
Domain 2: Planning and implementing a cloud solutionDeploying compute, storage, networking, appsHeavy hands-on lab practice
Domain 3: Ensuring the successful operation of a cloud solutionMonitoring, logging, maintenanceConsole navigation + alerting logic
Domain 4: Configuring access and securityIAM, service accounts, security controlsConceptual precision, terminology

Each domain has its own dedicated guide if you want to go deeper: Domain 1, this Domain 2 guide, Domain 3, and Domain 4. Reading all four alongside the complete domains overview gives you a full picture of how weight is distributed across the exam.

Registration reminder: The standard exam costs $125 USD plus tax, runs 2 hours, and is delivered via CM Connect/CertMetrics registration with either online or Pearson VUE onsite proctoring. There's no official open-book allowance, so lab familiarity matters more than reference-sheet memorization. Full pricing details, including renewal costs, are covered in ACE Certification Cost 2026.

Who Hires for These Skills

Domain 2 competencies map directly onto real job responsibilities: deploying and scaling compute resources, provisioning databases, and standing up networked services are day-one tasks for cloud support engineers, junior DevOps engineers, and platform engineers working on Google Cloud. Employers listing ACE as a preferred or required credential are typically looking for someone who can be handed a deployment ticket and execute it correctly without hand-holding - which is exactly what this domain simulates.

If you're evaluating whether the credential is worth pursuing relative to your career goals, Is the ACE Certification Worth It? and ACE Salary Guide 2026 go into the return-on-investment side, while ACE Jobs covers the kinds of roles that reference this certification directly.

Closing the Gap Before Exam Day

The fastest way to expose weak spots in Domain 2 knowledge is to simulate the scenario-based format under time pressure, since reading documentation alone won't reveal whether you can quickly choose between Cloud Run and GKE when a question gives you thirty seconds to decide. Running full-length practice exams on our practice test platform is the most direct way to see which deployment scenarios still slow you down before you're in the real Pearson VUE or online-proctored session.

It's also worth cross-referencing your practice results against the full domain breakdown to make sure a strong Domain 2 score isn't masking a weaker one elsewhere - since all four domains combine into a single pass/fail result, not separate domain scores.

Frequently Asked Questions

Does Domain 2 require hands-on Terraform experience?

No deep authoring skill is required, but you should recognize when infrastructure-as-code is the appropriate answer to a repeatability or version-control scenario, since the current exam guide references IaC concepts alongside Console and gcloud workflows.

How is Domain 2 different from Domain 1?

Domain 1 covers setting up the environment - projects, billing, organizational structure. Domain 2 covers actually deploying compute, storage, networking, and application resources inside that environment.

Will I need to know Cloud Run functions specifically, or just general serverless concepts?

The current exam guide names Cloud Run functions explicitly, so you should understand its event-driven trigger model and how it differs from a standard Cloud Run service, not just serverless computing in general.

Are Gemini Cloud Assist and Gemini CLI heavily tested?

They appear in the current exam guide as part of Google's updated AI tooling coverage. You should understand their purpose conceptually rather than memorize command syntax.

How many attempts do I get if I don't pass on the first try?

Associate and Professional Google Cloud exams allow up to four attempts within a two-year period, with required waiting periods between failed attempts.

Ready to pass your ACE exam?

Put this into practice with free ACE questions across every exam domain.