- What Domain 2 Actually Covers
- Compute Deployment Decisions
- Storage and Database Selection
- Deploying Networked Resources
- Deployment Tools: Console, gcloud, Terraform, and Gemini Cloud Assist
- GKE, Cloud Run, and Serverless Choices
- How Domain 2 Questions Are Written
- Scheduling Domain 2 in Your Prep
- Domain 2 vs. the Other Three Domains
- Frequently Asked Questions
- Domain 2 is the implementation-heavy domain: deploying compute, storage, networking, and apps.
- You must know when to choose Compute Engine, GKE, Cloud Run, or Cloud Run functions for a given workload.
- Expect scenario questions comparing gcloud, Console, Terraform, and Gemini Cloud Assist workflows.
- The exam has 50-60 questions in 2 hours, so Domain 2 scenarios need fast, confident decisions.
What Domain 2 Actually Covers
If Domain 1 is about getting your project, billing, and organization structure ready, Domain 2 is where you actually build things. "Planning and implementing a cloud solution" is the doing-work domain of the Associate Cloud Engineer exam: choosing the right compute option, standing up storage and databases, deploying applications, and wiring together networked resources so a workload actually runs in production.
This domain sits at the center of the four ACE exam domains, and it tends to feel the most "hands-on" of the group because Google is testing whether you've actually deployed resources yourself rather than just read about them. If you've spent real time in the Google Cloud console or the gcloud CLI, this domain rewards that muscle memory directly.
Compute Deployment Decisions
A large share of Domain 2 questions revolve around choosing and configuring compute resources. You need working knowledge of Compute Engine instance creation, including machine types, custom machine types, preemptible/Spot VMs, instance templates, and managed instance groups with autoscaling and health checks.
Compute Engine Essentials
Candidates must understand how to launch and manage VM-based workloads efficiently and cost-consciously.
- Creating instances from images, snapshots, or custom images
- Configuring instance templates for managed instance groups
- Choosing Spot VMs vs. standard VMs for fault-tolerant vs. always-on workloads
- Setting up autoscaling policies based on CPU, load balancing capacity, or custom metrics
You'll also be expected to reason about when a VM-centric approach is the wrong call. Google increasingly tests whether candidates recognize that a container or serverless option is a better fit - this is where Cloud Run, Cloud Run functions, and GKE decisions come into play, covered in more detail below.
Storage and Database Selection
Domain 2 also tests your ability to match a storage or database service to a workload's access pattern, consistency needs, and scale. This is less about memorizing every feature and more about pattern recognition.
| Service | Best Fit | Watch For On Exam |
|---|---|---|
| Cloud Storage | Unstructured object data, backups, static assets | Storage class selection (Standard, Nearline, Coldline, Archive) and lifecycle rules |
| Cloud SQL | Relational, managed MySQL/PostgreSQL/SQL Server | High availability configuration, read replicas, automated backups |
| Cloud Spanner | Global relational scale with strong consistency | When horizontal scale outgrows Cloud SQL |
| Firestore | Document-based NoSQL for app backends | Native mode vs. Datastore mode distinctions |
| BigQuery | Analytics on large structured datasets | Dataset/table setup rather than deep query tuning |
Scenario questions often describe a business requirement in plain language - "a mobile app needs a flexible schema and automatic scaling" - and expect you to map that to Firestore rather than Cloud SQL, or recognize when Cloud Storage lifecycle management beats manually deleting old objects.
Key Takeaway
Practice matching workload descriptions to services rather than memorizing feature lists in isolation - the exam almost always frames storage and database questions as a scenario, not a definition question.
Deploying Networked Resources
Where Domain 1 covers designing the VPC and IAM foundation, Domain 2 tests the implementation side of networking: deploying resources that actually sit inside that structure and are reachable the way they need to be.
Networking Deployment Topics
Expect direct, practical questions rather than deep network theory.
- Configuring firewall rules to allow or restrict traffic to deployed instances
- Setting up load balancers (HTTP(S), TCP/UDP, internal) in front of compute resources
- Reserving and assigning static external and internal IP addresses
- Configuring Cloud DNS records for deployed services
- Connecting workloads across VPCs using peering or Shared VPC where relevant to deployment
If you've never manually built a load balancer end-to-end - backend service, health check, URL map, forwarding rule - this is a gap worth closing before exam day. Reading about it isn't the same as clicking through the steps once yourself.
Deployment Tools: Console, gcloud, Terraform, and Gemini Cloud Assist
The current exam guide reflects Google Cloud's evolving AI tooling, and Domain 2 is where that shows up most. You should be comfortable recognizing how a task can be accomplished through multiple paths and picking the appropriate one for a given scenario.
- Console: best for one-off tasks, quick verification, or when a candidate needs to reason about UI-driven workflows described in a question.
- gcloud CLI: the backbone of most exam scenarios - expect commands for creating instances, buckets, and networking resources to appear in question wording or answer options.
- Terraform / Infrastructure as Code: increasingly referenced for repeatable deployments; you don't need deep Terraform authoring skills, but you should recognize IaC as the right answer when a question stresses repeatability or version control.
- Gemini Cloud Assist and Gemini CLI: newer additions to the guide, testing whether you understand how AI-assisted troubleshooting and command generation fit into a deployment workflow - not as a replacement for understanding, but as an accelerant.
Application Design Center and Google Antigravity are also referenced in the current guide as part of how Google is modernizing app deployment tooling. You won't need to be an expert in every one of these tools, but you should know what each is for at a conceptual level, since the exam guide explicitly lists them.
GKE, Cloud Run, and Serverless Choices
Container and serverless deployment decisions are a recurring theme across the ACE exam, and Domain 2 is where they're tested most directly. You need to know the operational differences well enough to pick the right one under time pressure.
Container and Serverless Decision Points
- GKE: workloads needing fine-grained orchestration control, custom networking, or multi-container pod design
- Cloud Run: stateless containerized services that need to scale to zero and require minimal operational overhead
- Cloud Run functions: event-driven, single-purpose functions triggered by events (HTTP, Pub/Sub, Cloud Storage)
- App Engine: still referenced for fully managed application hosting, though less emphasized than in earlier exam versions
A typical exam pattern presents a workload constraint - "must scale to zero when idle" or "needs custom node pool configuration" - and asks which platform fits. The distinction between Cloud Run and Cloud Run functions specifically has become more prominent as Google has consolidated its serverless functions branding, so make sure you understand the current naming and capability boundaries rather than relying on older study material.
How Domain 2 Questions Are Written
The Associate Cloud Engineer exam uses multiple-choice and multiple-select questions, drawn from a pool of 50-60 questions across all four domains, with a 2-hour time limit. Google doesn't publish how many questions belong to each domain or how many are scored versus unscored, so you can't assume Domain 2 gets a fixed slice - but its scenario-heavy nature means it often takes longer per question than Domain 1's more conceptual items.
Domain 2 questions typically follow one of a few patterns:
- "Which service should you use" scenarios: a short business or technical requirement followed by four service options.
- "What's the correct sequence" questions: ordering deployment steps, such as creating an instance template before a managed instance group.
- Multiple-select trade-off questions: asking you to pick two correct actions where partial credit doesn't exist - you need both right.
- Tooling questions: comparing a Console-based approach against a CLI or IaC approach for the same outcome.
If you want a broader sense of how question difficulty compares across all four domains, How Hard Is the ACE Exam? breaks down where most candidates report the most friction, and ACE Pass Rate 2026 discusses what the available data suggests about overall difficulty without relying on invented numbers.
Scheduling Domain 2 in Your Prep
Because Domain 2 is implementation-heavy, it benefits more from hands-on lab time than from flashcard-style review. If you're building a study calendar around all four domains, plan the middle stretch of your prep for this one, after you've set up your environment (Domain 1) but before you focus purely on operations and security.
Compute and Storage Deployment
- Launch Compute Engine instances with instance templates and a managed instance group
- Create Cloud Storage buckets with lifecycle rules; set up a Cloud SQL instance with a read replica
Networking and Container Deployment
- Build an HTTP(S) load balancer end-to-end in front of an instance group
- Deploy a container to Cloud Run and a function to Cloud Run functions; compare the workflows
Tooling Fluency and Review
- Repeat two or three of the above deployments using gcloud instead of the console
- Review Gemini Cloud Assist and Application Design Center at a conceptual level
For a full week-by-week plan covering all four domains together, see the ACE Study Guide 2026, which lays out a complete first-attempt strategy rather than just this domain in isolation.
Domain 2 vs. the Other Three Domains
It helps to see how Domain 2 fits alongside the other content areas so you know how to allocate review time.
| Domain | Primary Focus | Study Emphasis |
|---|---|---|
| Domain 1: Setting up a cloud solution environment | Projects, billing, org structure, initial configuration | Conceptual + light hands-on |
| Domain 2: Planning and implementing a cloud solution | Deploying compute, storage, networking, apps | Heavy hands-on lab practice |
| Domain 3: Ensuring the successful operation of a cloud solution | Monitoring, logging, maintenance | Console navigation + alerting logic |
| Domain 4: Configuring access and security | IAM, service accounts, security controls | Conceptual precision, terminology |
Each domain has its own dedicated guide if you want to go deeper: Domain 1, this Domain 2 guide, Domain 3, and Domain 4. Reading all four alongside the complete domains overview gives you a full picture of how weight is distributed across the exam.
Who Hires for These Skills
Domain 2 competencies map directly onto real job responsibilities: deploying and scaling compute resources, provisioning databases, and standing up networked services are day-one tasks for cloud support engineers, junior DevOps engineers, and platform engineers working on Google Cloud. Employers listing ACE as a preferred or required credential are typically looking for someone who can be handed a deployment ticket and execute it correctly without hand-holding - which is exactly what this domain simulates.
If you're evaluating whether the credential is worth pursuing relative to your career goals, Is the ACE Certification Worth It? and ACE Salary Guide 2026 go into the return-on-investment side, while ACE Jobs covers the kinds of roles that reference this certification directly.
Closing the Gap Before Exam Day
The fastest way to expose weak spots in Domain 2 knowledge is to simulate the scenario-based format under time pressure, since reading documentation alone won't reveal whether you can quickly choose between Cloud Run and GKE when a question gives you thirty seconds to decide. Running full-length practice exams on our practice test platform is the most direct way to see which deployment scenarios still slow you down before you're in the real Pearson VUE or online-proctored session.
It's also worth cross-referencing your practice results against the full domain breakdown to make sure a strong Domain 2 score isn't masking a weaker one elsewhere - since all four domains combine into a single pass/fail result, not separate domain scores.
Frequently Asked Questions
No deep authoring skill is required, but you should recognize when infrastructure-as-code is the appropriate answer to a repeatability or version-control scenario, since the current exam guide references IaC concepts alongside Console and gcloud workflows.
Domain 1 covers setting up the environment - projects, billing, organizational structure. Domain 2 covers actually deploying compute, storage, networking, and application resources inside that environment.
The current exam guide names Cloud Run functions explicitly, so you should understand its event-driven trigger model and how it differs from a standard Cloud Run service, not just serverless computing in general.
They appear in the current exam guide as part of Google's updated AI tooling coverage. You should understand their purpose conceptually rather than memorize command syntax.
Associate and Professional Google Cloud exams allow up to four attempts within a two-year period, with required waiting periods between failed attempts.
- ACE Domain 1: Setting up a cloud solution environment - Complete Study Guide 2026
- ACE Domain 3: Ensuring the successful operation of a cloud solution - Complete Study Guide 2026
- ACE Domain 4: Configuring access and security - Complete Study Guide 2026
- ACE Exam Domains 2026: Complete Guide to All 4 Content Areas