Skip to content
Cheat sheets
Professional · Professional Cloud Security EngineerPrep available

Google Cloud Certified Professional Cloud Security Engineer (Professional Cloud Security Engineer) practice exam and study path

A free, timed 50-question Professional Cloud Security Engineer practice exam in 120 minutes, scored by domain, with every option explained after you submit. Also 106 practice questions you can check one at a time, a page for every task in the exam guide, and a study path. No sign-up.

Start the free practice examGet the exam packPractise question by question →
Professional Cloud Security Engineer exam pack:

$11.99for 12 months

The Google Cloud security exam: configuring identities and access, protecting network boundaries and private connectivity, protecting data with encryption, Sensitive Data Protection and controls for AI workloads, automating and monitoring security operations, and supporting regulatory compliance.

The exam

Exam code
Professional Cloud Security Engineer
Questions
Not yet published
Time
120 minutes
Passing score
Not published
Exam fee
$200 (USD)
Question types
multiple choice, multiple response

50-60 multiple-choice and multiple-select questions in 2 hours, $200 plus tax, online-proctored or at a test center, in English and Japanese. No prerequisites; 3+ years of industry experience including more than 1 year designing and managing solutions on Google Cloud recommended. Renewal is by the standard exam, from 60 days before the inactive date, and adds 2 years; no shorter renewal exam is offered for this certification, and renewal by continuing education is listed as coming soon. Passing score: Not published. Our forms hold 50 questions, the low end of the published range, split by the guide's approximate section weights.

From Google Cloud's certification page and exam guide, checked Oct 25, 2026.

Domains and weights

  • Domain 1: Configuring access

    25%

  • Domain 2: Securing communications and establishing boundary protection

    22%

  • Domain 3: Ensuring data protection

    23%

  • Domain 4: Managing operations

    19%

  • Domain 5: Supporting compliance requirements

    11%

On our roadmap this comes after Associate Cloud Engineer. See every certification.

Practice

106 original practice questions, every option explained with the Google Cloud documentation page that proves it. Free, no sign-up; progress stays on this device.

Your results on this device →

More practice exams

The lessons, the sample questions on every task page and the first full practice exam are free and stay free. A pack adds the further timed Professional Cloud Security Engineer practice exams.

Professional Cloud Security Engineer exam pack

$11.99for 12 months

  • Every paid Professional Cloud Security Engineer practice exam, timed, with every option explained
  • The next version of this exam included when it changes within your 12 months
  • 12 months of access. One payment, nothing renews by itself.
  • 14-day refund, no conditions
  • 14-day refund, no conditions: ask within 14 days of buying and you get the whole payment back.
  • No pass guarantee. These are practice exams written by us from the exam guide and the Google Cloud documentation; a score here does not predict your result on the real exam.

Study path

One module per exam domain. Lessons that already exist on BytePatterns are linked; the rest are being written.

  1. Module 1: Configuring access

    1. 1Cloud Identity: Directory Sync, SSO, the super administrator and Workforce Identity FederationTask 1.1

      Lesson coming

    2. 2Service accounts: attached identities, keys, short-lived credentials and impersonationTask 1.2

      Partly covered by: Shared Responsibility & IAM

    3. 3Workload Identity Federation for other clouds, pipelines and GKETask 1.2

      Lesson coming

    4. 4Authentication policy: passwords, session length, SAML, OAuth and 2-Step VerificationTask 1.3

      Lesson coming

    5. 5IAM roles, groups, conditions, deny policies and separation of dutiesTask 1.4

      Partly covered by: Shared Responsibility & IAM

    6. 6Access Context Manager, Policy Intelligence and Privileged Access ManagerTask 1.4

      Lesson coming

    7. 7Folders, projects and organization policies, predefined and customTask 1.5

      Partly covered by: Organizations, SCPs & Control Tower

  2. Module 2: Securing communications and establishing boundary protection

    1. 8Cloud NGFW policies, secure tags and intrusion preventionTask 2.1, 2.2

      Partly covered by: VPC: Subnets, NAT & Firewalls

    2. 9The edge: load balancers, certificates, Cloud Armor and Identity-Aware ProxyTask 2.1

      Partly covered by: Load Balancing, Rate Limiting

    3. 10Egress and DNS: Secure Web Proxy, DNSSEC, response policies and API restrictionsTask 2.1

      Lesson coming

    4. 11Shared VPC, peering and N-tier isolationTask 2.2

      Partly covered by: VPC: Subnets, NAT & Firewalls

    5. 12VPC Service Controls: perimeters, access levels, ingress and egress rulesTask 2.2

      Lesson coming

    6. 13Hybrid links: HA VPN, Cloud Interconnect and MACsecTask 2.3

      Partly covered by: Hybrid Networking & DNS

    7. 14Private access to Google APIs: Private Google Access, restricted VIPs, Private Service Connect and Cloud NATTask 2.3

      Lesson coming

  3. Module 3: Ensuring data protection

    1. 15Sensitive Data Protection: discovery, inspection and de-identificationTask 3.1

      Partly covered by: Finding and Masking PII

    2. 16Locking down data services, Secret Manager and VM metadataTask 3.1

      Partly covered by: ConfigMaps, Secrets & Env

    3. 17Cloud KMS: CMEK, Autokey, Cloud HSM, Cloud EKM, rotation and importTask 3.2

      Partly covered by: KMS, Envelope Encryption & Private CA

    4. 18Retention and lifecycle in Cloud Storage; Confidential ComputingTask 3.2

      Lesson coming

    5. 19Securing AI workloads: Agent Platform controls, Model Armor and training environmentsTask 3.3

      Partly covered by: Guardrails

  4. Module 4: Managing operations

    1. 20Supply chain: vulnerability scanning, Binary Authorization and hardened imagesTask 4.1

      Partly covered by: Images, Layers & Multi-Stage Builds

    2. 21Posture and drift: custom organization policies, Security Health Analytics custom modules and security posturesTask 4.1

      Lesson coming

    3. 22Logs for security: audit logs, network logs, sinks and access to logsTask 4.2

      Partly covered by: Observability Basics, CloudWatch, Alarms & X-Ray

    4. 23Detection and response with Security Command Center and Google Security OperationsTask 4.2

      Lesson coming

  5. Module 5: Supporting compliance requirements

    1. 24Shared responsibility and the environment in scopeTask 5.1

      Partly covered by: Shared Responsibility & IAM

    2. 25Assured Workloads, data boundaries, Access Transparency and Access ApprovalTask 5.1

      Lesson coming

Every task in the exam guide

The exam guide splits each domain into task statements. Each one has a page with a short summary, the lessons that teach it and open sample questions.

Domain 1: Configuring access

Domain 2: Securing communications and establishing boundary protection

Domain 3: Ensuring data protection

Domain 4: Managing operations

Domain 5: Supporting compliance requirements

How these questions are made

  • Written by us from the exam guide's task statements and the Google Cloud documentation — never from real exam content.
  • Every option carries its own explanation and a link to the Google Cloud page that proves it.
  • A question enters a timed exam only after an independent check; until then it is a practice question.
  • Results are a plain percentage, per domain too — not an imitation of Google Cloud's scaled score.

Questions about the Professional Cloud Security Engineer practice exam

Is the Professional Cloud Security Engineer practice exam free?
Yes. The full practice exam (50 questions, 120 minutes) is free with no sign-up, and so are the 106 practice questions, the task pages and the study path. Your attempts are saved in this browser, on this device.
How many questions does it have, and is it timed?
50 questions in 120 minutes: the real Professional Cloud Security Engineer pace, scaled to this form. When the time runs out, the exam is submitted as it stands.
Are the answers explained?
After you submit, not during: like the real exam, the timed exam gives no feedback until the end. Then you get your score overall and per exam domain, and every question with each option explained and a link to the Google Cloud documentation page behind it. In practice mode an answer is explained as soon as you check it.
What does the Professional Cloud Security Engineer exam pack add?
3 more timed practice exams (Practice exam 1: 50 questions, 120 minutes; Practice exam 2: 50 questions, 120 minutes; Practice exam 3: 50 questions, 120 minutes), each scored and explained the same way, and the next version of this exam if it changes within your 12 months. 12 months of access. One payment, nothing renews by itself. Everything above stays free. See the pack.
Can I get a refund?
Yes, with no conditions: ask within 14 days of buying and you get the whole payment back. The details are in the terms.
Is this an official Google Cloud practice exam?
No. BytePatterns is not affiliated with, endorsed or sponsored by Google Cloud. Every question is written by us from the public exam guide and the Google Cloud documentation, never from real exam content, and a score here does not predict your result on the real exam. Google Cloud lists its own preparation resources on its certification page.