GCP•Professional•Professional Cloud Security Engineer

Professional Cloud Security Engineer

Enable organizations to design and implement secure infrastructure on Google Cloud. Understand Google Cloud security best practices and industry requirements. Design, develop, and manage secure infrastructure using Google security technologies.

Note: This syllabus summary was last updated in November 2025. For the most current and detailed syllabus information, please visit the official certification provider's website.

Exam Summary

TIME

120

Minutes

TOTAL

Questions

PRICE

$200

USD

VALID

Years

PASS

70%

Required

Prerequisites (Optional)

Recommended experience before taking this exam

3+ years of industry experience
1+ year designing and managing security solutions using Google Cloud

Exam Domains & Topics

Domain 1

20%

Configure Access within a Cloud Solution Environment

Configure Cloud Identity and Google Workspace

Manage user identities and groups

Implement IAM policies and roles

Configure service accounts

Implement access controls for Google Cloud services

Configure VPC Service Controls

Domain 2

18%

Configure Network Security

Design and configure VPC firewall rules

Implement Cloud Armor for DDoS protection

Configure load balancer security features

Implement Cloud NAT and Private Google Access

Design secure network architectures

Configure SSL policies and certificates

Domain 3

20%

Ensure Data Protection

Implement encryption at rest and in transit

Configure Cloud KMS for key management

Implement Secret Manager for sensitive data

Configure data loss prevention (DLP) API

Implement data retention and deletion policies

Configure customer-managed encryption keys (CMEK)

Domain 4

22%

Manage Operations within a Cloud Solution Environment

Configure security monitoring and logging

Analyze logs using Cloud Logging

Configure and respond to Security Command Center findings

Implement vulnerability scanning

Configure audit logging and review audit logs

Implement security analytics

Domain 5

20%

Ensure Compliance

Determine regulatory requirements

Configure security controls to meet compliance

Implement organizational policy constraints

Configure access transparency and access approval

Implement compliance reporting

Understand shared responsibility model

GCP•Professional•Professional Cloud Security Engineer

Professional Cloud Security Engineer

Note: This syllabus summary was last updated in November 2025. For the most current and detailed syllabus information, please visit the official certification provider's website.

Exam Summary

TIME

120

Minutes

TOTAL

Questions

PRICE

$200

USD

VALID

Years

PASS

70%

Required

Prerequisites (Optional)

Recommended experience before taking this exam

3+ years of industry experience
1+ year designing and managing security solutions using Google Cloud

Exam Domains & Topics

Domain 1

20%

Configure Access within a Cloud Solution Environment

Configure Cloud Identity and Google Workspace

Manage user identities and groups

Implement IAM policies and roles

Configure service accounts

Implement access controls for Google Cloud services

Configure VPC Service Controls

Domain 2

18%

Configure Network Security

Design and configure VPC firewall rules

Implement Cloud Armor for DDoS protection

Configure load balancer security features

Implement Cloud NAT and Private Google Access

Design secure network architectures

Configure SSL policies and certificates

Domain 3

20%

Ensure Data Protection

Implement encryption at rest and in transit

Configure Cloud KMS for key management

Implement Secret Manager for sensitive data

Configure data loss prevention (DLP) API

Implement data retention and deletion policies

Configure customer-managed encryption keys (CMEK)

Domain 4

22%

Manage Operations within a Cloud Solution Environment

Configure security monitoring and logging

Analyze logs using Cloud Logging

Configure and respond to Security Command Center findings

Implement vulnerability scanning

Configure audit logging and review audit logs

Implement security analytics

Domain 5

20%

Ensure Compliance

Determine regulatory requirements

Configure security controls to meet compliance

Implement organizational policy constraints

Configure access transparency and access approval

Implement compliance reporting

Understand shared responsibility model

Professional Cloud Security Engineer

Exam Summary

Prerequisites (Optional)

Exam Domains & Topics

Configure Access within a Cloud Solution Environment

Configure Network Security

Ensure Data Protection

Manage Operations within a Cloud Solution Environment

Ensure Compliance

Cloud Practice Test

Professional Cloud Security Engineer

Exam Summary

Prerequisites (Optional)

Exam Domains & Topics

Configure Access within a Cloud Solution Environment

Configure Network Security

Ensure Data Protection

Manage Operations within a Cloud Solution Environment

Ensure Compliance