How many questions are on the Professional Cloud Security Engineer exam?

The Professional Cloud Security Engineer exam has 60 questions, and the vendor's published description is: 50-60 multiple choice and multiple select questions; 2 hours (official page states format and length separately).

How long do you have to complete the Professional Cloud Security Engineer exam?

You get 120 minutes, which is about 120 seconds per question. The published format is: 50-60 multiple choice and multiple select questions; 2 hours (official page states format and length separately).

What score do you need to pass the Professional Cloud Security Engineer exam?

No numeric cut score is published for this certification: Not published by the provider (Google provides pass/fail results only; no numeric passing score is published).

What are the domains on the Professional Cloud Security Engineer exam?

There are 5 domains: Configure access, Manage operations, Ensure data protection, Support compliance requirements, Secure communications and establish boundary protection. The official weights are Configure access 25%, Manage operations 19%, Ensure data protection 23%, Support compliance requirements 11%, Secure communications and establish boundary protection 22%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 25% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the Professional Cloud Security Engineer exam?

Yes: 60 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

Professional Cloud Security Engineer Exam Format

GCP-PCSE

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Professional Cloud Security Engineer certification validates the skills required to design, implement, and manage secure workloads on Google Cloud. Candidates must demonstrate practical knowledge of identity and access management, network boundary controls, data encryption, threat monitoring, and compliance. The exam emphasizes real-world security decision-making, least-privilege access, defense-in-depth architecture, and the ability to balance security requirements with operational efficiency.

60 questions

120 min

5 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	60
Time limit	120 minutes (120s per question)
Passing score	Not published by the vendor — Not published by the provider (Google provides pass/fail results only; no numeric passing score is published)
Domains	5
Level	Professional
Question bank here	60 questions
Published format	50-60 multiple choice and multiple select questions; 2 hours (official page states format and length separately)
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Configure access	25%	Identity and Access Management roles, policies, and permissions Service accounts and key management Identity-Aware Proxy and external identity federation +2 more	15
Manage operations	19%	Cloud Audit Logs, Cloud Logging, and log sinks Cloud Monitoring alerts and incident response Security Command Center threat detection and remediation +2 more	11
Ensure data protection	23%	Encryption at rest and in transit using Cloud KMS Customer-managed encryption keys and customer-supplied encryption keys Secret Manager and sensitive data storage +2 more	14
Support compliance requirements	11%	Shared responsibility model and Google Cloud compliance reports Assured Workloads for regulated industries Access Approval and Access Transparency +2 more	7
Secure communications and establish boundary protection	22%	Shared VPC, VPC peering, firewall rules, and Cloud NAT Cloud VPN, Cloud Interconnect, and dedicated connectivity Google Cloud Armor, Cloud CDN, and load balancing security +2 more	13

The heaviest domain is Configure access at 25%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Active and listed on the official certification overview page as 'Cloud Security Engineer' (page title 'Professional Cloud Security Engineer Certification'); no update/retirement banner appears on its official page and Google publishes no exam-update date for it, though the overview page states generally that exams are being updated for product changes announced at Google Cloud Next '26 (April 2026). Format: 2 hours, 50-60 multiple choice/multiple select questions, English/Japanese; no case-study percentage is published for this exam. Retake policy per official exam terms: maximum 4 attempts in a 2-year period with 14-, 60-, then 365-day waits after successive failures; validity is 2 years (Professional) with the renewal window opening 60 days before expiration, and the official renewal FAQ lists shorter renewal exam and Google Skills continuing-education renewal as 'Not Available - Coming soon' for other professional certifications (standard exam is the published renewal path). Recommended experience: 3+ years industry experience including more than 1 year designing and managing solutions on Google Cloud; caveat: exam delivery is online-proctored or at a Pearson VUE test center, and Google does not publish this exam's code on official pages. Official exam page