Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Advanced

Prepare and test your skills

Google Cloud feature

EKM

Topic in 1 exam domain

X LinkedIn Facebook Reddit

An external key management integration that allows Cloud KMS to protect data using keys hosted in an external key manager.

Where this appears on the exam

1 subdomain in 1 of 5 domains

Domain 3
Ensuring data protection
~23% of exam
1. 3.2Managing encryption at rest, in transit, and in use
  - Creating and managing encryption keys for CMEK and EKM (e.g., key rotation and revocation, key import).

How learners score on this topic

Last updated October 23, 2026

Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Advanced

Prepare and test your skills

Google Cloud feature

EKM

Topic in 1 exam domain

X LinkedIn Facebook Reddit

An external key management integration that allows Cloud KMS to protect data using keys hosted in an external key manager.

Where this appears on the exam

1 subdomain in 1 of 5 domains

Domain 3
Ensuring data protection
~23% of exam
1. 3.2Managing encryption at rest, in transit, and in use
  - Creating and managing encryption keys for CMEK and EKM (e.g., key rotation and revocation, key import).

How learners score on this topic

Last updated October 23, 2026