Objective 2.1
PCSEDesigning and configuring perimeter security
Objective 2.1 sits in Securing communications and establishing boundary protection, which carries 22% of the Cloud Security Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.
Objective title verbatim from the official objectives. Google Cloud exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A backend service already carries a backend security policy and the team wants a second Cloud Armor layer in front of it. Which pairing is supported?
Correct.
Concept
Layering controls helps only when the layers sit at different points on the path. Two instances of the same layer would have to be reconciled, so one of each kind is what the platform accepts.
Why A
A backend service can have two service-level security policies attached at once, but never two backend security policies or two edge security policies at the same time.
Source
Google Cloud: Cloud Armor security policy overview, checked August 2026A backend service can have two service-level security policies associated with it at the same time, but it can't have two backend security policies or two edge security policies at the same time.
Now you: objective 2.1 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An engineer tries to delete a Cloud Armor security policy that is still attached to a backend service. What is the result?
Sample question 2 of 3
A retail team serves cached responses through Cloud CDN and still needs address filtering applied to them. Which policy type runs before the cache is consulted?
Sample question 3 of 3
A deny rule on a classic proxy Network Load Balancer is configured to return 403. An analyst checks what matching clients actually receive. What happens?
Full Cloud Security Engineer question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.