Objective 2.2
PCSEConfiguring boundary segmentation
Objective 2.2 sits in Securing communications and establishing boundary protection, which carries 22% of the Cloud Security Engineer exam. The questions below are original, written from the official objective title above, and each explanation cites the Google Cloud page it rests on.
Objective title verbatim from the official objectives. Google Cloud exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An engineer notices that a workload inside a service perimeter still reaches a third-party SaaS API on the public internet. Why does the perimeter not stop it?
Correct.
Concept
A boundary is defined by the set of things it can see. A control wired into one provider's service front door has no reach over calls to anyone else's, whatever the network path looks like.
Why D
A service perimeter works specifically with Google Cloud managed services and does not block access to any third-party APIs or services on the internet.
Source
Google Cloud: Overview of VPC Service Controls, checked August 2026A service perimeter allows free communication within the perimeter but, by default, blocks communication to Google Cloud services across the perimeter. The perimeter works specifically with Google Cloud managed services. The perimeter doesn't block access to any third-party APIs or services on the internet.
Now you: objective 2.2 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A compliance team asks whether a service perimeter stops an outsider from learning Cloud Storage bucket names. What is the accurate answer?
Sample question 2 of 3
An administrator inside the perimeter reaches protected buckets from a VM, yet the Cloud console returns permission errors for the same buckets. What is missing?
Sample question 3 of 3
A team wants to learn which requests a proposed perimeter would break, without breaking any of them yet. What should they configure?
Full Cloud Security Engineer question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.