diff --git a/menu_example/tests/src/Functional/MenuExampleTest.php b/menu_example/tests/src/Functional/MenuExampleTest.php
index b0fccc6..206accc 100644
--- a/menu_example/tests/src/Functional/MenuExampleTest.php
+++ b/menu_example/tests/src/Functional/MenuExampleTest.php
@@ -105,6 +105,12 @@ class MenuExampleTest extends BrowserTestBase {
     $this->drupalGet(Url::fromRoute('examples.menu_example.permissioned_controlled'));
     $assert->statusCodeEquals(200);
     $assert->pageTextContains('This menu entry will not show and the page will not be accessible');
+
+    // We've already determined that the custom access route is reachable so now
+    // we log out and make sure it tells us 403 because we're not authenticated.
+    $this->drupalLogout();
+    $this->drupalGet(Url::fromRoute('examples.menu_example.custom_access_page'));
+    $assert->statusCodeEquals(403);
   }
 
 }