Google Cloud Professional Cloud Security Engineer Cert Prep (2024)
2h 10mIntermediate2024-02-26
Authors
Dan Sullivan
Enterprise Architect, Big Data Expert
Course details
As more workloads migrate to the cloud, there is increasing demand for technical professionals to understand cloud security. In this course, enterprise architect and big data expert Dan Sullivan provides an overview of Google Cloud security concepts, including identity management, network security, application security, and operations management. Learn core security concepts, like authentication, authorization, firewalls, and access controls, as well as how to use those concepts in Google Cloud. In addition to conceptual overviews, dive into hands-on demonstrations using Google Cloud Services. This course is designed to be a study aid to help you prepare to earn your Google Cloud Professional Cloud Security Engineer certification.
Skills covered
CryptographyGoogle Cloud PlatformCloud SecurityNetwork SecuritySoftware Development ToolsGoogleCloud PlatformsCybersecurityCert PrepCloud ComputingSoftware Development
Concepts
Introduction
- Introduction
- About the exam
Configuring Access within a Cloud Solution Environment - Managing Identities and Authentication
- Introduction to identity and access management
- Types of identities
- Introduction to Cloud Identity
- Working with third-party identity providers
- Introduction to SAML and OAuth
Configuring Access within a Cloud Solution Environment - Managing Authorizations
- Introduction to roles and permissions
- Viewing roles and permissions
- IAM roles in Google Cloud
- Creating a custom role
- Managing roles and using groups
- Learn about the resource hierarchy and policies
Configuring Access within a Cloud Solution Environment - Managing Service Accounts
- When to use service accounts
- Managing service account keys
- Using short-lived credentials
- Workload identity federation
Configuring Perimeter and Boundary Security
- Introduction to basic networking concepts
- Learn about public vs. private addressing
- Firewall rules and hierarchical firewall policies
- DNS security settings
- Cloud Armor and web application firewalls
- VPC peering and shared VPCs
- Cloud NAT and network address translation
- Private service access
Ensuring Data Protection
- Cloud Storage access controls
- BigQuery access controls
- Cloud SQL access controls
- Cloud SQL proxy in Google Cloud
- Data loss prevention in Google Cloud
- Encryption at rest in Google Cloud
Managing Operations in a Cloud Solution Environment
- Introduction to CI CD pipelines
- Vulnerability scanning
- Managing secrets
- Logging and monitoring for security
- Key management
Supporting Compliance Requirements
- Introduction to regulations and compliance
- Learn about the shared responsibility model
- Complying with regionalization requirements
Conclusion
- Additional study resources
- What's next