Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide
  • Table Of Contents Toc
  • Feedback & Rating feedback
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

By : Ankush Chowdhary, Prashant Kulkarni
4.8 (22)
Buy this Book
close
close
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide

4.8 (22)
By: Ankush Chowdhary, Prashant Kulkarni
Buy this Book

Overview of this book

Google Cloud security offers powerful controls to assist organizations in establishing secure and compliant cloud environments. With this book, you’ll gain in-depth knowledge of the Professional Cloud Security Engineer certification exam objectives, including Google Cloud security best practices, identity and access management (IAM), network security, data security, and security operations. The chapters go beyond the exam essentials, helping you explore advanced topics such as Google Cloud Security Command Center, the BeyondCorp Zero Trust architecture, and container security. With step-by-step explanations, practical examples, and practice exams to help you improve your skills for the exam, you'll be able to efficiently review and apply key concepts of the shared security responsibility model. Finally, you’ll get to grips with securing access, organizing cloud resources, network and data security, and logging and monitoring. By the end of this book, you'll be proficient in designing, developing, and operating security controls on Google Cloud and gain insights into emerging concepts for future exams.
Table of Contents (19 chapters)
close
close
close
Preface
Icon
Preface
Icon
Who this book is for
Icon
What this book covers
Icon
To get the most out of this book
Icon
Download the color images
Icon
Conventions used
Icon
Get in touch
Icon
Share your thoughts
Lock Free Chapter
1
Chapter 1: About the GCP Professional Cloud Security Engineer Exam
chevron up
Icon
Chapter 1: About the GCP Professional Cloud Security Engineer Exam
Icon
Benefits of being certified
Icon
Registering for the exam
Icon
Some useful tips on how to prepare
Icon
Summary
Icon
Further reading
2
Chapter 2: Google Cloud Security Concepts
Icon
Chapter 2: Google Cloud Security Concepts
Icon
Overview of Google Cloud security
Icon
Shared security responsibility
Icon
Security by design
Icon
Threat and vulnerability management
Icon
Summary
Icon
Further reading
3
Chapter 3: Trust and Compliance
Icon
Chapter 3: Trust and Compliance
Icon
Establishing and maintaining trust
Icon
Access Transparency and Access Approval
Icon
Security and privacy of data
Icon
Third-party risk assessments
Icon
Compliance in the cloud
Icon
Summary
Icon
Further reading
4
Chapter 4: Resource Management
Icon
Chapter 4: Resource Management
Icon
Overview of Google Cloud Resource Manager
Icon
Understanding resource hierarchy
Icon
Applying constraints using the Organization Policy Service
Icon
Asset management using Cloud Asset Inventory
Icon
Best practices and design considerations
Icon
Summary
Icon
Further reading
5
Chapter 5: Understanding Google Cloud Identity
Icon
Chapter 5: Understanding Google Cloud Identity
Icon
Overview of Cloud Identity
Icon
Securing your account
Icon
Directory management
Icon
Summary
Icon
Further reading
6
Chapter 6: Google Cloud Identity and Access Management
Icon
Chapter 6: Google Cloud Identity and Access Management
Icon
Overview of IAM
Icon
Service accounts
Icon
IAM policy bindings
Icon
Tag-based access control
Icon
Cloud Storage ACLs
Icon
IAM APIs
Icon
IAM logging
Icon
Summary
Icon
Further reading
7
Chapter 7: Virtual Private Cloud
Icon
Chapter 7: Virtual Private Cloud
Icon
Overview of VPC
Icon
Google Cloud regions and zones
Icon
VPC deployment models
Icon
Micro-segmentation
Icon
Cloud DNS
Icon
Load balancers
Icon
Hybrid connectivity options
Icon
Best practices and design considerations
Icon
Summary
Icon
Further reading
8
Chapter 8: Advanced Network Security
Icon
Chapter 8: Advanced Network Security
Icon
Private Google Access
Icon
Identity-Aware Proxy
Icon
Cloud NAT
Icon
Google Cloud Armor
Icon
Summary
Icon
Further reading
9
Chapter 9: Google Cloud Key Management Service
Icon
Chapter 9: Google Cloud Key Management Service
Icon
Overview of Cloud KMS
Icon
Encryption and key management in Cloud KMS
Icon
Key management options
Icon
Symmetric key encryption
Icon
Asymmetric key encryption
Icon
Importing a key (BYOK)
Icon
Key lifecycle management
Icon
Key IAM permissions
Icon
Cloud HSM
Icon
Cloud EKM
Icon
Cloud KMS best practices
Icon
Cloud KMS API
Icon
Cloud KMS logging
Icon
Summary
Icon
Further reading
10
Chapter 10: Cloud Data Loss Prevention
Icon
Chapter 10: Cloud Data Loss Prevention
Icon
Overview of Cloud DLP
Icon
DLP architecture options
Icon
Cloud DLP terminology
Icon
Creating a Cloud DLP inspection template
Icon
Best practices for inspecting sensitive data
Icon
Inspecting and de-identifying PII data
Icon
Tutorial: How to de-identify and tokenize sensitive data
Icon
DLP use cases
Icon
Best practices for Cloud DLP
Icon
Data exfiltration and VPC Service Controls
Icon
Best practices for VPC Service Controls
Icon
Summary
Icon
Further reading
11
Chapter 11: Secret Manager
Icon
Chapter 11: Secret Manager
Icon
Overview of Secret Manager
Icon
Managing secrets and versions
Icon
Accessing a secret
Icon
Secret replication policy
Icon
CMEKs for Secret Manager
Icon
Best practices for secret management
Icon
Secret Manager logs
Icon
Summary
Icon
Further reading
12
Chapter 12: Cloud Logging
Icon
Chapter 12: Cloud Logging
Icon
Introduction to Google Cloud logging
Icon
Log categories
Icon
Log management
Icon
Logging and auditing best practices
Icon
Summary
Icon
Further reading
13
Chapter 13: Image Hardening and CI/CD Security
Icon
Chapter 13: Image Hardening and CI/CD Security
Icon
Overview of image management
Icon
Custom images for Google Compute Engine
Icon
Image management pipeline
Icon
Controlling access to the images
Icon
Image lifecycle
Icon
Enforcing lifecycle policies
Icon
Securing a CI/CD pipeline
Icon
Best practices for CI/CD security
Icon
Shielded VMs
Icon
Confidential computing
Icon
Summary
Icon
Further reading
14
Chapter 14: Security Command Center
Icon
Chapter 14: Security Command Center
Icon
Overview of SCC
Icon
Core services
Icon
Cloud Asset Inventory
Icon
Detecting security misconfigurations and vulnerabilities
Icon
Threat detection
Icon
Continuous compliance monitoring
Icon
Automating a findings response
Icon
Summary
Icon
Further reading
15
Chapter 15: Container Security
Icon
Chapter 15: Container Security
Icon
Overview of containers
Icon
Container basics
Icon
What is Kubernetes?
Icon
Container security
Icon
GKE security features
Icon
Container security best practices
Icon
Summary
Icon
Further reading
16
Google Professional Cloud Security Engineer Exam – Mock Exam I
Icon
Google Professional Cloud Security Engineer Exam – Mock Exam I
17
Google Professional Cloud Security Engineer Exam – Mock Exam II
Icon
Google Professional Cloud Security Engineer Exam – Mock Exam II
Icon
Why subscribe?
18
Other Books You May Enjoy
Icon
Other Books You May Enjoy
Icon
Share your thoughts

1

About the GCP Professional Cloud Security Engineer Exam

The rate of migration to the cloud is growing exponentially. The cloud is something of a Masai Mara right now, and we don’t expect that this will slow down. New projects are often now born in the cloud and end up staying there.

Note

The Masai Mara is an iconic African savanna landscape characterized by an annual wildebeest and zebra migration of over 1.5 million animals.

This growing trend has created new opportunities, specifically for cloud security. There is now soaring demand for cloud security professionals. It is not news to those in the field of cybersecurity that cloud security skills are not only in demand but scarce. Cybersecurity professionals with cloud security skills are now very sought after. Security used to be the number one obstacle to organizations moving to the cloud. Now, security is the top reason that organizations want to move to the cloud. This only increases the demand for cloud security professionals.

Note

For more details see 13 Cloud Computing Risks & Challenges Businesses Are Facing In These Days by Bernardita Calzon, published on June 6, 2022 on the datapine website (https://packt.link/xlnX6).

The aim of this book is to help cloud security professionals to pass the Google Cloud Platform (GCP) Professional Cloud Security Engineer exam. The topics covered in this book not only include exam-specific content but also extend to some optional GCP cloud security topics.

This chapter covers why you should take this exam, how to register, and what to expect in the exam.

In this chapter, we will cover the following topics:

  • The benefits of being a certified cloud security engineer
  • How to register for the exam
  • What to expect and some helpful tips
Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Official Google Cloud Certified Professional Cloud Security Engineer Exam Guide
End of Section 1
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon