Some useful tips on how to prepare
Cloud security exams are different from those for other security certifications. They require both depth and breadth of knowledge in multiple security domains. Most vendor security certifications focus on the product, but the GCP Professional Cloud Security Engineer exam focuses on domains such as identity and access management, data protection, network security, logging and monitoring, and security operations. It is important for those attempting the exam to have a sound understanding of the foundational security concepts. This book assumes that you already have basic knowledge of these concepts; if you don’t, it’s highly encouraged that you gain that knowledge before attempting the exam.
Every individual has a different way to prepare and study, but it’s advised that you follow the structure laid out in this book and build knowledge in the areas covered. If you are familiar with GCP security, you can skip chapters and/or read them in any order. For those who are new to GCP, it is highly recommended that you follow the sequence of chapters.
The GCP certification page (https://packt.link/WlaJJ) for the Professional Cloud Security Engineer exam contains some helpful details on the exam syllabus, an exam guide, and sample questions. Do take the time to read those as they offer insights. The content of this book is based on the exam blueprint.
The exam questions are multiple-choice and based on real-world scenarios. The test is based on your knowledge of GCP security products and technology. The topics and options can range from cloud security best practices and security configuration to product-specific security controls and how you would meet compliance objectives. The exam is geared toward what cloud security engineers experience day to day while performing their roles.
This book will help you prepare for the range of questions in the exam, and each chapter has a section to test your knowledge. Nothing compares to having hands-on experience; therefore, it is highly encouraged that you create a free GCP account if you don’t already have one and spend some time playing around with GCP’s security products. Google Cloud Skills Boost has a great collection of GCP security labs, and that collection is recommended for you to get some hands-on experience. In each chapter, there are links to whitepapers and relevant Google Cloud Skills Boost for you to complete. Please note that Google Cloud Skills Boost is a paid service; you can either buy a subscription or pay for each lab.
Another useful resource is courses offered by Google Cloud Skills Boost. In the Further reading section of each chapter, you will find links to Google’s official courses that are offered through Google Cloud Skills Boost. For those who are new to GCP or familiar with another cloud provider, it is highly recommended that you do some introductory GCP courses from Google Cloud Skills Boost. They will help you build a sound understanding of how GCP is different and what capabilities are offered.
Finally, some key things to remember for the exam. Many of you will already know this, but remember to read the questions very carefully. Most questions have a scenario to paint a picture, but the actual question that is asked is usually in the last line. For example, a question may describe how developers in an organization are building an application that stores sensitive data and how developers and end users access it. It is important to focus on aspects such as who the user is (the developer), how they access the application (by identity and access control), and what needs to be protected (the sensitive data). Extracting such information will help you identify the solution that addresses all those areas.
Always use the option of marking the question for later if you are not sure. Sometimes, the next question is asked in a way that answers the previous question. In that case, you can mark both questions to come back to later and then revisit them before you hit submit. Do keep some time at the end to revisit the questions. Often, when you do 60+ questions, you tend to overlook certain things. Giving yourself an opportunity to check your answers will help.