Professional Cloud Security Engineer
Professional Cloud Security Engineer
Money Back Guarantee
98% Success Rate
Real Questions
1
Configuring access 25%
1.1
Managing Cloud Identity
2 subtopics1.1.1Google Cloud Directory Sync and SSO
1.1.2User Lifecycle Management
Learning Objectives
- Configure Google Cloud Directory Sync and implement SSO
- Manage super administrator account
- Automate user lifecycle management
- Administer accounts programmatically
- Configure Workforce Identity Federation
1.2
Managing service accounts
1 subtopics1.2.1Service Account Security
Learning Objectives
- Secure and protect service accounts including defaults
- Identify scenarios requiring service accounts
- Create, disable, and authorize service accounts
- Secure and audit service account keys
- Manage short-lived credentials
- Configure Workload Identity Federation
- Manage service account impersonation
1.3
Managing authentication
1 subtopics1.3.1Authentication Policies
Learning Objectives
- Create password and session management policy
- Set up SAML and OAuth
- Configure and enforce 2-step verification
1.4
Managing and implementing authorization controls
1 subtopics1.4.1IAM and Access Control
Learning Objectives
- Manage privileged roles and separation of duties
- Manage IAM and ACL permissions
- Grant permissions using IAM conditions and deny policies
- Define access control at all resource levels
- Configure Access Context Manager
- Apply Policy Intelligence
- Manage permissions through groups
- Configure Privileged Access Manager
1.5
Defining the resource hierarchy
1 subtopics1.5.1Resource Organization
Learning Objectives
- Manage folders and projects at scale
- Manage pre-built or custom organization policies
- Use resource hierarchy for access control and permissions inheritance
Domain Hands-on Skills
Configure Cloud Identity and SSOImplement service account securitySet up IAM policies with conditionsDesign resource hierarchyConfigure Access Context Manager
Common Mistakes to Avoid
- Over-privileged service accounts
- Not rotating service account keys
- Incorrect IAM inheritance assumptions
- Missing MFA enforcement
2
Securing communications and establishing boundary protection 22%
3
Ensuring data protection 23%
4
Managing operations 19%
5