Google Professional Cloud Security Engineer Exam Guide

Keamanan di lingkungan cloud menjadi aspek krusial bagi perusahaan yang mengadopsi teknologi Google Cloud Platform (GCP). Banyak organisasi menghadapi tantangan dalam mengelola identitas dan akses, melindungi data sensitif, mengamankan jaringan cloud, serta mendeteksi dan merespons ancaman keamanan. Tanpa pemahaman yang baik mengenai praktik keamanan cloud, perusahaan dapat menghadapi risiko seperti kebocoran data, serangan siber, serta kegagalan dalam memenuhi kepatuhan terhadap regulasi industri.

Training Google Professional Cloud Security Engineer Exam Guide ini dirancang untuk membekali peserta dengan keterampilan dan wawasan mendalam mengenai strategi keamanan dalam Google Cloud, serta membantu mereka mempersiapkan diri untuk ujian sertifikasi Google Professional Cloud Security Engineer. Peserta akan mempelajari cara mengelola identitas dan akses menggunakan IAM, mengamankan sumber daya cloud, serta memahami keamanan jaringan, enkripsi data, dan pemantauan keamanan. Selain itu, peserta juga akan mendapatkan pemahaman tentang praktik terbaik dalam menerapkan kebijakan keamanan, logging, dan respons insiden di lingkungan GCP.

Dengan kombinasi materi berbasis praktik dan studi kasus, training ini akan memberikan pemahaman menyeluruh tentang bagaimana menerapkan keamanan cloud yang kuat, meningkatkan kesadaran terhadap risiko, serta membangun infrastruktur cloud yang aman dan sesuai dengan standar industri.

OBJECTIVES

1. Memahami konsep keamanan cloud dan bagaimana menerapkannya di Google Cloud Platform (GCP)
2. Meningkatkan keterampilan dalam manajemen identitas dan akses (IAM) untuk memastikan hanya pengguna yang berwenang yang dapat mengakses sumber daya cloud
3. Memahami strategi pemantauan, logging, dan respons insiden untuk mendeteksi dan mengatasi ancaman keamanan secara proaktif
4. Mampu mengamankan komputasi, penyimpanan, dan jaringan dengan menerapkan kontrol keamanan dan kebijakan enkripsi

AUDIENCE

1. Cloud Security Engineer
2. Cybersecurity Analyst
3. Google Cloud Administrator
4. DevOps Engineer
5. IT Security Specialist

CONTENT

1. Overview of Google Cloud Platform

1.1 Types of Cloud Services
1.2 Cloud Computing vs. Data Center Computing

2. Google Cloud Computing Services

2.1 Computing Components of Google Cloud Platform
2.2 Storage Components of Google Cloud Platform
2.3 Networking Components of Google Cloud Platform
2.4 Additional Components of Google Cloud Platform

3. Projects, Service Accounts, and Billing

3.1 How GCP Organizes Projects and Accounts
3.2 Roles and Identities
3.3 Service Accounts
3.4 Billing
3.5 Enabling APIs
3.6 Provisioning Stackdriver Workspaces

4. Introduction to Computing in Google Cloud

4.1 Compute Engine
4.2 App Engine
4.3 Kubernetes Engine
4.4 Cloud Functions

5. Computing with Compute Engine Virtual Machines

5.1 Creating and Configuring Virtual Machines with the Console
5.2 Creating and Configuring Virtual Machines with Cloud SDK
5.3 Basic Virtual Machine Management
5.4 Guidelines for Planning, Deploying, and Managing Virtual

6. Managing Virtual Machines

6.1 Managing Single Virtual Machine Instances
6.2 Introduction to Instance Groups
6.3 Guidelines for Managing Virtual Machines

7. Computing with Kubernetes

7.1 Introduction to Kubernetes Engine
7.2 Deploying Kubernetes Clusters
7.3 Deploying Application Pods
7.4 Monitoring Kubernetes

8. Managing Kubernetes Clusters

8.1 Viewing the Status of a Kubernetes Cluster
8.2 Adding, Modifying, and Removing Nodes
8.3 Adding, Modifying, and Removing Pods
8.4 Adding, Modifying, and Removing Services
8.5 Viewing the Image Repository and Image Details

9. Computing with App Engine

9.1 App Engine Components
9.2 Deploying an App Engine Application
9.3 Scaling App Engine Applications
9.4 Splitting Traffic between App Engine Versions

10. Computing with Cloud Functions

10.1 Introduction to Cloud Functions
10.2 Cloud Functions Receiving Events from Cloud Storage
10.3 Cloud Functions Receiving Events from Pub/Sub

11. Planning Storage in the Cloud

11.1 Types of Storage Systems
11.2 Storage Data Models
11.3 Choosing a Storage Solution: Guidelines to Consider

12. Deploying Storage in Google Cloud Platform

12.1 Deploying and Managing Cloud SQL
12.2 Deploying and Managing Datastore
12.3 Deploying and Managing BigQuery
12.4 Deploying and Managing Cloud Spanner
12.5 Deploying and Managing Cloud Pub/Sub
12.6 Deploying and Managing Cloud Bigtable
12.7 Deploying and Managing Cloud Dataproc
12.8 Managing Cloud Storage

13. Loading Data into Storage

13.1 Loading and Moving Data to Cloud Storage
13.2 Importing and Exporting Data
13.3 Streaming Data to Cloud Pub/Sub

14. Networking in the Cloud: Virtual Private Clouds and Virtual Private Networks

14.1 Creating a Virtual Private Cloud with Subnets
14.2 Deploying Compute Engine with a Custom Network
14.3 Creating Firewall Rules for a Virtual Private Cloud
14.4 Creating a Virtual Private Network

15. Networking in the Cloud: DNS, Load Balancing, and IP Addressing

15.1 Configuring Cloud DNS
15.2 Configuring Load Balancer
15.3 Managing IP Addresses

16. Deploying Applications with Cloud Launcher and Deployment Manager

16.1 Deploying a Solution Using Cloud Launcher
16.2 Deploying an Application Using Deployment Manager

17. Configuring Access and Security

17.1 Managing Identity and Access Management
17.2 Managing Service Accounts

18. Monitoring, Logging, and Cost Estimating

18.1 Monitoring with Stackdriver
18.2 Logging with Stackdriver
18.3 Using Cloud Diagnostics
18.4 Using the Pricing Calculator