Google Cloud Cloud Security Specialist Certification

Module 1: Google Cloud Security Fundamentals

• Cloud security principles
• Shared Responsibility Model
• Google Cloud security architecture
• Security best practices
• Risk management

Module 2: Identity and Access Management (IAM)

• IAM roles and permissions
• Custom roles
• Service accounts
• Identity federation
• Least privilege principles

Module 3: Organization and Resource Security

• Organization hierarchy
• Resource Manager
• Policies
• Access governance
• Resource isolation

Module 4: Network Security

• Virtual Private Cloud (VPC)
• Firewall rules
• Private Google Access
• Cloud NAT
• Secure network design

Module 5: Data Protection

• Encryption at rest
• Encryption in transit
• Cloud Key Management Service (KMS)
• Secret Manager
• Data classification

Module 6: Compute Security

• Compute Engine security
• Secure VM configuration
• Shielded VMs
• OS Login
• Secure boot

Module 7: Container Security

• Google Kubernetes Engine (GKE) security
• Workload Identity
• Image security
• Binary Authorization
• Runtime protection

Module 8: Application Security

• Secure application architecture
• API security
• Authentication
• Authorization
• Secure development practices

Module 9: Security Monitoring

• Cloud Monitoring
• Cloud Logging
• Security dashboards
• Alerts
• Log analysis

Module 10: Threat Detection

• Security Command Center
• Event Threat Detection
• Vulnerability assessment
• Threat intelligence
• Security insights

Module 11: Compliance and Governance

• Security governance
• Compliance frameworks
• Organizational policies
• Audit logging
• Risk management

Module 12: Security Operations

• Security operations workflow
• Incident management
• Security investigations
• Response planning
• Operational security

Module 13: Cloud Armor and DDoS Protection

• Cloud Armor
• Web application protection
• DDoS mitigation
• Security policies
• Traffic filtering

Module 14: Secure Storage Services

• Cloud Storage security
• Access controls
• Bucket policies
• Secure data sharing
• Data lifecycle management

Module 15: Database Security

• Cloud SQL security
• Firestore security
• BigQuery access controls
• Database encryption
• Secure connectivity

Module 16: DevSecOps

• Secure CI/CD pipelines
• Security automation
• Code scanning
• Infrastructure security
• Deployment validation

Module 17: Security Automation

• Automated policy enforcement
• Security workflows
• Event-driven automation
• Infrastructure automation
• Continuous security monitoring

Module 18: Incident Response

• Security incident lifecycle
• Root cause analysis
• Recovery planning
• Business continuity
• Lessons learned

Module 19: Security Optimization

• Performance versus security
• Security assessments
• Configuration reviews
• Cost optimization
• Operational improvements

Module 20: Enterprise Security Architecture

• Enterprise cloud security design
• Zero Trust principles
• Secure hybrid cloud
• Multi-project security
• Architecture best practices

Module 21: Identity Federation and Access Control

• Single Sign-On (SSO)
• External identities
• Workforce Identity Federation
• Conditional access
• Identity lifecycle

Module 22: Cloud Audit and Reporting

• Audit logging
• Security reporting
• Compliance reporting
• Dashboard creation
• Operational metrics

Module 23: Advanced Security Best Practices

• Security hardening
• Operational resilience
• Threat prevention
• Continuous improvement
• Enterprise recommendations

Module 24: End-to-End Google Cloud Security Implementation

• Security architecture planning
• Environment hardening
• Identity implementation
• Monitoring and response
• Security optimization