No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every Professional Cloud Security Engineer flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the Professional Cloud Security Engineer Practice Test purchase options.
Section 1
Manage Cloud Identity federation and user lifecycle
Preview
Preview: 1. Configuring Access (~25%)
Preview includes- 4 of 7 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Cloud Identity and Google Workspace identity model
- Google Cloud Directory Sync (GCDS)
- Third-party SSO and federation
- Super administrator account protection
Overview
Covers identity lifecycle for human users: synchronize identities, federate authentication, protect the highest-privilege administrator accounts, and automate joiner/mover/leaver processes.
Core Concepts
- GCDS synchronizes users, groups, and related directory data from an external directory into Google Cloud Identity/Google Workspace; synchronization is not the same as authentication.
- SSO with a third-party identity provider centralizes user authentication; SAML is commonly used for browser SSO, while OAuth/OIDC are authorization/authentication protocol families used for application access.
- Protect super administrator accounts with strong 2-Step Verification, minimal daily use, separate admin identities, recovery controls, and monitoring.
Exam Tips
- When the stem says “existing corporate directory,” ask whether it needs synchronization, SSO, or both.
- Prefer group-based access and automated lifecycle management over one-off direct grants.
Section 1 continues in Pro.Unlock Pro to read the full Manage Cloud Identity federation and user lifecycle lesson plus every remaining Professional Cloud Security Engineer Study Guide section.
Unlock with Pro
Section 2
Protect service accounts
Pro
Protect service accounts unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Configure strong user authentication
Pro
Configure strong user authentication unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Apply IAM roles, conditions, and deny policies
Pro
Apply IAM roles, conditions, and deny policies unlocks with Pro.Unlock Pro to read the full 9 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Use resource hierarchy and organization policy
Pro
Use resource hierarchy and organization policy unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Use Privileged Access Manager
Pro
Use Privileged Access Manager unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Configure Cloud NGFW and Cloud Armor
Pro
Configure Cloud NGFW and Cloud Armor unlocks with Pro.Unlock Pro to read the full 9 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Use Identity-Aware Proxy
Pro
Use Identity-Aware Proxy unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Segment with VPCs, Shared VPC, and firewall policy
Pro
Segment with VPCs, Shared VPC, and firewall policy unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 10
Configure VPC Service Controls
Pro
Configure VPC Service Controls unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Establish hybrid private connectivity
Pro
Establish hybrid private connectivity unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Use Private Google Access and Private Service Connect
Pro
Use Private Google Access and Private Service Connect unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 13
Use Cloud NAT for controlled outbound access
Pro
Use Cloud NAT for controlled outbound access unlocks with Pro.Unlock Pro to read the full 6 topics flashcard-note study guide for this section.
Unlock with Pro
Section 14
Discover and de-identify sensitive data
Pro
Discover and de-identify sensitive data unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 15
Secure secrets with Secret Manager
Pro
Secure secrets with Secret Manager unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 16
Choose Google-managed, CMEK, or external keys
Pro
Choose Google-managed, CMEK, or external keys unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 17
Manage key rotation and revocation
Pro
Manage key rotation and revocation unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 18
Enable Confidential Computing
Pro
Enable Confidential Computing unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 19
Secure AI workloads
Pro
Secure AI workloads unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 20
Scan builds for vulnerabilities
Pro
Scan builds for vulnerabilities unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 21
Use Binary Authorization
Pro
Use Binary Authorization unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 22
Detect policy drift at scale
Pro
Detect policy drift at scale unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 23
Design security logging
Pro
Design security logging unlocks with Pro.Unlock Pro to read the full 9 topics flashcard-note study guide for this section.
Unlock with Pro
Section 24
Use Security Command Center
Pro
Use Security Command Center unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro
Section 25
Export logs to external security systems
Pro
Export logs to external security systems unlocks with Pro.Unlock Pro to read the full 9 topics flashcard-note study guide for this section.
Unlock with Pro
Section 26
Apply the shared responsibility model
Pro
Apply the shared responsibility model unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 27
Use Assured Workloads and organization policy
Pro
Use Assured Workloads and organization policy unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 28
Use Access Transparency and Access Approval
Pro
Use Access Transparency and Access Approval unlocks with Pro.Unlock Pro to read the full 7 topics flashcard-note study guide for this section.
Unlock with Pro
Section 29
Map compliance requirements to controls
Pro
Map compliance requirements to controls unlocks with Pro.Unlock Pro to read the full 8 topics flashcard-note study guide for this section.
Unlock with Pro