PCSE study notes
- Configuring access Professional Cloud Security Engineer notes on Cloud Identity, Workforce Identity Federation, service accounts and Workload Identity Federation, authentication policy, IAM roles, conditions and deny policies, Access Context Manager, Policy Intelligence, Privileged Access Manager, the resource hierarchy and organization policies. 25%
- Securing communications and boundary protection Professional Cloud Security Engineer notes on Cloud NGFW, firewall policies, Identity-Aware Proxy, load balancers and SSL policies, Certificate Authority Service, Cloud Armor, Secure Web Proxy, Cloud DNS security, VPC design, VPC Service Controls, private connectivity and Cloud NAT. 22%
- Ensuring data protection Professional Cloud Security Engineer notes on Sensitive Data Protection, access controls for BigQuery, Cloud Storage and Cloud SQL, Secret Manager, instance metadata, encryption at rest and in transit, Cloud KMS, CMEK, Cloud HSM, Cloud EKM, CSEK, key rotation and import, Cloud Storage lifecycle, Confidential Computing and AI workload security. 23%
- Managing operations and threat detection Professional Cloud Security Engineer notes on CI/CD vulnerability scanning, Binary Authorization, hardened images and patching, posture management, Security Health Analytics custom modules, Cloud Audit Logs, log sinks, network logging, Cloud IDS, Packet Mirroring, Log Analytics, incident response and Security Command Center. 19%
- Supporting compliance requirements Professional Cloud Security Engineer notes on the shared responsibility and shared fate models, scoping environments for regulation, Assured Workloads, Access Transparency, Access Approval, Key Access Justifications, data residency, compliance reports, Audit Manager and mapping regulations to technical controls. 11%