Administrators configure password policies within Cloud Identity or Google Workspace to enforce baseline credential security across an organization. These policies set minimum password lengths…
The GCP resource hierarchy is a tree structure that starts with the organization node at the very top, representing your entire company or enterprise. Below the organization sit folders, which…
Google Cloud Directory Sync (GCDS) is a tool that synchronizes users, groups, and other directory objects from an existing LDAP or Microsoft Active Directory server into Cloud Identity…
Service accounts are special identities that applications and virtual machines use to make API calls to Google Cloud services. Every GCP project comes with a default service account that gets atta…
In GCP, IAM roles are collections of permissions that determine what actions a user or service can take on resources. Privileged roles, such as roles/owner or roles/editor, grant broad access and …
A Virtual Private Cloud (VPC) network is your private, isolated space in Google Cloud. You control its security by defining firewall rules. These rules act as a gatekeeper, deciding which traf…
When building AI and machine learning systems, teams must protect both the data that feeds the models and the models themselves from accidental or intentional misuse. Training data often contains sens…
Several Google Cloud services generate logs that provide visibility into network traffic and potential threats. VPC flow logs record metadata about the network connections flowing to and from virt…
Meeting compliance standards requires selecting the appropriate infrastructure controls for processing, storage, and data transmission. When choosing compute resources, organizations can select **Shie…
The network perimeter is the boundary between a trusted internal network and the untrusted internet, and GCP provides several services to control what crosses that boundary. **Cloud Next Generation Fi…
This section covers connecting resources in different Google Cloud projects without using the public internet. Shared VPC allows a centralized networking model. A host project holds the **VPC ne…
Sensitive Data Protection scans structured and unstructured storage locations to identify sensitive elements such as personally identifiable information (PII). The inspection engine evaluates data…
When a team builds container images or deploys artifacts, they can automatically check for known vulnerabilities before the code reaches production. The pipeline uses Container Analysis to scan im…
StudyCerts
StudyCerts