This section of the course introduces Google Cloud's foundational security principles, including the Zero Trust model, the shift from traditional shared responsibility to a modern Shared Fate partnership, the types of infrastructure-level threats mitigated at scale, and the three Pillars of Trust: Access Transparency, Access Approval, and Compliance.

This section of the course covers configuring Google Cloud identity services to manage workforce access, including Cloud Identity editions, user synchronization via GCDS and Single Sign-On (SSO), and syncless authentication through Workforce Identity Federation. You will also explore Managed Service for Microsoft Active Directory, user and group management, and critical authentication best practices like Multi-Factor Authentication (MFA).

Master Google Cloud's fundamental security perimeter through Identity and Access Management (IAM) and resource hierarchy governance. In this module, you will configure basic, predefined, and custom roles, and apply context-aware IAM Conditions. You will evaluate the differences between IAM Allow/Deny policies and governance-focused Organization Policies. Finally, you will leverage Policy Intelligence tools—Troubleshooter, Analyzer, Recommender, and Simulator—to diagnose access, test changes, and strictly enforce the principle of least privilege.

This module focuses on securing your cloud network perimeter and protecting data in transit. You will explore how to design secure, isolated Virtual Private Cloud (VPC) architectures and control traffic flow using Cloud Next-Generation Firewall (NGFW) policies. The module also covers building a Zero-Trust perimeter to prevent data exfiltration and setting up private access pathways for secure application connectivity. Finally, you will learn how to actively monitor your environment and use advanced threat protection tools to detect and respond to network-level risks.

Course review