CS-NETSECESSOfficial Google Curriculum

Network Security Essentials

1 dayILTIntermediateLoading...

Overview

This course provides a practical guide to securing networks on Google Cloud. The course covers core network security principles and their application using Google Cloud's managed services. Network security concepts and best practices are explored through practical demonstrations and real-world application scenarios.

What You'll Learn

Describe the shared responsibility model and its practical implications for security on Google Cloud.
Design and implement secure network architectures with native services like Cloud NGFW and Cloud Armor.
Proactively detect and mitigate network threats using VPC Flow Logs and Cloud IDS.
Secure hybrid connectivity with advanced services like VPC Service Controls.
Leverage generative AI to enhance security operations and automation.

Who Should Attend

Cloud Network Engineer, Cloud Security Engineer - Anyone involved in designing, implementing, or managing network security on Google Cloud.

Prerequisites

Familiarity with foundational networking and Google Cloud concepts. Experience with the Google Cloud console and CLI is also beneficial.

Products Covered

Google Cloud NGFWCloud ArmorCloud IDSCloud NATPrivate Service ConnectVPC Service ControlsVPC Flow LogsFlow AnalyzerSecurity Command CenterGemini

Course Modules

Network Security Design and Architecture

Topics

Shared Responsibility and Due Diligence
Secure Architectures with Cloud NGFW

Learning Outcomes

Explain the shared responsibility model in depth, focusing on common customer configuration pitfalls.
Design and implement secure network architectures using Cloud NGFW and microsegmentation.

Activities

1 discussion1 demo

Elevating Network Security with Managed Services

Topics

Cloud Armor Configurations
Secure Private Connectivity
Proactive Intrusion Detection

Learning Outcomes

Apply advanced Cloud Armor features to protect against sophisticated web attacks and bot traffic.
Configure Cloud NAT and Private Service Connect to meet strict security and compliance requirements.
Implement Cloud IDS to proactively detect and analyze malicious network activity and compliance.

Activities

1 demo

Proactive Threat Detection and Response

Topics

Network Monitoring and Threat Analysis
Implementing Secure Hybrid Connectivity

Learning Outcomes

Analyze network traffic patterns for potential threats using advanced queries of VPC Flow Logs and the Flow Analyzer.
Implement secure hybrid connectivity between on-premises and Google Cloud environments for large-scale deployments.

Activities

1 demo

AI for Modern Network Security

Topics

The Role of Generative AI in Network Security
AI-Powered Workflows and Best Practices

Learning Outcomes

Leverage AI-assisted threat intelligence to accelerate the investigation and remediation of network security events.
Discuss the ethical considerations and best practices for using AI in network security, and demonstrate its use in practical, network-specific scenarios.

Activities

1 discussion2 demos