Chapter 5 of 6 · Google Cloud Digital Leader
Trust and Security with Google Cloud
Threats, cloud security concepts, encryption, IAM, SecOps and Google's defense-in-depth offerings.
- 5topics
- 20 minfast track
- 1diagrams and exhibits
- 18%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Cyber Threats and Cloud Security BasicsCyber threats and their business impact, cloud versus on-premises security, and control, compliance, confidentiality, integrity…4 min
- 2Security Terms, Encryption and IdentityKey cloud security terms, encryption at rest, in transit and in use, authentication versus authorization versus auditing, and…4 min
- 3Google's Secure-by-Design Cloud and AI SecurityGoogle's secure-by-design cloud, how it secures every layer of the AI stack, and AI security offerings: Gemini in SecOps, AI…4 min
- 4Threat Intelligence and Security OperationsGoogle Threat Intelligence and its sources, Security Command Center for posture and risk, and Google Security Operations for…Diagram4 min
- 5Security Products and Customer TrustGoogle Cloud security products from VPC, VPN and Cloud Armor to IAP and Confidential Computing, and how Google earns trust with…4 min
About this chapter
What this chapter covers
This section is about how organizations stay secure and compliant in the cloud, and why Google can act as part of their security team. It is worth about 18 percent of the exam. It covers fundamental cloud security concepts (threats, cloud versus on-premises security, the CIA triad, key terms, encryption, authentication and authorization, SecOps terms) and Google's defense-in-depth approach (secure-by-design infrastructure, securing the AI stack, Google Threat Intelligence, Security Command Center, Google Security Operations, AI security offerings, network and data security products, and how Google earns trust).
The exam asks you to recognize the right concept or product for a security need, not to configure it.
How the topics fit together
- Cyber threats and cloud security basics covers threats, cloud versus on-premises security, control, compliance and the CIA triad.
- Security terms, encryption and identity covers key terms, encryption states, authentication, authorization, auditing and SecOps terms.
- Google's secure-by-design cloud and AI security covers Google's infrastructure and how it secures every layer of AI.
- Threat intelligence and security operations covers Google Threat Intelligence, Security Command Center and Google Security Operations.
- Security products and customer trust covers network and data security products and how Google earns trust.
The customer always owns its data and who can access it. Google secures the infrastructure underneath. Many questions test where that line falls.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Google Cloud Digital Leader question bank has 512 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Google Cloud. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.