Google Security-Operations-Engineer 考試概覽:

認證廠商:	Google
考試名稱:	Google Cloud 認證 – 專業級雲端安全營運工程師
考試代碼:	Security-Operations-Engineer
考試費用:	200 美元
考試時間:	120 minutes
相關認證:	Google Cloud 認證 – 專業級雲端安全營運工程師
考試形式:	單選題, 多選題
實際考試題數:	50-60 題
支援語言:	英文, 日文
及格分數:	未公開（以通過/未通過方式評定）
證照有效期限:	2 年
範例考題:	Google Security-Operations-Engineer 範例考題
考試方式:	線上遠端監考或於實體考場應試
必備條件:	建議具備：3 年以上相關產業經驗，其中包含 1 年以上使用 Google Cloud 設計與管理解決方案的實務經驗
官方大綱網址:	https://cloud.google.com/learn/certification/cloud-security-operations-engineer

Google Security-Operations-Engineer 考試大綱：

主題	簡介
主題 1	Platform Operations: This section of the exam measures the skills of Cloud Security Engineers and covers the configuration and management of security platforms in enterprise environments. It focuses on integrating and optimizing tools such as Security Command Center (SCC), Google SecOps, GTI, and Cloud IDS to improve detection and response capabilities. Candidates are assessed on their ability to configure authentication, authorization, and API access, manage audit logs, and provision identities using Workforce Identity Federation to enhance access control and visibility across cloud systems.
主題 2	Incident Response: This section of the exam measures the skills of Incident Response Managers and assesses expertise in containing, investigating, and resolving security incidents. It includes evidence collection, forensic analysis, collaboration across engineering teams, and isolation of affected systems. Candidates are evaluated on their ability to design and execute automated playbooks, prioritize response steps, integrate orchestration tools, and manage case lifecycles efficiently to streamline escalation and resolution processes.
主題 3	Threat Hunting: This section of the exam measures the skills of Cyber Threat Hunters and emphasizes proactive identification of threats across cloud and hybrid environments. It tests the ability to create and execute advanced queries, analyze user and network behaviors, and develop hypotheses based on incident data and threat intelligence. Candidates are expected to leverage Google Cloud tools like BigQuery, Logs Explorer, and Google SecOps to discover indicators of compromise (IOCs) and collaborate with incident response teams to uncover hidden or ongoing attacks.
主題 4	Monitoring and Reporting: This section of the exam measures the skills of Security Operations Center (SOC) Analysts and covers building dashboards, generating reports, and maintaining health monitoring systems. It focuses on identifying key performance indicators (KPIs), visualizing telemetry data, and configuring alerts using tools like Google SecOps, Cloud Monitoring, and Looker Studio. Candidates are assessed on their ability to centralize metrics, detect anomalies, and maintain continuous visibility of system health and operational performance.
主題 5	Detection Engineering: This section of the exam measures the skills of Detection Engineers and focuses on developing and fine-tuning detection mechanisms for risk identification. It involves designing and implementing detection rules, assigning risk values, and leveraging tools like Google SecOps Risk Analytics and SCC for posture management. Candidates learn to utilize threat intelligence for alert scoring, reduce false positives, and improve rule accuracy by integrating contextual and entity-based data, ensuring strong coverage against potential threats.