You have no items in your shopping cart.
Course Details
Course Details
What You'll Learn
This course prepares you for the Professional certification exam, covering all official exam domains and their approximate weightings:
Domain 1 Designing and planning a Google Cloud VPC network (21%)
- Design overall network architecture: network tiers (Premium/Standard), HA/failover/DR/scale, DNS topology, load balancer selection, GKE networking, IAM roles, connectivity to managed services (PSC, Serverless VPC Access), quotas/limits
- Design VPC networks: standalone vs Shared VPC, interconnection method (VPC Peering, Network Connectivity Center mesh/star, PSC), IPAM strategy (subnets, IPv6, BYOIP, PUPI, Private NAT), global vs regional, MTU sizing, third-party appliance insertion with custom routes
- Design resilient hybrid and multi-cloud network: Dedicated/Partner/Cross-Cloud Interconnect, Cloud VPN, SD-WAN, Direct/Verified Peering, multi-region HA/DR routing, accessing multiple VPCs and Google services privately, hybrid DNS topology, MTU sizing, interconnect encryption (MACsec, HA VPN)
- Design for GKE: public/private nodes and control plane, subnet primary/secondary ranges, IP addressing options (RFC1918, non-RFC1918, PSC, PUPI), IPv6, load balancing design, node pool configuration
Domain 2 Implementing a VPC network (20%)
- Configure VPCs: create networks/subnets/firewall rules, VPC Peering, Shared VPC and IAM permissions, Private Google Access, subnet range expansion, VPC Service Controls perimeters
- Configure VPC routing: static/dynamic routing via Cloud Router, global/regional dynamic routing, tag- and priority-based routing, internal LB as next hop, custom route import/export, policy-based routing
- Configure Network Connectivity Center: spoke types (VPC, hybrid, producer), topology (star, hub-and-spoke, mesh), Private NAT/PSC propagation, IP/CIDR filters, monitoring and troubleshooting
- Configure and maintain GKE clusters: VPC-native clusters with alias IPs, Shared VPC clusters, private clusters/control planes, authorized networks, Dataplane V2, SNAT/IP Masquerade, network policies, Pod/service ranges, DNS (Cloud DNS, kube-dns)
Domain 3 Configuring managed network services (16%)
- Configure load balancing: choose internal/external, regional/global, application/proxy/passthrough LB; configure backend services and autoscaling (NEGs, MIGs); balancing method, session affinity, URL maps, health checks; GKE load balancing (Gateway/Ingress controllers); Application LB traffic management (splitting, mirroring, URL rewrites)
- Configure Cloud CDN: enable for MIGs, Cloud Storage, Cloud Run, and external/internet NEG backends; invalidate cached content
- Configure Cloud DNS: manage zones/records, migrate to Cloud DNS, routing policies (geolocation, failover), DNSSEC, DNS forwarding and server policies, split-horizon DNS, cross-project binding and peering, GKE external-DNS integration
Domain 4 Configuring and implementing hybrid and multicloud network interconnectivity (16%)
- Configure Cloud Interconnect: Dedicated, Partner, and Cross-Cloud Interconnect connections and VLAN attachments; HA VPN over Interconnect; 99.9%/99.99% SLA topologies
- Configure site-to-site IPSec VPN: HA VPN to on-prem gateways and other Google Cloud VPCs; Classic VPN (route-based/policy-based)
- Configure Cloud Router: BGP attributes (ASN, MED, link-local, authentication), BFD, custom advertised/learned routes, legacy vs standard best-path selection
- Configure Network Connectivity Center: hybrid spokes (VPN, VLAN attachment), site-to-site data transfer, router appliances, resolving transitivity issues
Domain 5 Managing, monitoring, and troubleshooting network operations (14%)
- Log and monitor with Google Cloud Observability: Cloud Logging for VPN, Router, VPC Service Controls, NGFW, Firewall Insights, VPC Flow Logs, DNS, NAT, NCC; monitor networking metrics
- Maintain and troubleshoot connectivity: drain/redirect traffic on Application LB, troubleshoot VPNs, Cloud Interconnect, Cloud Router BGP peering, use VPC Flow Logs/firewall logs/Packet Mirroring
- Use Network Intelligence Center: Network Topology, Connectivity Tests, Performance Dashboard, Firewall Insights, Network Analyzer, Flow Analyzer and VPC Flow Logs
Domain 6 Configuring, implementing and managing a cloud network security solution (13%)
- Configure Google Cloud Armor: edge/backend security policies, WAF rules (SQLi, XSS, RFI), DDoS/Adaptive Protection, rate limiting, bot management, Google Threat Intelligence
- Configure and manage NGFW policies and VPC firewall rules: firewall strategy, hierarchical rule evaluation, Cloud NGFW for GKE/Load Balancing, layer 7 inspection (Enterprise tier), migration from VPC rules to NGFW, rule criteria and logging, micro-segmentation via tags/service accounts
- Configure and secure internet egress: public Cloud NAT IP addressing and port allocation, Secure Web Proxy
- Configure self-managed network virtual appliances and Packet Mirroring: multi-NIC VM routing/inspection, internal LB/policy-based routes as next hop for HA, out-of-band security integration, Packet Mirroring to self-managed collectors
Course Info
Promotion Code
Your will get 10% discount voucher for 2nd course onwards if you write us a Google review.
Minimum Entry Requirement
Knowledge and Skills
- Able to operate using computer functions
- Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)
Attitude
- Positive Learning Attitude
- Enthusiastic Learner
Experience
- Minimum of 1 year of working experience.
Target Age Group: 18-65 years old
Minimum Software/Hardware Requirement
Software:
Software Requirement
Please sign up a Google Cloud Platform (GCP) account on https://cloud.google.com/
Hardware: Window or Mac Laptops
Job Roles
Job Roles
- IT Security Specialist
- Compliance Officer
- System Administrator
- Network Administrator
- Cybersecurity Analyst
- IT Manager
- Security Engineer
- Data Privacy Specialist
- IT Auditor
- Risk Management Specialist
- Security Consultant
- Information Security Officer
- IT Governance Specialist
Trainers
Trainers
Truman Ng is a ACTA certified trainer that graduated with Bachelor Degree in Electrical Engineering from NUS in year 2002. He designed Artificial Intelligence (AI) controller for DC-DC Power Convertor by using Fuzzy Logic and Neural Network (NN) as his university Final Year Project.
Truman has over 15 years project experiences across Database & Web Design, PLC machinery, Data Center Design , Structure Cabling System(SCS) and Enterprise Network Design and Implementation. He used to be a network architect for Hewlett Packard, working with a group of virtual team from the US in handling network design and projects in the States.
Truman is the founder of Nexplore (S) Pte Ltd. He provides solutions of Cloud SaaS, IaaS & PaaS and Software Defined Network (SDN), VoIP and Internet Security. He was engaged by Huawei Global Training Center to provide 60+ consultations and trainings for Internet Service Providers(ISP) from Malaysia, Singapore, Brunei, Philippines, Australia, Poland, Iran, South Africa, Swaziland, Cote Dlvoire, Syria, Uzbekistan, New Zealand and countries over the world.As achievement, Truman has successfully completed 100+ IT network projects for Bank, Hotel and Factory within 5 years.Truman is certified in PMP, Cisco CCNP, CCIP, CCDP, HP Ase and Huawei HCNP, HCIE R&S, HCNA Cloud, HCNA Security, etc
Solomon Soh is an experienced Data Scientist and AI Trainer with a strong record of teaching and mentoring in Python programming, data analytics, and machine learning. Currently a Data Science Trainer with IBM Singapore, he has coached teams on projects involving natural language processing, computer vision, and chatbots, achieving a 96% learner satisfaction rating for his communication and technical expertise. His career spans roles at Workforce Optimizer, Certis Cisco, Ernst & Young, and IQVIA, where he applied Python-driven analytics to improve operations, optimize staffing, and deliver actionable insights. His academic background includes a double degree in Economics and Psychology from Singapore Management University (Summa Cum Laude, triple major in Analytics), an MBA, and a Master’s in Financial Engineering.
Anil is a ACLP certified trainer. He is an Enterprise Cloud and DevOps Consultant , responsible for helping clients to move Virtual data centre to Private Cloud based on OpenStack and Public Cloud ( AWS, Azure and Google cloud) . Consulting and training experience on Devops tool chain like github , Jenkins, Sonarqube, Docker & kubernetes, Cloud foundry, Openshift, Ansible and SaltStack. Lot of my Role is involved design and implementation of a solution and training
Dr. Alfred Ang is the founder of Tertiary Courses. He is a serial entrepreneur. He founded OSWeb2Design Singapore Pte Ltd in 2007 offering web development, e-commerce store development, graphics design, ebook publishing, mobile apps development, and digital marketing services. He established the first online gardening store in Singapore, Eco City Hydroponics Pte Ltd in 2000, offering a wide range of gardening products such as seeds, plant nutrients, hydroponics kits etc. Eco City Hydroponics has become the most popular and successful gardening store in Singapore. He founded Tertiary Infotech Pte Ltd in 2012 and transformed the business to a training platform, Tertiary Courses in 2014. Tertiary Courses offers a wide range of SkillsFuture courses for PMETs to upgrade their skills and knowledge. He also established Tertiary Courses Malaysia in 2016. He also founded Tertiary Robotics in 2015 offering Arduino, Raspberry Pi, Microbit and Robotics products
Dr. Alfred Ang earned his Ph.D. from National University of Singapore in 2000, majoring in Electrical and Electronics Engineering. He also completed an online MBA course with U21 Global based in Australia. He obtained his B.Sc (Hons) from National University of Singapore in 1992, majoring in Physics. He topped his Physics cohort for 3 consecutive years and funded his degree study with Book price, awards and tuition. He has worked in Defence, Electronics and Semiconductor Industries. His current interests include Machine Learning, Deep Learning, Artificial Intelligence, Internet of Things, Robotics and Programming.
Dr. Alfred Ang is IBM certified instructor for AI Practitioners course. He is a ACTA certified trainer and DACE certified curriculum developer. He was Distinguished Toastmasters (DTM) and Senior Member of IEEE. He has published more than 20 peer reviewed papers and co-inventors for more than 20 inventions.
Review
Customer Reviews (3)
- might recommend Review by Course Participant/Trainee
-
It’s difficult to do virtual as there is a lot to download and the internet connection will be slowed down. Much of the time is consumed in downloading stuff. (Posted on 12/23/2022)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - will recommend Review by Course Participant/Trainee
-
. (Posted on 9/26/2022)1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment - Might Recommend Review by Course Participant/Trainee
-
Have the course stretched out over more days and to be more in-depth and with proper tutorial and lab materials.1. Do you find the course meet your expectation? 2. Do you find the trainer knowledgeable in this subject? 3. How do you find the training environment
Too much referral to google documentation online instead customized delivery.
Trainer seemed very distracted after lunch, especially on his phone and as such the 2nd half of the lesson was not as good as the first half.
Content delivery wise, he seems to struggle more with the 2nd half materials as well. (Posted on 4/8/2018)
Write Your Own Review
- Recommended Courses
WSQ - Google Professional Machine Learning Engineer Training
$1,600.00 (GST-exclusive)
$1,744.00
(GST-inclusive)
WSQ - Microsoft Azure Data Scientist Associate (DP-100)
$800.00 (GST-exclusive)
$872.00
(GST-inclusive)
WSQ - Microsoft Certified Azure AI Engineer Associate (AI-102) Training
$900.00 (GST-exclusive)
$981.00
(GST-inclusive)
WSQ - Microsoft Certified Azure Administrator Associate (AZ-104)
$2,500.00 (GST-exclusive)
$2,725.00
(GST-inclusive)
WSQ - Microsoft Azure Security Engineer Associate (AZ-500)
$2,000.00 (GST-exclusive)
$2,180.00
(GST-inclusive)
