Google Cybersecurity study materials
Google Cybersecurity study resources

Google Cybersecurity study plan

Google Cybersecurity · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

Foundations of Cybersecurity & Assets, Threats, and Vulnerabilities

  • Explain the CIA triad and apply each principle to three realistic workplace scenarios

  • Classify ten organizational assets by sensitivity, owner, and data type using a written inventory

  • Differentiate at least six threat actor types and match each to a plausible motive and target

  • Compute likelihood-times-impact risk scores for five identified threats and rank them

Your checkpoint

A single document containing a 10-item asset inventory and a 5-threat risk register with scored, ranked entries

Week 2

Play It Safe: Manage Security Risks & Assets, Threats, and Vulnerabilities

  • Map an organization's existing safeguards to the five NIST Cybersecurity Framework functions

  • Select and justify at least eight controls spanning administrative, technical, and physical categories

  • Outline a vulnerability management cycle from scan through remediation with target timeframes

  • Draft an incident response playbook for one scenario (phishing) covering detection, containment, and recovery

Your checkpoint

A control mapping table of 8+ controls tagged to CSF functions, plus a one-page phishing response playbook

Week 3

Connect and Protect: Networks and Network Security

  • Trace a TCP/IP packet flow across the OSI layers for an HTTPS request

  • Compare stateful and stateless firewalls and place each correctly in a reference architecture

  • Build a firewall rule table of allow/deny entries for a small office with a DMZ, permitting only required ports

  • Explain how VPNs, forward proxies, and reverse proxies each protect a network perimeter

Your checkpoint

A labelled network diagram with a 12-rule firewall table, including a one-line justification for every rule

Week 4

Connect and Protect: Networks and Network Security & Sound the Alarm: Detection and Response

  • Identify indicators of denial-of-service, on-path, and packet-sniffing attacks from written packet-capture summaries

  • Apply network hardening measures (port filtering, segmentation, access control) to a case scenario

  • Distinguish the customer and provider responsibilities across IaaS, PaaS, and SaaS

  • Describe how IDS/IPS, SIEM, and log ingestion chain together in a detection pipeline

Your checkpoint

A two-page hardening checklist for the week-3 network plus written triage notes on three sample alerts

Milestones

Week 2: Explain the CIA triad, the five CSF functions, and risk scoring from memory, and confirm the risk register and control mapping table are finished

Week 4: Trace a packet across OSI layers unaided and name the specific control that defeats DoS, on-path, and sniffing attacks

Week 6: Run 15 Linux commands and 10 SQL queries without reference material, and pass a self-quiz on file permissions and SQL joins

Week 8: Score 80% or higher on a timed 60-question practice exam and have two portfolio artifacts published