GCP200N
Networking in Google Cloud v3.0
This training course builds on the networking concepts covered in the Networking Fundamentals in Google Cloud course. Through presentations, demonstrations, and labs, participants explore and deploy Google Cloud networking technologies. These technologies include: Virtual Private Cloud (VPC) networks, subnets, and firewalls; Interconnection among networks; Load balancing; Cloud DNS; Cloud CDN; Cloud NAT. The course will also cover common network design patterns.
What you will learn
- Configure VPC networks, subnets, and routers.
- Control administrative access to VPC objects.
- Control network access to endpoints in VPCs.
- Interconnect networks among Google Cloud projects.
- Implement network connectivity between Google Cloud projects.
- Implement load balancing.
- Configure traffic management among load balancer backend services.
- Use Cloud CDN to reduce latency.
- Optimize network spend using Network Service Tiers.
- Configure private connection options to provide access to external resources and services from internal networks.
Prerequisites
- Having completed the Google Cloud Fundamentals: Core Infrastructure course or having equivalent experience.
- Prior understanding of the 7 layer OSI model.
- Prior understanding of IPv4 addressing.
- Prior experience with managing IPv4 routes.
Target audience
- Network engineers and administrators who use the Google Cloud console or are planning to do so., Individuals who want to be exposed to software-defined networking solutions in the cloud.
Training Program
14 modules to master the fundamentals
Objectives
- Create a Compute Engine VM with multiple network interfaces.
- Use the standard tier to lower cloud networking costs.
- Use the premium tier to provide lower latency and faster access to Google Cloud resources.
Topics covered
- →VPC networks
- →Multiple Network Interfaces
- →Network Service Tiers
Activities
1 quiz
Objectives
- Describe the different ways to share VPC networks that are available in Google Cloud.
- Recognize when to use Shared VPC and when to use VPC Network Peering.
- Configure peering between unrelated VPC networks.
Topics covered
- →Shared VPC
- →VPC Network Peering
- →Migrating a VM between networks
Activities
1 lab
1 quiz
Objectives
- Configure uptime checks, alerting policies, and charts for your network services.
- Monitor Google Cloud network resources.
- Use VPC Flow Logs to log and analyze network traffic behavior.
Topics covered
- →Monitoring
- →Logging
Activities
2 labs
1 quiz
Objectives
- Define key routing and addressing concepts relevant to Google Cloud, including IP addresses, subnets, route tables, firewalls, BYOIP, and NATs.
- Describe the configuration and management options for Google Cloud DNS, including private and managed zones.
- Configure and manage route tables to control traffic flow, resolve domain names effectively, and utilize NAT rules for secure access.
Topics covered
- →VPC Routing
- →IPv6
- →BYOIP
- →Cloud DNS
Activities
1 lab
1 quiz
Objectives
- Define and differentiate various private connection options (e.g., Private Google Access, Private Services Access, Private Service Connect).
- Explore use cases of Private Service Connect, Private Service Access, and Private Google Access.
- Implement Private Google Access with Cloud NAT.
Topics covered
- →Private Connection Options
- →Private Google Access
- →Private Services Access
- →Private Service Connect
- →Cloud NAT
Activities
1 lab
1 quiz
Objectives
- Describe the Google Cloud provides components that create a good network architecture, such as Cloud Interconnect, VPC Network Peering, Shared VPC, and Network Tiers.
- Summarize key considerations for network design.
Topics covered
- →Cloud network architecture overview
- →Key considerations
Activities
1 quiz
Objectives
- Explain when to use each network topology based on specific requirements.
- Identify potential bottlenecks or security vulnerabilities in network topologies.
- Implement a meshed topology for a resilient and scalable network architecture.
Topics covered
- →Hub and spoke topology
- →Other topologies
- →Getting topology data
- →Best practices
Activities
1 lab
1 quiz
Objectives
- Identify the four layers of DDoS Mitigation.
- Identify methods Google Cloud uses to mitigate the risk of DDoS for its customers.
- Use Google Cloud Armor to blocklist an IP address and restrict access to a global external Application Load Balancer.
Topics covered
- →How DDoS attacks work
- →Google Cloud mitigations
- →Types of complementary partner products
Activities
1 lab
1 quiz
Objectives
- Describe how IAM policies affect VPC network access.
- Identify the benefits of using Cloud Firewall's hierarchical policies at different levels of the cloud infrastructure hierarchy.
- Apply global and regional network firewall policies using Cloud Firewall.
- Explain the role of Cloud IDS in protecting VPC networks from malicious activity.
- Deploy Cloud IDS and configure its settings according to specific security needs.
- Describe the role of Secure Web Proxy in improving network resilience and availability.
- Describe best practices for cloud network security.
Topics covered
- →IAM
- →Cloud Firewall
- →Cloud IDS
- →Secure Web Proxy
Activities
2 labs
1 quiz
Objectives
- Define Packet Mirroring and explain its purpose in network monitoring and security.
- Learn network security best practices.
Topics covered
- →Packet Mirroring for network traffic inspection
- →Network security best practices
Activities
1 quiz
1 lab
Objectives
- Describe the benefits of hybrid load balancing.
- Configure traffic management in a load balance
Topics covered
- →Hybrid load balancing
- →Traffic management
Activities
1 lab
1 quiz
Objectives
- Describe how to configure an internal network load balancer as a next hop.
- Use Cloud CDN configuration to optimize content delivery performance.
- Create a Google Cloud Armor edge security policy to protect content.
Topics covered
- →Internal network load balancers as next hops
- →Cloud CDN
- →Cloud Armor
- →Load balancer optimization strategies
Activities
1 quiz
1 lab
Objectives
- Describe the various connectivity options offered by Google Cloud for hybrid and multi-cloud environments, including Network Connectivity Center, Cloud VPN, Cloud Interconnect, and Cloud CDN.
- Define and differentiate between the various Cloud Interconnect options available in Google Cloud, including Dedicated Interconnect, Partner Interconnect, and Cross-Cloud Interconnect.
Topics covered
- →Google Cloud connectivity options
- →Dedicated Interconnect
- →Partner Interconnect
- →Cross-Cloud Interconnect
Activities
1 quiz
Objectives
- Implement high availability VPN (HA VPN) for redundancy and failover.
- Identify the benefits and use cases for Cloud HA VPN.
Topics covered
- →Use case for Cloud VPN
- →HA VPN topologies
- →HA VPN over Cloud Interconnect
- →Influence best path selection
Activities
1 quiz
1 lab
Quality Process
SFEIR Institute's commitment: an excellence approach to ensure the quality and success of all our training programs. Learn more about our quality approach
Teaching Methods Used
- Lectures / Theoretical Slides — Presentation of concepts using visual aids (PowerPoint, PDF).
- Technical Demonstration (Demos) — The instructor performs a task or procedure while students observe.
- Guided Labs — Guided practical exercises on software, hardware, or technical environments.
- Quiz / MCQ — Quick knowledge check (paper-based or digital via tools like Kahoot/Klaxoon).
Evaluation and Monitoring System
The achievement of training objectives is evaluated at multiple levels to ensure quality:
- Continuous Knowledge Assessment : Verification of knowledge throughout the training via participatory methods (quizzes, practical exercises, case studies) under instructor supervision.
- Progress Measurement : Comparative self-assessment system including an initial diagnostic to determine the starting level, followed by a final evaluation to validate skills development.
- Quality Evaluation : End-of-session satisfaction questionnaire to measure the relevance and effectiveness of the training as perceived by participants.
Upcoming sessions
Train multiple employees
- Volume discounts (multiple seats)
- Private or custom session
- On-site or remote