Google Cybersecurity Professional Certificate Practice Test
Gana confianza para Google Cybersecurity Professional Certificate. Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
This comprehensive practice test is meticulously designed to prepare candidates for the Google Cybersecurity Professional Certificate exam, a credential that validates foundational and intermediate skills in the cybersecurity domain. The test covers the full spectrum of the official certification blueprint, including asset classification, threat modeling, encryption, incident response lifecycle, SIEM tools, network traffic analysis, and the core principles of the NIST Cybersecurity Framework. Candidates will demonstrate proficiency in Linux command-line operations and SQL queries for log analysis, as well as a working knowledge of TCP/IP, firewalls, VPNs, and intrusion detection systems. Additionally, the test assesses the ability to write Python scripts for security automation tasks and apply risk management frameworks such as the NIST Risk Management Framework (RMF). This certification is highly valued by employers as it signals a practical, hands-on understanding of security operations, risk assessment, and incident handling. Earning this credential positions professionals for roles such as Security Analyst, SOC Analyst, and Cybersecurity Associate, providing a clear pathway into the industry with a vendor-neutral yet Google-endorsed foundation. The practice test mirrors the actual exam's difficulty and structure, ensuring candidates are fully prepared to achieve certification and advance their careers.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
During a tabletop exercise at Helix Dynamics, the red team demonstrates that a compromised low-privileged workstation account was able to read the NTDS.dit file from a domain controller because the backup service account had not been rotated in 18 months. Which vulnerability management concept was most directly violated?
SOC analyst Jamie runs the following on a Linux server to investigate brute force activity: `grep "Failed password" /var/log/auth.log | awk '{print $(NF-3)}' | sort | uniq -c | sort -nr`. The output shows one IP with 48 attempts. To also filter events from the last 6 hours only using standard tools, which additional command segment produces the most accurate results?
The IR playbook at a financial firm states that after containment of a confirmed breach, the next step is eradication. An analyst proposes immediately deleting all user accounts that logged in during the suspected timeframe. Why is this proposal likely to cause more harm than good?
During onboarding, the CISO asks the team to map existing controls to the five core functions of the NIST Cybersecurity Framework. Which function is primarily satisfied by deploying an endpoint detection and response (EDR) agent that generates alerts on suspicious PowerShell activity?
At 14:22, the SOC at Titan Logistics receives a high-fidelity alert: "Suspicious PowerShell encoded command from workstation FIN-WS-047 contacting known Cobalt Strike C2 domain". The on-call analyst immediately opens a ticket, preserves volatile memory with WinPMEM, disconnects the workstation from the network via the switch port, and begins collecting the EDR timeline. According to the NIST incident response lifecycle (Preparation, Detection and Analysis, Containment, Eradication, Recovery, Post-Incident Activity), which phase is the analyst performing when they isolate the host?
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.