Cloud Cybersecurity - Interview Role Play: Danielle

Key Takeaways

[Music] hi I'm Patrick and I'm Danielle let's step into an interview that's in progress in this interview questions will cover Cloud cybercity topics related to Cloud risk management Frameworks we hope this will help you as you prepare for your next interview hey Danielle what interests you in a career in Cloud security good question um I've always been someone that likes to go deep in order to understand something I like to get to the nuts and bolts the nitty G if this is chemistry I like to get to the atom as I was learning about products and solutions I found that I was diving into security compliance because security is a part of everything it's a foundational aspect and it's a crucial aspect it affects an organization it can affect your personal life it can make or break a sale and so I found that in my quest to learn something and Di dive deep I dove into security compliance and I love it why is cyber security comp important and what are some examples of risks that IT addresses cyber security compliance is important for a number of reasons and the first thing that comes to mind is to do right by your customers when I think of privacy laws like gdpr and CCPA they're protecting the rights of individuals and they require business to be upfront about how they're using customers data their personal data name social security number addresses and so it's in a business best interest to to gain the trust of their customers and lay that Foundation another reason is penalties a business can be fined and they can be found legally liable if they're not compliant and then the last thing I would add is it opens up doors and opportunities to new sales basically provide growth for your your business so I would say trust of your customers uh penalties and new Revenue what is the difference between preventative detective and corrective controls and what are some examples of each the difference between preventive detective and corrective controls is the purpose of each of them uh I like to think of this as going to the doctor so preventative care going to your annual visit you get your blood work done you get your blood pressure they ask you whether you're taking your vitamins so preventative is making sure that you have the security controls in place to prevent a Cyber attack from ever happening some examples of these are firewalls for networking uh encryption for your data and a last example would be identity and access management which is often forgotten about and it's making sure the right people have access to the right resources so that's preventative detective is you're going to the doctor because you actually have symptoms you have a cough you have a headache and you're trying to figure out what's going on so detective is security controls that evaluate a security incident that has already happened or happening right now and a great example of that are logging and monitoring tools and being alerted when there's suspicious activity so using a Sim tool for example and the last one is corrective so you've gone to the doctor you have these symptoms and they've diagnose you so how do we fix it what medication do we give you um do you need to have an operation and so these are the Ram uh remediation techniques that you can use so do you have a disaster and Recovery plan do you have a communication plan in place to go out to outbound customers and internal employees if there's a breach um are you able to leverage a sore tool to have an automatic response so I would say that is the difference between those three you might be asked to use tools to identify and remediate security risks in your role as a security professional why is that important and can you give me some examples yeah we've been talking a lot about cyber security in the domain as a whole compliance but a big part of being a professional is being able to implement that knowledge through the use of tools tools are going to be what allows you to actually go in and identify the risk mtig mitigate it and streamline and automate um one example that comes to mind with specifically within Google cloud is called security Command Center I like to think of it as a central hub for any security engineer to go in have a single pan of glass of everything to do security-wise within their environment uh some of the things they they can do our DLP which is data loss prevention so if there's sensitive data they can mask it to make sure it doesn't get leaked another thing that you can leverage in security Command Center is scanning for vulnerabilities within your web applications um and and then so much more that's all the questions I have for today uh now it's your turn to ask me any questions you might have yeah what one question I would love to ask is you know you're looking to find someone on your team that's a good fit and I would love to know when you think about your team for this year and you think about your priorities what is a top priority for your team well this year one of our main goals is that we have a portfolio of products that we are trying to get fed ramp High compliant and it's a huge effort yeah that's something I'd love to be a part of in this interview Danielle demonstrated how to provide examples when answering questions during the interview you too can differentiate Yourself by providing specific examples that show what you know and how you've used those different skills in different situations watch for more interview tips later on in this certificate