CCSP Cert Prep: 3 Cloud Platform and Infrastructure Security

Learn how to design a secure cloud operating environment as you prepare for the Cloud Platform and Infrastructure Security domain of the CCSP exam.

Introduction

• Building a secure cloud platform
• What you need to know
• Study resources

1. Cloud Infrastructure

• Cloud infrastructure and components
• Cloud data centers
• Data center tiers
• Site and facility design
• Data center environmental controls
• Data center environmental protection
• Physical security control types
• Physical access control
• Visitor management
• Data and media sanitization
• Packet capture

2. Host Security

• Operating system security
• Malware prevention
• Application management
• Host-based network security controls
• File integrity monitoring

3. Identity and Access Management

• Identity and access management
• Identification, authentication, and authorization
• Provisioning and deprovisioning
• Authentication factors
• Multifactor authentication
• SSO and federation
• Kerberos and LDAP
• SAML
• OAuth and OpenID Connect
• Security service providers
• Identity as a Service (IDaaS)
• Privileged access management

4. Business Continuity and Disaster Recovery

• Business continuity planning
• Resilient design
• High availability and fault tolerance
• Disaster recovery planning
• Backups
• Restoring backups
• Disaster recovery sites
• Testing BC/DR plans

Conclusion

• Continuing your CCSP certification journey