Ccsp Domain 3 – Cloud Platform And Infrastructure Security

Exam preparation

What you’ll learn
Understand what (ISC)2 expects you to know about the cloud platform and infrastructure components.
Recognize where network security appliances are useful.
Comprehend the risk management processes.
Understand the core components of networking.
Comprehend where cloud fits into business continuity management
Requirements
There are no requirements.
A desire to learn what you need to know about the platform and architecture of the cloud for the CCSP exam is very beneficial to have.
A basic understanding of information security is recommended.
Description
In this course we walk through all of the critical concepts within the Cloud Platform & Infrastructure domain. This domain is 17% of the test. I will guide you through all of the concepts that you need to know and advise you on the level of knowledge that you need to get comfortable with.There is over 5 hours of video content plus course notes based on information from my book: Cloud Guardians.We will take a look at networking. At its core this is a data center class. It is current data center technology that allows companies like Amazon to sell services that live on their network. If you are not comfortable with the basics to how networks work it is essential to take a look. If you are familiar with switches, routers, IP and such I have separated out those video sections so that it is easier to breeze right on by.We will walk through risk analysis, evaluation and response. We will take a look at basic risk terms, from asset and threat to risk appetite and tolerance. It is also very good to know what quantitative and qualitative risk assessments are. You do not need to actually perform any calculations on the test at this time though.And a brief look at the Cloud Security Alliances Egregious 11 and Treacherous 12 documents. The Treacherous 12 is a pretty basic way to look at problems on the cloud, but the Egregious 11 gets a bit more technical. Not to the level that the OWASP Top 10 is at, but still good to spend a little time getting to know. They are the actual problems (at least some of them) that we have with the cloud today.We will also look at Business Continuity Management (BCM). It is an abbreviated view as we do not need to go into things like what is the difference between a hot site and a cold site. Instead the question is where does the cloud fit into BCM? Do make sure that you know your time frames e.g., MTD, RTO, RPO, etc.

Overview

Section 1: Domain Notes

Lecture 1 Domain notes

Section 2: Introduction

Lecture 2 Introduction to Platform and Infrastructure

Section 3: Architecture

Lecture 3 Compute, Storage and Network

Section 4: Introduction to Networking

Lecture 4 Introduction to Networking and Switches

Lecture 5 VLAN and Virtualized LAN

Lecture 6 IP & Routers

Lecture 7 Software Defined Networking

Lecture 8 Content Delivery Network

Lecture 9 Virtual Private Networks

Lecture 10 Domain Name System

Lecture 11 OS Hardening

Lecture 12 DRS and DO

Lecture 13 NSG and SAN

Lecture 14 Data Storage

Lecture 15 RAID and Erasure Coding

Section 5: Egregious 11

Lecture 16 Egregious 11 Number 1-5

Lecture 17 Egregious 11 Number 6-11

Section 6: Treacherous 12

Lecture 18 Treacherous 12

Section 7: Risk Management

Lecture 19 Risk Appetite

Lecture 20 Risk Tolerance

Lecture 21 Basic Risk Terms

Lecture 22 Quantitative Risk Assessment

Lecture 23 Qualitative Risk Assessment

Lecture 24 Risk Response

Section 8: Identity and Access Management

Lecture 25 Basica IAAA Intro

Lecture 26 Authorization and RBAC

Lecture 27 Attribute Based Access Control (ABAC)

Lecture 28 Single Sign-On (SSO)

Lecture 29 SAML

Lecture 30 OAuth and OpenID

Section 9: Network Security Tools

Lecture 31 CASB

Lecture 32 Firewalls

Lecture 33 IDS and IPS

Lecture 34 Micro Segmentation

Lecture 35 Hyper Segmentation

Lecture 36 Blast Radius

Lecture 37 Database and File Activity Monitors

Lecture 38 Data Leak Prevention (DLP)

Section 10: Data Center

Lecture 39 Data Center Tiers

Section 11: Business Continuity Management

Lecture 40 BCM Introduction

Lecture 41 The beginning of BCP/DRP planning

Lecture 42 Business Impact Assessment part 1

Lecture 43 Business Impact Assessment part 2

Lecture 44 Business Impact Assessment part 3

Lecture 45 Business Impact Assessment part 4

Lecture 46 Recovery Strategies

Lecture 47 Testing of the Plan

Lecture 48 Embed in the User Community

This course is intended for people that are preparing for the (ISC)2 CCSP exam.,This course would benefit anyone working to expand their knowledge and understanding of the cloud platform and its infrastructure.