1 / 11

The First Domain of CCSP Cloud Concepts, Architecture and Design

The Certified Cloud Security Professional Certification or CCSP, is a credential offered by (ISC)2 and the Cloud Security Alliance (CSA) in collaboration. For information security practitioners who wish to specialise in cloud computing security, the CCSP is an excellent credential to obtain.<br><br>https://www.infosectrain.com/blog/the-first-domain-of-ccsp-cloud-concepts-architecture-and-design/<br>

Download Presentation

The First Domain of CCSP Cloud Concepts, Architecture and Design

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. www.infosectrain.com The First Domain of CCSP: Cloud Concepts, Architecture and Design

  2. InfosecTrain About Us InfosecTrain is one of the finest Security and Technology Training and Consulting organization, focusing on a range of IT Security Trainings and Information Security Services. InfosecTrain was established in the year 2016 by a team of experienced and enthusiastic professionals, who have more than 15 years of industry experience. We provide professional training, certification & consulting services related to all areas of Information Technology and Cyber Security.

  3. The First Domain of CCSP: Cloud Concepts, Architecture and Design The offered information security, the CCSP is an excellent credential to obtain. It was created by (ISC)2 to ensure that cloud security professionals have the necessary expertise, skills, and abilities in cloud security design, implementation, architecture, operations, controls, and regulatory framework enforcement . A security architecture, design, operations, information security expertise to a cloud computing environment . This professional expertise is assessed against a body of information that is universally accepted. Certified by Cloud (ISC)2 security Security and practitioners Professional Cloud Certification Alliance wish to or CCSP, in in is a credential the Security who (CSA) collaboration. cloud For specialise computing CCSP and demonstrates service excellence in applying cloud orchestration by The applicability across all cloud security disciplines . The CCSP exam comprises of six domains: topics covered by the CCSP Common Body of Knowledge (CBK) ensure its Domain 1: Cloud Concepts, Architecture and Design (17%) Domain 2: Cloud Data Security (19%) Domain 3: Cloud Platform & Infrastructure Security (17%) Domain 4: Cloud Application Security (17%) Domain 5: Cloud Security Operations (17%) Domain 6: Legal, Risk and Compliance (13%) 4 CCISO Certification

  4. This design; and what candidates preparing for this exam should expect in this domain. blog will cover the CCSP Domain 1: Cloud concepts, Cloud architecture and Cloud Concepts, Architecture, and Design The strong understanding of cloud computing ’s fundamentals . The ISO/IEC 17788 standard serves as the foundation for these building blocks. The domain defines various and significant roles that individuals and other implementation, from the standpoint of cloud ser vice customer. It holds 17% weightage and covers the following : • Understand Basics of Cloud Computing Cloud Concepts, Architecture, and Design domain lays the foundation for a organisations the cloud play within provider a and cloud the both service • Explain the Cloud Reference Architecture • Understand Cloud Computing Security Concepts • Understand Secure Cloud Computing Design Principles • Evaluate Cloud Ser vice Providers 5

  5. Understand Basics of Cloud Computing This terminologies, computing , including on-demand self-service, broad network access, multitenancy, rapid elasticity and scalability, resource pooling , and measured service . It also covers the fundamentals of cloud computing , such as underlying infrastructure that host and manage them. The primary goal of this domain is to see if the candidate understands the basic components of cloud computing. subsection provides and cloud an computing over view of the It basic covers cloud the computing key characteristics definitions and roles. of cloud virtualization, storage, networks, and the Explain the Cloud Reference Architecture The Cloud Computing Architecture is covered in this section, which introduces cloud computing operations, cloud service capabilities, cloud service types, cloud deployment models, and cross-cutting aspects of cloud computing that affect all aspects of cloud implementations and deployments . The main roles of the cloud service provider, cloud service customer, and cloud ser vice partner, as well as the broad range of sub-roles encapsulated under each, are included in computing activities . The key cloud service capabilities are introduced and described, including application, infrastructure, and platform ser vice capabilities, as they are the backbone of many of the widely used and Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) are among the major cloud service categories discussed in this section which are deployed on a public, private, hybrid and community cloud. the ISO/IEC 17789 standard for cloud understood cloud structures and models. 6

  6. The final component is a set of cloud computing ’s cross -cutting aspects that apply to all cloud environments, regardless of ser vice category or deployment model. It includes interoperability, portability, reversibility, availability, security, privacy, resiliency, performance, governance, maintenance and versioning , ser vice levels and Ser vice Level Agreements (SLA), auditability, and regulatory. It also discusses the impact of related technologies such as machine learning , artificial intelligence, blockchain, containers, Internet of Things (IoT), and quantum computing. Understand Cloud Computing Security Concepts Cloud computing has its own set of security concepts . On the CCSP certification exam, the following security concepts are likely to be covered: • Cryptography and Key Management • Access Control • Data and Media Sanitization • Network Security • Virtualization Security • Common Threats All of these are somewhat close to a traditional data centre model, except in a cloud environment with multi tenancy, the value of cryptography is substantially higher, since many customers share the same pool of resources, rather than being isolated in a traditional data centre. This is also true for the particular challenges of access control, data and media sanitization, network security, virtualization security, and common threats. 7

  7. Understand Secure Cloud Computing Design Principles This subsection describes the specific design requirements for secure cloud computing. Although certain aspects of a cloud environment are similar to those of a conventional data centre, some aspects of a cloud environment methodologies . These includes: • Cloud Secure Data Lifecycle • Cloud based Disaster Recovery (DR) and Business Continuity (BC) planning • Cost Benefit Analysis • Functional Security Requirements involve special requirements or • Security Considerations for different Cloud categories Evaluate Cloud Service Providers Since cloud customers do not host and monitor the entire cloud environment, they must rely on other methods to verify a cloud provider ’s security posture and operations . One simple and reliable method is to examine certifications . These certifications are focused understood criteria and specifications, and provider ’s security posture and controls, as well as to compare various providers. It includes: independently on they serve verified and confirmed and trust a universally as available way to well - cloud a 8

  8. Verification Against Criteria (e. g., International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27017, Payment Card Industry Data Security Standard (PCI DSS)) • System/subsystem Product Certifications (e. g., Common Criteria (CC), Federal Information Processing Standard (FIPS) 140 -2) CCSP with Infosec Train Earning the internationally recognised CCSP cloud security certification is a proven way to advance your career while also enhancing resources . InfosecTrain ’s Certified Cloud Security Professional (CCSP) training course will assist candidates in updating and refreshing their skills as well as recognizing areas in which they need to study while preparing for the CCSP exam. We are one of the most well-known training providers . experience in the industry, which they impart during training . This course will provide you with in-depth knowledge of fundamentals of cloud architecture, cloud architecture design, types of cloud architecture, cloud computing security concepts, etc. the security of sensitive cloud Our accredited instructors have years of 9

  9. 10

  10. ABOUT OUR COMPANY OUR CONTACT InfosecTrain welcomes overseas customers to come and attend training sessions in destination cities across the globe and enjoy their learning experience at the same time. https://www.facebook.com/Infosectrain/ 1800-843-7890 sales@infosectrain.com https://www.linkedin.com/company/infosec-train/ www.infosectrain.com https://www.youtube.com/c/InfosecTrain

More Related