Certificate of Cloud Security Knowledge (CCSK) V5

Explore cloud architectures through a four-layer logical model—infrastructure, meta structure, applistructure, and info structure—highlighting security responsibilities and the shared responsibility model for designing and troubleshooting cloud networks.

Explore cloud service models - software as a service, platform as a service, and infrastructure as a service - illustrated by Gmail and cloud-based development and deployment, plus XaaS options.

Explore the four cloud deployment models—public, private, hybrid, and community—and their on-prem or off-prem distinctions, with AWS, Azure, Google Cloud Platform, and IBM Cloud.

Explore cloud infrastructure security by examining software defined networking, network security, virtualization, securing compute workloads. Secure the management plane and bolster business continuity and disaster recovery in cloud environments.

Explore cloud network security across two macro layers: underlying resources and virtualized infrastructure, and how network virtualization with VLANs, VXLANs, and SDN enables traffic isolation.

Experience a live AWS EC2 security and best practices demo that covers launching an instance, configuring security groups, key pairs, encryption, and secure termination.

Explore business continuity and disaster recovery in the cloud, balancing recovery time objective and recovery point objective, assessing outages, and using multi-cloud strategies with shared responsibility and testing.

Explore the risks and governance implications of moving to the cloud with Amazon Web Services across IaaS, PaaS, and SaaS, and understand the laws, rules, regulations, and compliance requirements.

Explore governance as the umbrella of policies, processes, and internal controls that organizations must uphold in the cloud, including contracts with providers, supplier assessments, and compliance reporting.

Explore how cloud adoption changes security risk and introduces governance trade-offs. Assess provider contracts, due diligence, residual risk, and supplier audits.

Navigate cloud legalities by identifying applicable laws, jurisdictions, industry requirements, encryption restrictions, and ensure ongoing due diligence, audits, data retention, electronic discovery, and governance with providers.

Drive cloud audit management through continuous audits, provider attestations, and artifact reviews while maintaining a detailed registry of cloud providers and services to meet compliance obligations.

Understand how cloud data storage offers diverse options—from object storage with AWS S3 to databases and dispersed data—while enforcing access controls, encryption, and secure transfers.

Explore encryption strategies for cloud and on-prem data at rest, including tokenization, client-side, server-side, and proxy-based encryption, with diverse key management options like KMS, HSM, and hybrid designs.

Explore cloud data security options, including metadata security, network segmentation, secure message queuing with SQS, and data loss prevention, monitored by CloudWatch and CloudTrail.

Explore how cloud adoption changes application security, identify key challenges and differences, and learn to test early in gold image creation to secure code before rollout.

Explore testing and assessment across traditional and cloud environments, covering static and dynamic application testing, vulnerability assessments, penetration testing, and immutable infrastructure with DevOps-driven deployment pipelines.

DevOps integrates development and operations to enable continuous integration and delivery, automate testing, and support immutable architectures, with secure, code-driven infrastructure demonstrations in AWS.

Strengthen cloud operations by hardening the management plane, embracing immutable infrastructure, enforcing change management, and leveraging serverless compute with secure microservice architectures.

Explore identity and access management concepts, from entities and identities to tokens, attributes, and personas, and learn how authentication, multifactor authentication, access control, and authorization secure cloud and on-prem environments.

Explore iam standards like saml 2.0, oauth 2.0, openid, xacml, and scim, to enable federation, authentication, authorization, and provisioning in cloud environments.

Explore cloud identity and access management through federation, identity brokers, single sign-on, and code-driven provisioning, with ABAC and MFA for secure, scalable authentication and authorization.

Evaluate how enterprise security differs between on-prem and cloud environments, review cloud provider selection, explore security as a service, and focus on incident response strategies.

Explore how security as a service from cloud providers enhances enterprise security across on-prem and cloud environments, including hybrid setups, while addressing governance, data leakage, and lock-in concerns.

Explore the CSA's additional tools for cloud security—the ENISA Cloud Computing Security Guidance Text and the Cloud Controls Matrix—and how to use them to prep for certification.

Examine virtual machines, containers, and serverless compute, clarifying provider and user security responsibilities. Implement IAM, monitoring, logging, image asset management, patches, and incident response for cloud workloads.

Explore the JSON data format, including name/value pairs, strings in quotes, and data types such as string, number, boolean, null, arrays, and objects.

Learn how to study effectively for CCSK V5 by mastering the Security Guidance PDF layout, mastering open-book exam strategies, and understanding the 120-minute, 60-question format with an 80% passing score.

Schedule exams at your preferred time, ensure a distraction-free environment, and practice with the pdf using find for quick navigation in this open-book test.

Explore next steps in cloud security education by comparing vendor-agnostic and vendor-specific certifications, with hands-on AWS, Azure, and Google Cloud pathways.