CompTIA Cloud+ (CV0-003)

Explore identity and access management in the cloud, covering privileged and logical access, account lifecycle management, and access controls with least privilege and just-in-time access.

Explore identity and access management concepts in Azure Active Directory, including account lifecycle management, provisioning and deprovisioning, group-based access control, and least-privilege practices.

Identify and configure security access controls using directory services, single sign-on, and federation with SAML and PKI. Manage secrets, keys, and multi-factor authentication across cloud and on-prem environments.

Demonstrates how Azure Active Directory manages users and groups, enables multi-factor authentication, and uses key vault for secrets, keys, and RBAC-based access controls in cloud security.

Analyze identity and access management solutions through scenario-based questions, applying role-based access control and deprovisioning, and illustrate multi-factor authentication and password management using Azure demonstrations to bolster cloud security.

Explore how network segmentation secures cloud resources with vlan-based divisions, vxlan and geneve overlays, microsegmentation, and storage tiering, all under zero-trust principles.

Watch a practical Azure cloud demonstration of network segmentation using virtual networks and subnets, defining address spaces, allocating private IP ranges, and applying subnet-level security controls.

Explore cloud networking security services, including firewalls, web application firewalls, application delivery controllers, IPS/IDS, and data loss prevention, plus visibility tools like packet brokers and network flows.

Demonstrate configuring cloud network services with a firewall in a two-subnet virtual network. Apply application and network rules, DNS, and RDP access to a workload server.

Secure cloud traffic by using DNS over HTTPS, DNS over TLS, and DNSSEC, and employ tunneling protocols like IPsec or L2TP to create encrypted cloud channels.

Learn to secure cloud traffic by demonstrating SSH key-based authentication, secure tunneling, and encrypted communication between a Linux VM and client, including RSA keys, key management, and TLS verification.

Harden cloud resources and manage configurations by establishing security baselines and closing unused ports. Enforce secure protocols, apply updates, and use traffic controls and ddos protection to reduce attack surfaces.

Explore cloud hardening through a demo: assess posture with security center, apply recommendations, enable azure defender and MFA, implement DDoS protection and strong ciphers, desired state configuration to prevent drift.

Analyze cloud security solutions by evaluating scenarios that secure on-prem to cloud connections with L2TP/IPsec and protect data with data loss prevention to keep sensitive information inside.

Identify and apply cloud application security controls, including policies, single-function apps, encryption of data in transit and at rest, secret management and hashing of API keys, and mandatory access controls.

Explore OS security controls in cloud IaaS on Azure, recognizing responsibility to secure OS, focusing on Ubuntu 20.04 LTS, and Canary, SSH, encryption at rest, patch management, and Azure Defender.

Analyze application and os security controls through scenario-driven practice, selecting the right measures such as an application approved list and long-term servicing for cloud server deployments.

Explore cloud data security with encryption, key management, data integrity, and data classification, comparing server-side and client-side encryption and access-control strategies to uphold confidentiality, integrity, and availability.

Explain compliance controls in the cloud through file integrity monitoring and change monitoring, legal holds, retention, records management, and DLP with a CASB.

Demonstrates data loss prevention policy setup in Microsoft 365, with country-specific templates including Patriot Act, plus file integrity hashing and Azure regulatory compliance standards like PCI DSS and ISO 27001.

Learn how to apply data analysis and security solutions to real-world cloud scenarios, focusing on versioning to recover overwritten data and enforce retention and legal hold policies.

Explore how security tools support cloud risk management and compliance by examining a risk register and demonstrating a port scan with nmap to identify open ports, services, and necessary updates.

Analyze security requirement solutions for cloud-based technologies by applying pre-deployment hardening, updating security patches, and changing default passwords; when updates are unavailable, implement virtual patches.

Craft a documented incident response procedure guided by the NIST SP 800-61, detailing preparation, detection and analysis, containment, eradication, recovery, and lessons learned with a clear communication plan and roles.

Explore security tools and risk management in cloud environments to meet requirements, including vulnerability scanners, vulnerability assessments, risk registers, and patch strategies.

Analyze cloud subscription services and infrastructure by examining software as a service like Microsoft 365 (Exchange, Teams, SharePoint, OneDrive) and infrastructure as a service via Azure Virtual Desktop.

Learn how to provision storage resources in the cloud using a web user interface, a command-line interface, or REST API endpoints, and assess trade-offs for scalable storage deployment.

Provision storage resources by creating an Azure storage account, selecting performance, redundancy, and access options, then build containers, file shares, and block blobs to store data.

Learn to deploy virtual machines efficiently with templates, automating consistent configurations, and using custom and marketplace templates with parameters and licensing for scalable cloud deployments.

Explore how containers package dependencies to run apps consistently, compare them with virtual machines, and deploy a web app on Azure container instance with Docker and a lamp stack.

Explore scenario-based analysis of deploying cloud solutions, comparing containers versus virtual machines, and quick, license-aware firewall deployment through cloud marketplace options.

Identify storage types: block storage, file storage, and object storage, and how provisioning, SAN and NAS, zoning, and cloud services like Azure Blob Storage and EBS shape performance.

Explore storage tier considerations balancing access frequency, latency, and cost across tier one flash, tier two ssd/hybrid, tier three spinning disks, and tier four to five cold and archival storage.

Demonstrates Azure storage tiering by provisioning a storage account and container, configuring hot and cool tiers, creating a file share, and upgrading to transaction optimized tier with cost awareness.

Describe storage protocols such as NFS, SMB/CIFS, iSCSI, fibre channel, and NVMe over fabrics, and explain how they enable file and block storage communication in cloud environments.

Review raid configurations such as striping, mirroring, and parity, and evaluate raid 0, 1, 5, 6, and 10 for performance, redundancy, and fault tolerance.

Identify storage features like compression, deduplication, and thin or thick provisioning to optimize cloud data. Explore replication (local and remote, synchronous and asynchronous, multi-site), quotas, hyper-converged infrastructure, and software-defined storage.

Learn to configure Azure storage replication options—from locally redundant storage to zone redundant storage, geo redundant storage, and geo zone redundant storage—while setting file share quotas and testing access.

Analyze cloud storage provisioning by evaluating raid options for performance and single-drive failure tolerance, and consider NVMe over fabric and Fibre Channel for high-speed lossless transfer and asynchronous disaster recovery.

Explore how cloud-based networking services like dhcp, ntp, dns, cdn and ipam translate to cloud infrastructure, including on-premises and hybrid deployments, and their impact on address management and time synchronization.

Demonstrates deploying an Azure DNS zone, configuring NS and SOA records, and creating a storage-backed CDN endpoint to improve web delivery.

Explore how cloud virtual routing works, comparing dynamic versus static routing, subnets and VPC/VNet concepts, and hub-and-spoke and peering topologies for secure, scalable networks.

Deploys a virtual routing demo showing two VNets connected by a two-way peering link, using a bastion host to test cross-net access and remote desktop without exposing resources publicly.

Explore single root IO virtualization (SR-IOV) and virtual network interfaces to boost VM network performance, bypass software switches, and achieve near-physical NIC speeds with accelerated networking in cloud environments.

Analyze deploying cloud network solutions through scenarios, highlighting CDN benefits for streaming and edge caching to improve user experience, while addressing latency with SR-IOV and edge optimization.

Optimize compute sizing for virtual machines by balancing CPU, memory, GPU, and storage with the proper hypervisor. Incorporate dynamic resource allocation and memory ballooning to manage vCPU and prevent over-subscription.

Configure a virtual machine to meet software requirements by comparing minimum and recommended specs, then size RAM, CPU, GPU, and storage for cloud or local hosts.

Apply compute sizing to real deployment scenarios using dynamic resource allocation to balance VM workloads without downtime. Understand how live migration, memory ballooning, and vCPU calculations influence sizing decisions.

Explore cloud migration strategies across physical-to-virtual, virtual-to-virtual, and cloud-to-cloud scenarios, including assessment, planning, deployment, and optimization, with a focus on storage and database migrations and avoiding vendor lock.

Centralize logging for cloud operations to gain visibility, improve security posture, and reduce administrative complexity with SIEM and automation.

Monitor cloud operations by observing resources, measuring performance, and setting baselines and thresholds. Respond to alerts, learn and improve, and use log scrubbing and dlp policies to protect data.

Azure Monitor demonstrates monitoring, logging, and alerting in the cloud, configuring agents, log analysis, and performance metrics to trigger alerts via email, SMS, and push.

Automate backup confirmations and restore verification to ensure recoverable cloud data. Orchestrate lifecycle management, change control, and asset management with roadmaps and configuration databases.

Master patching and upgrading as maintenance to maintain cloud uptime, testing patches in non-production, and applying scope, rollback plans, and deployment strategies like n-1, rolling upgrades, blue-green, and canary.

Explore how dashboards and reports visualize cloud performance and cost, using tagging, queries, and chargebacks or showbacks to enable data-driven business decisions.

Explore tagging, patch management, and update management in a cloud environment, using dashboards to monitor resources, enable centralized patching, and implement chargeback and showback.

Explore cloud environment optimization through scenario-based practice, covering vertical vs horizontal scaling, virtualization hardware considerations, deduplication for migration, and edge computing to improve latency.

Explore how automation reduces repetitive cloud tasks, and how orchestration coordinates updates, scaling, and configuration drift mitigation through infrastructure as code, CI/CD, and container orchestration (Kubernetes).

Learn to automate configuration management in Azure using an automation account and desired state configuration to mitigate drift and deploy IIS across multiple virtual machines.

Analyze how automation and orchestration apply to real-world scenarios, exploring ci/cd benefits, container orchestration with Kubernetes, and related tools like Docker, Git, and Ansible.

Explore full, differential, incremental, and synthetic backups, with tape, disk, and object storage targets, retention policies, and RTO/RPO considerations for restoration in cloud and on-premises contexts.

Set up a cloud-based backup solution by creating a recovery services vault and backup policy for a virtual machine, then manage backups in the backup center and enable instant restore.

Explore disaster recovery tasks such as failover, failback, restoration, backups, and replication across on premises and cloud sites, plus disaster recovery documentation and geographic data center requirements.

Explore disaster recovery with a quick Azure-based VM replication demo, showing how to use recovery vaults, ASR replication between regions, and on-demand access to spin up resources with minimal downtime.

Master a systematic cloud troubleshooting model: identify the problem, form and test a theory, plan actions, verify functionality, and document outcomes with scope, change management, and backups.

Learn how to troubleshoot backup policy issues in a cloud environment, identify misconfigurations or wrong policy applications, and implement a dedicated policy aligned with Eastern time and retention rules.

Identify a cloud security policy violation in a VM with a public IP, disassociate the IP, close insecure ports, and use a bastion for secure remote management.

Identify mis-tagging as the root cause of deployment issues and fix tags to assign cloud resources to the correct marketing or development teams, ensuring accurate chargebacks.

Learn to troubleshoot Azure vm deployment issues by validating JSON templates, loading parameters, and using deployment logs to fix an invalid subnet configuration and complete the deployment.

Identify and fix cloud connectivity issues by examining Azure resource groups, VNet and subnet configurations, correcting IP addresses, and establishing VNet peering to restore cross-network communication.

Troubleshoot cloud connectivity by recreating the VM issue, gathering end-user details, and testing DNS name resolution and firewall rules to restore access to ITProTV.

Troubleshoot cloud performance by reproducing the issue on a vm, diagnose memory bottlenecks using task manager, and redeploy a larger vm to meet app ram requirements for production deployment.

Diagnose automation and patch issues by checking the automation account and VM readiness. Suggest a cross-team change ticket to reschedule updates without policy conflicts.