Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying CCSP (ISC)2 Certified Cloud Security Professional Exam Guide
  • Table Of Contents Toc
  • Feedback & Rating feedback
CCSP (ISC)2 Certified Cloud Security Professional Exam Guide

CCSP (ISC)2 Certified Cloud Security Professional Exam Guide

By : Omar A. Turner, Navya Lakshmana
4.9 (22)
Buy this Book
close
close
CCSP (ISC)2 Certified Cloud Security Professional Exam Guide

CCSP (ISC)2 Certified Cloud Security Professional Exam Guide

4.9 (22)
By: Omar A. Turner, Navya Lakshmana
Buy this Book

Overview of this book

Preparing for the Certified Cloud Security Professional (CCSP) exam can be challenging, as it covers a wide array of topics essential for advancing a cybersecurity professional’s career by validating their technical skills. To prepare for the CCSP exam, you need a resource that not only covers all the exam objectives but also helps you prepare for the format and structure of the exam. Written by two seasoned cybersecurity professionals with a collective experience of hundreds of hours training CCSP bootcamps, this CCSP study guide reflects the journey you’d undertake in such training sessions. The chapters are packed with up-to-date information necessary to pass the (ISC)2 CCSP exam. Additionally, to boost your confidence, the book provides self-assessment questions, exam tips, and mock exams with detailed answer explanations. You’ll be able to deepen your understanding using illustrative explanations that briefly review key points. As you progress, you’ll delve into advanced technical aspects of cloud domain security, such as application security, design, managing and securing data, and infrastructure in the cloud using best practices and legal policies and procedures. By the end of this guide, you’ll be ready to breeze through the exam and tackle real-world cloud security challenges with ease.
Table of Contents (27 chapters)
close
close
close
Preface
Icon
Preface
Icon
Who This Book Is For
Icon
What This Book Covers
Icon
How to Get the Most Out of This Book
Icon
Online Practice Resources
Icon
Download the Color Images
Icon
Conventions Used
Icon
Get in Touch
Icon
Share Your Thoughts
Icon
Download a Free PDF Copy of This Book
Free Chapter
1
Chapter 1: Core Cloud Concepts
chevron up
Icon
Chapter 1: Core Cloud Concepts
Icon
Making the Most Out of This Book – Your Certification and Beyond
Icon
What Is Cloud Computing?
Icon
Essential Cloud Computing Characteristics
Icon
Cloud Stakeholders
Icon
Key Cloud Computing Technologies and Building Blocks
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
2
Chapter 2: Cloud Reference Architecture
Icon
Chapter 2: Cloud Reference Architecture
Icon
Cloud Service Models
Icon
Cloud Service Models and Categories
Icon
Cloud Deployment Models
Icon
Shared Considerations for Cloud Deployments
Icon
Emerging Technologies in Cloud Computing
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
3
Chapter 3: Top Threats and Essential Cloud Security Concepts and Controls
Icon
Chapter 3: Top Threats and Essential Cloud Security Concepts and Controls
Icon
The CIA Triad—Confidentiality, Integrity, and Availability
Icon
Common Threats to Cloud Deployments
Icon
Security Control Categories and Types
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
4
Chapter 4: Design Principles for Secure Cloud Computing
Icon
Chapter 4: Design Principles for Secure Cloud Computing
Icon
Security for IaaS, SaaS, and PaaS
Icon
Shared Responsibility Model for Cloud Service Models
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
5
Chapter 5: How to Evaluate Your Cloud Service Provider
Icon
Chapter 5: How to Evaluate Your Cloud Service Provider
Icon
Key Cloud Service Contractual Documents
Icon
Evaluation of the CSP Services
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
6
Chapter 6: Cloud Data Security Concepts and Architectures
Icon
Chapter 6: Cloud Data Security Concepts and Architectures
Icon
Structured and Unstructured Data
Icon
The Cloud Data Lifecycle
Icon
Various Storage Types and Common Threats
Icon
Data Classification and Discovery
Icon
Cloud Data Security Technologies and Common Strategies
Icon
Critical Cloud Data Security Strategies
Icon
Best Practices for Data Retention, Archival, and Deletion
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
7
Chapter 7: Data Governance Essentials
Icon
Chapter 7: Data Governance Essentials
Icon
Data Governance
Icon
IRM
Icon
Auditability in Cloud Data Governance
Icon
Traceability in Cloud Data Governance
Icon
Accountability in Cloud Data Governance
Icon
Cloud Data Life Cycle
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
8
Chapter 8: Essential Infrastructure and Platform Components for a Secure Data Center
Icon
Chapter 8: Essential Infrastructure and Platform Components for a Secure Data Center
Icon
Cloud Infrastructure and Platform Components
Icon
Physical Design
Icon
Environmental Design
Icon
Logical Design
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
9
Chapter 9: Analyzing Risks
Icon
Chapter 9: Analyzing Risks
Icon
Overview of Risk Management
Icon
Risk Identification and Analysis
Icon
Analyzing and Assessing Cloud Security Risks
Icon
Cloud Attack Surface Area, Vulnerabilities, Threats, and Attack Vectors
Icon
Addressing Cloud Security Risks – Safeguards and Countermeasures
Icon
Implementing Cloud Security Best Practices, Controls and Countermeasures
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
10
Chapter 10: Security Control Implementation
Icon
Chapter 10: Security Control Implementation
Icon
Physical and Environmental Protection Controls
Icon
System, Storage, and Communication Protection Controls
Icon
IAM Solutions for Identification, Authentication, and Authorization
Icon
Key Cloud Control Audit Mechanisms
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
11
Chapter 11: Planning for the Worst-Case Scenario – Business Continuity and Disaster Recovery
Icon
Chapter 11: Planning for the Worst-Case Scenario – Business Continuity and Disaster Recovery
Icon
BCDR Definitions
Icon
BCDR Strategies
Icon
Understanding an Organization’s Business Requirements
Icon
Creation, Implementation, and Testing of a BCDR Plan
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
12
Chapter 12: Application Security
Icon
Chapter 12: Application Security
Icon
Why is Application Security Critical?
Icon
Common Challenges in Securing Web Applications
Icon
Vulnerabilities with OWASP
Icon
Cloud Application Security Tools and Solutions
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
13
Chapter 13: Secure Software Development Life Cycle
Icon
Chapter 13: Secure Software Development Life Cycle
Icon
Traditional SDLC to SSDLC
Icon
Utilizing the SSDLC in Cloud Projects
Icon
Threat Modeling
Icon
Avoiding Vulnerable Code
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
14
Chapter 14: Assurance, Validation, and Verification in Security
Icon
Chapter 14: Assurance, Validation, and Verification in Security
Icon
The Importance of Assurance, Validation, and Verification
Icon
What Are Functional and Non-Functional Testing?
Icon
Security Testing and Quality Assurance
Icon
Two Approaches to Software Verification
Icon
Third-Party Review Processes
Icon
Measures to Secure APIs
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
15
Chapter 15: Application-Centric Cloud Architecture
Icon
Chapter 15: Application-Centric Cloud Architecture
Icon
Supplemental Security Components
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
16
Chapter 16: IAM Design
Icon
Chapter 16: IAM Design
Icon
IAM
Icon
Federated Identity
Icon
IdPs
Icon
SSO
Icon
MFA
Icon
CASB
Icon
Secrets Management
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
17
Chapter 17: Cloud Physical and Logical Infrastructure (Operationalization and Maintenance)
Icon
Chapter 17: Cloud Physical and Logical Infrastructure (Operationalization and Maintenance)
Icon
Hardware-Specific Security Configuration Requirements
Icon
Installation and Configuration of Management Tools
Icon
Virtual Hardware-Specific Security Configuration Requirements
Icon
Installation of Guest OS Virtualization Toolsets
Icon
Access Controls for Local and Remote Access
Icon
Secure Network Configuration
Icon
Network Security Controls
Icon
OS Baselining
Icon
Availability of Clustered Hosts
Icon
Availability of Guest OSs
Icon
Performance and Capacity Monitoring in Cloud Environments
Icon
Hardware Monitoring in Cloud Environments
Icon
Configuration of Host and Guest OS Backup and Restore Functions
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
18
Chapter 18: International Operational Controls and Standards
Icon
Chapter 18: International Operational Controls and Standards
Icon
Operational Controls and Standards
Icon
Change Management
Icon
Continuity Management
Icon
Information Security Management
Icon
Continual Service Improvement Management
Icon
Incident Management
Icon
Problem Management
Icon
Release Management
Icon
Deployment Management
Icon
Configuration Management
Icon
Service-Level Management
Icon
Availability Management
Icon
Capacity Management
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
19
Chapter 19: Digital Forensics
Icon
Chapter 19: Digital Forensics
Icon
Digital forensics
Icon
Forensic data collection methodologies
Icon
Evidence management
Icon
Collecting, acquiring, and preserving digital evidence
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
20
Chapter 20: Managing Communications
Icon
Chapter 20: Managing Communications
Icon
Managing communication with relevant parties
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
21
Chapter 21: Security Operations Center Management
Icon
Chapter 21: Security Operations Center Management
Icon
SOC
Icon
Monitoring of Security Controls
Icon
Log Capture and Analysis
Icon
Incident Management
Icon
Vulnerability Assessments
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
22
Chapter 22: Legal Challenges and the Cloud
Icon
Chapter 22: Legal Challenges and the Cloud
Icon
Legal Requirements and Unique Risks Within the Cloud
Icon
Understanding the Implications of Cloud to Enterprise Risk Management
Icon
Understanding Outsourcing and Cloud Contract Design
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
23
Chapter 23: Privacy and the Cloud
Icon
Chapter 23: Privacy and the Cloud
Icon
Privacy Issues
Icon
Difference between Contractual and Regulated Private Data
Icon
Country-Specific Legislation Related to Private Data
Icon
Jurisdictional Differences in Data Privacy
Icon
Standard Privacy Requirements
Icon
Privacy Impact Assessments (PIAs)
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
24
Chapter 24: Cloud Audit Processes and Methodologies
Icon
Chapter 24: Cloud Audit Processes and Methodologies
Icon
Understanding the Audit Process, Methodologies, and Required Adaptations for a Cloud Environment
Icon
Internal and External Audit Controls
Icon
Impact of Audit Requirements
Icon
Identify Assurance Challenges of Virtualization and the Cloud
Icon
Types of Audit Reports
Icon
Restrictions of Audit Scope Statements
Icon
Gap Analysis
Icon
Audit Planning
Icon
Internal ISMS
Icon
Policies
Icon
Identification and Involvement of Relevant Stakeholders
Icon
Specialized Compliance Requirements for Highly Regulated Industries
Icon
Impact of Distributed IT Model
Icon
Summary
Icon
Exam Readiness Drill – Chapter Review Questions
Icon
Working On Timing
25
Chapter 25: Accessing the Online Practice Resources
Icon
Chapter 25: Accessing the Online Practice Resources
Icon
How to Access These Materials
Icon
Troubleshooting Tips
Icon
Back to the Book
Icon
Why subscribe?
26
Other Books You May Enjoy
Icon
Other Books You May Enjoy
Icon
Share Your Thoughts
Icon
Download a Free PDF Copy of This Book

Making the Most Out of This Book – Your Certification and Beyond

This book and its accompanying online resources are designed to be a complete preparation tool for your CCSP Exam.

The book is written in a way that you can apply everything you’ve learned here even after your certification. The online practice resources that come with this book (Figure 1.1) are designed to improve your test-taking skills. They are loaded with timed mock exams, interactive flashcards, and exam tips to help you work on your exam readiness from now till your test day.

Before You Proceed

To learn how to access these resources, head over to Chapter 25, Accessing the Online Practice Resources, at the end of the book.

Figure 1.1 – Dashboard interface of the online practice resources

Figure 1.1 – Dashboard interface of the online practice resources

Here are some tips on how to make the most out of this book so that you can clear your certification and retain your knowledge beyond your exam:

  1. Read each section thoroughly.
  2. Make ample notes: You can use your favorite online note-taking tool or use a physical notebook. The free online resources also give you access to an online version of this book. Click the BACK TO THE BOOK link from the Dashboard to access the book in Packt Reader. You can highlight specific sections of the book there.
  3. Chapter Review Questions: At the end of this chapter, you’ll find a link to review questions for this chapter. These are designed to test your knowledge of the chapter. Aim to score at least 75% before moving on to the next chapter. You’ll find detailed instructions on how to make the most of these questions at the end of this chapter in the Exam Readiness Drill - Chapter Review Questions section. That way, you’re improving your exam-taking skills after each chapter, rather than at the end.
  4. Flashcards: After you’ve gone through the book and scored 75% more in each of the chapter review questions, start reviewing the online flashcards. They will help you memorize key concepts.
  5. Mock Exams: Solve the mock exams that come with the book till your exam day. If you get some answers wrong, go back to the book and revisit the concepts you’re weak in.
  6. Exam Tips: Review these from time to time to improve your exam readiness even further.

By the end of this chapter, you will be able to confidently answer questions on the following topics:

  • Cloud computing
  • Essential cloud computing characteristics
  • Cloud stakeholders
  • Key cloud computing technologies and building blocks
  • You will now go through each topic above.
End of Section 2
Next Section

Create a Note

Modal Close icon
You need to login to use this feature.
notes
bookmark search playlist download
font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Delete Note

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Edit Note

Modal Close icon
Write a note (max 255 characters)
Cancel
Update Note

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY