Cloud Security Expert Certification Combo Training

Course Description

Overview

The Cloud Security Expert Combo training is a whole new opportunity for aspiring cloud security professionals for various reasons. A cloud security expert is an individual with promising awareness of principles and best practices regarding cloud security. The gradual rise in cloud infrastructure adoption across various sectors demands effective cloud security measures to protect cloud-based systems and information. The facility of cloud security certifications by different notable vendors has undoubtedly provided a trustworthy platform for aspiring cloud security professionals to build their careers. The AWS Security Specialty Certification, Microsoft Azure AZ-500 Certification, and the Certified Cloud Security Professional (CCSP) Certification are the most favored certifications by employers worldwide for evaluating the cloud security capabilities and knowledge of candidates.

The new Cloud Security Expert Combo Training Course by Infosec Train has been tailored to provide a comprehensive preparation resource for candidates. The three certifications covered in this combo training course can build the perfect job portfolio for aspiring candidates. The training course would help in mastering all the topics in the exam objectives and develop a practical understanding of different use cases in cloud security. The combo certification training course by Infosec Train provides the following features for simplifying the preparation of candidates.

A direct approach for covering each exam topic thoroughly
The facility of comprehensive coverage of exam objectives in all cloud security certifications in the course
Emphasis on practical demonstrations for skill development of trainees
Inferences from real-life use cases for upgrading the knowledge of candidates for professional cloud security job roles
Coverage of fundamentals such as cloud architecture and the ways to integrate cloud security in the infrastructure

Why Cloud Security Expert Combo Training?

Cloud Security Expert Combo Training by Infosec Train is a credible tool for all aspiring candidates for cloud security certifications. Here are some of the notable reasons to choose Infosec Train Cloud Security Expert Combo Training Course.

Credibility of the brand of Infosec Train provides the assurance of best training resources and learning materials for candidates
Unique approach for certification training in a single domain i.e., cloud security, enables candidates to learn all cloud security fundamentals thoroughly.
Effective organization of chapters in the training course for each certification exam delivers ease and efficiency for candidates to learn the exam topics
Candidates can get insights on practical applications and different industrial use cases of cloud security with the combo training course.
Cost-effective pricing makes it easier for candidates to support their preparations with other tools like practice tests.

Target Audience

The Infosec Train Cloud Security Expert Combo Training is the most suitable option for all candidates aspiring to establish their cloud security career. The following individuals can also pursue the Cloud Security Expert combo online course:

Any individual aspiring to qualify for the AWS Security, AZ-500, and CCSP certifications
Individuals aspiring to strengthen their knowledge of concepts and practices regarding cloud security

Furthermore, individuals aspiring for the following roles could also approach the Infosec Train Cloud Security Expert combo online course,

Enterprise solution architects
Systems engineers
Security engineer
Security consultant
Security administrator
Systems architect
Security managers

Pre-requisites

Candidates should also note the essential prerequisites before diving into the Cloud Security Expert combo training by Infosec Train. The recommended prerequisites for the Cloud Security Expert training course are,

Minimum 2 years of experience in IT with a minimum of 6 months in the security domain
Skillset mapped to the AWS Certified Solutions Architect Associate / SysOps Administrator Associate (Certification is not mandatory)

While general prerequisites for the Cloud Security Expert combo course are,

In-depth familiarity with basic concepts in cloud security
Knowledge of networking and virtualization
Prior industry experience in security-based roles is preferable
Vision for professional development in cloud security
Knowledge of AWS and Azure Cloud fundamentals

On the other hand, it is also essential to know the prerequisites recommended for each certification in the combo training course.

The AWS Certified Security Specialty Certification recommends the following knowledge and experience prerequisites,

Minimum of two years of practical experience in security of AWS workloads
At least five years of hands-on experience in IT security with comprehensive involvement in the design and implementation of security solutions
Knowledge of security controls for AWS workloads

The AZ-500: Microsoft Azure Security Technologies certification exam imposes the following prerequisites for aspiring candidates,

Thorough expertise in scripting and automation
In-depth knowledge of networking and virtualization
Comprehensive knowledge of fundamental cloud capabilities along with Azure products and services

The prerequisites for the Certified Cloud Security Professional (CCSP) certification are as follows,

At least five years of practical work experience in the field of information technology
At least one year of experience in one or multiple domains of CCSP certification
Part-time work and internships in cloud security job roles

Note:

CCSP® is a registered mark of The International Information Systems Security Certification Consortium ((ISC)2).
We are not an authorized training partner of (ISC)2.

Exam Information

AWS Certified Security – Specialty Exam

The AWS Security Specialty certification is specially tailored for professionals who have been working in a cloud security role with almost two years of practical experience in the security of AWS workloads. The basic information of the exam is:

Certification Name	AWS Certified Security – Specialty (SCS-C01)
Exam Format	Multiple Choice Questions
Number of Questions	40 to 60
Exam Duration	150 Minutes
Passing Marks	700 out of 1000
Exam Languages	Korean, English, Simplified Chinese, and Japanese

AZ-500: Microsoft Azure Security Technologies

The Microsoft Azure Security Technologies or AZ-500 certification exam is specially designed for Microsoft Certified Azure Security Engineer Associate. The basic information of the exam is:

Certification Name	Microsoft Azure Security Technologies (AZ-500)
Exam Format	Multiple Choice, Multiple Answer
Number of Questions	40 to 60
Passing Marks	700 out of 1000
Exam Languages	Korean, English, Simplified Chinese, and Japanese

Certified Cloud Security Professional (CCSP) Certification

The Certified Cloud Security Professional (CCSP) certification is a practical certification by (ISC)2 for different cloud security responsibilities. The basic information of the exam is:

Certification Name	Certified Cloud Security Professional (CCSP)
Exam Format	Multiple Choice
Number of Questions	125
Exam Duration	3 Hours
Passing Marks	700 out of 1000
Exam Languages	English

Learning path

Course 1

AWS Certified Security (SCS-C01)
Course 2

Azure Security (AZ-500)
Course 3

CCSP
Master's Certificate

You will get certificate by Infosectrain

GET A FREE DEMO CLASS

Course Objectives

The Cloud Security Expert Combo Training course helps gain extensive knowledge and skills in basic to advanced cloud security concepts. The training course helps you cover all the essential topics and concepts necessary to qualify for the certification exams in concern. The course also aims to provide a comprehensive all-around impression of the practical roles and responsibilities and strengthen candidates’ capabilities for addressing the performance-based questions in the certification exams. Most importantly, the Cloud Security Expert combo course is an excellent option for mastering all the practical use cases of different cloud security services. Besides, candidates would also find the platform to improve their expertise in the hands-on resolution of certification questions.

The learning objectives of the Cloud Security Expert combo training by Infosec Train are as follows,

In-depth familiarity with all exam topics in AWS Specialty Certification
Coverage of all exam skills for AZ-500 certification
Knowledge of all domains in the CCSP certification exam with accordance to the new syllabus
Deep understanding of various methods, techniques, protocols, and best practices for cloud security
The ability to implement of cloud security knowledge and expertise for solving real-world problems

Course Content

Module 1 (Mapped to AWS Certified Security – Specialty)

Domain 1: Incident Response

Given an AWS abuse notice, evaluate the suspected compromised instance or exposed access keys.
Preparation stages for incident response
Mitigation steps to perform Incident response steps
Verify that the Incident Response Plan includes relevant AWS services
Evaluate suspected compromised credentials
Evaluate suspected compromised EC2 Instances
AWS Guard Duty
Evaluate the configuration of automated alerting, and execute possible remediation of security-related incidents and emerging issues.

Domain 2: Logging and Monitoring

Design, Implement & troubleshoot security monitoring, and alerting.
Design, Implement & troubleshoot a logging solution.
Continuous Security Monitoring
AWS Security Solutions for Visibility and Compliance
AWS Inspector
AWS Detective & Security Hub
AWS WAF and Shield
AWS Systems Manager
AWS CloudWatch, CloudTrail, and Config
AWS Athena
AWS Macie
S3 Events & VPC Flow Logs

Domain 3: Infrastructure Security

Design edge security on AWS.
Design and implement a secure network infrastructure.
Troubleshoot a secure network infrastructure
Design and implement host-based security
AWS CloudFront
Security groups & Network ACLs
IPS/IDS concepts in cloud
DDoS Mitigation
Network Segmentation
Bastion Hosts
Virtual Private Cloud (VPC)
VPC Endpoints
Compliance Frameworks
AWS lambda fundamentals
AWS Simple Email Service
AWS Route53 DNS

Domain 4: Identity and Access Management

Design and implement a scalable authorization and authentication system to access AWS resources.
Understand the Principle of Least Privilege
IAM Policies & Roles
IAM JSON Policy Elements
IAM Permission boundaries
Understanding Delegation, STS
Cross account policies & roles
Understanding Federation & SSO
AWS Directory services
AWS Organizations
S3 Security, Cross Account S3 access
S3 Versioning
AWS License manager
AWS Cognito
Troubleshoot an authorization and authentication system to access AWS resources.

Domain 5: Data Protection

Design and implement key management and use
Cryptography fundamentals
Cloud Hardware Security Module (HSM)
AWS Key Management Service (KMS)
Envelope Encryption
KMS Authentication and Access Control
CloudTrail and Encryption
EBS Architecture and Secure Data Wiping
S3 Encryption
Secrets Manager
AWS Certificate Manager
Load Balancer Security
Docker and container security fundamentals
AWS Glacier
Troubleshoot key management.
Design and implement a data encryption solution for data at rest and data in transit.

Module 2 (Mapped to Azure AZ-500)

Azure Cloud Fundamentals
- Azure infrastructure: Regions, Availability Zones, Geographies
- Azure Resource Groups, Tags & ARM
- Azure Portal, Cloud Shell, Powershell, and CLI
- Azure subscription
- Billing and cost management
Azure Virtual Machines
- Compile a checklist for creating an Azure Virtual Machine
- Describe the options available to create and manage an Azure Virtual Machine
- Availability management, Maintenance, and Downtime
- Monitoring VMs
- Creating VM with Powershell/Bash
- Managing Linux Instances
- Availability Sets, Fault Domain and Update Domain
- VM Custom Script Extensions, DSC
- VM Scale Sets, Types scaling
- Azure Bastion Service
- Deploying ARN Templates
- Add Data Disks & NIC to VM
- Resizing VMs
- Azure disk encryption & Disk encryption on Windows
- VM security best practices
- Key vault for disk encryption
- VM backup & restore
- VM hardening in Security Center
Azure App Services
- Introduction to Azure app services
- App Service plans & sizing
- Web apps and settings
- Scalability
Containers & Security
- Containerization concepts, Docker & Kubernetes overview
- Azure Container Service (ACS)
- Azure Kubernetes Service (AKS)
- Create an AKS Cluster
- Create a container registry
- Run and application on Kubernetes
- Securing the container registry
- Container isolation for AKS
- Container security in AKS & Container scanning
Azure Storage Services
- Azure storage accounts overview
- Access Keys and Shared Access Signature (SAS)
- Storage Types, Standard & premium storage accounts
- Create Storage Account
- Azure Storage Explorer
- Azure Blob Containers
- Storage Performance Tiers
- Blob Access Policies
- Blob Storage Pricing
- Azure Files
- Files Vs. Blobs
- Azure File Sync
- Secure File Transfer
- File Share Snapshots
- Storage Security & Authorization Options
- Storage Security, Encryption keys & Key Vault
- Managing Permissions
- Blob Public Access Level
- RBAC Authentication for Storage
- Log Analytics
- AZ Copy
- Azure Backup
- Azure Import/Export
- Azure CDN
Azure Virtual Network (Vnet)
- Purpose of Virtual Networks
- Creating a private network in Azure
- Subnets
- Azure Service Endpoints
- Domain and Custom Domains
- Azure DNS
- DNS Delegation
- Public and Private zones
- Network Security Groups
- Azure Load Balancing Services
- Azure Application Gateway
- Network Traffic Management & Network Routing
- User-defined routes & Vnet peering
- Gateway Transit
- Virtual Network Gateway
- Azure firewall
- DDoS protection
Azure Active Directory
- Azure AD overview
- Create an Azure AD tenant
- AD Identity protection
- Conditional Access
- Managing Users, Groups & Devices
- Self Service Password Reset
- AD Connect, Hybrid Identities & identity protection
- SSO and MFA
- Managing Role-Based Access Control
- Service principals
- App registration
Secure Access by using Azure AD (PIM and Tenant Security)
- Privileged Identity Management overview
- Monitor privileged access for Azure AD Privileged Identity Management (PIM)
- Configure Access Reviews Assigning resource roles (RBAC)
- PIM role activation
Governance and Role-based access control (RBAC)
- RBAC overview
- Implementing effective RBAC
- Configure subscription and resource permissions
- Configure resource group permissions
- Configure custom RBAC roles
- Identify the appropriate role
- Apply principle of least privilege
- Azure Policies
- Subscription policies
- Configure security settings by using Azure Policy
- Configure security settings by using Azure Blueprint
- Azure resource locks
Security Operations
- Azure Monitor and Alerts
- Log Analytics
- Azure Security Center
- Evaluate vulnerability scans from Azure Security Center
- Configure Just in Time VM access by using Azure Security Center
- Configure centralized policy management by using Azure Security Center
- Configure compliance policies and evaluate for compliance by using Azure Security Center
- Monitor Security by using Azure Sentinel
- Create and customize alerts
- Data sources for Azure Sentinel
- Evaluating results
Secure Data Services
- Azure Database services
- Azure SQL service
- SQL long term backup retention
- Azure SQL DB Advanced Threat Protection
- Database encryption
- Design auditing and caching strategies
- Azure Cosmos DB
- Azure Data Lake Store
Key Management
- Encryption and key management
- Azure Key Vault
- manage permissions to secrets, certificates, and keys
- Configure RBAC usage in Azure Key Vault
- Configure key rotation

Module 3 (Mapped to CCSP)

Domain 1: Cloud Concepts, Architecture and Design

1.1 Understand Cloud Computing Concepts

1.2 Describe Cloud Reference Architecture

1.3 Understand Security Concepts Relevant to Cloud Computing

1.4 Understand Design Principles of Secure Cloud Computing

1.5 Evaluate Cloud Service Providers

Domain 2: Cloud Data Security

2.1 Describe Cloud Data Concepts

2.2 Design and Implement Cloud Data Storage Architectures

2.3 Design and Apply Data Security Technologies and Strategies

2.4 Implement Data Discovery

2.5 Implement Data Classification

2.6 Design and Implement Information Rights Management (IRM)

2.7 Plan and Implement Data Retention, Deletion and Archiving Policies

2.8 Design and Implement Auditability, Traceability and Accountability of Data Events

Domain 3: Cloud Platform and Infrastructure Security

3.1 Comprehend Cloud Infrastructure Components

3.2 Design a Secure Data Center

3.3 Analyze Risks Associated with Cloud Infrastructure

3.4 Design and Plan Security Controls

3.5 Plan Disaster Recovery (DR) and Business Continuity (BC)

Domain 4: Cloud Application Security

4.1 Advocate Training and Awareness for Application Security

4.2 Describe the Secure Software Development Life Cycle (SDLC) Process

4.3 Apply the Secure Software Development Life Cycle (SDLC)

4.4 Apply Cloud Software Assurance and Validation

4.5 Use Verified Secure Software

4.6 Comprehend the Specifics of Cloud Application Architecture

4.7 Design Appropriate Identity and Access Management (IAM) Solutions

Domain 5: Cloud Security Operations

5.1 Implement and Build Physical and Logical Infrastructure for Cloud Environment

5.2 Operate Physical and Logical Infrastructure for Cloud Environment

5.3 Manage Physical and Logical Infrastructure for Cloud Environment

5.4 Implement Operational Controls and Standards (e.g., Information Technology Infrastructure Library (ITIL), International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 20000-1)

5.5 Support Digital Forensics

5.6 Manage Communication with Relevant Parties

5.7 Manage Security Operations

Domain 6: Legal, Risk, and Compliance

6.1 Articulate Legal Requirements and Unique Risks within the Cloud Environment

6.2 Understand Privacy Issues

6.3 Understand Audit Process, Methodologies, and Required Adaptations for a Cloud Environment

6.4 Understand the Implications of Cloud to Enterprise Risk Management

6.5 Understand Outsourcing and Cloud Contract Design

Need customized curriculum? Talk to Advisor

1800-843-7890 (India)
Call Now

Explore

Cyber Security Orientation Program (Foundation Level) Online Training

Explore

Pentester Combo Training & Certification Course

Explore

Cyber Security Analyst Training Course

Explore

Learners around the world

Sudhara Vipin

USA

Course and training were excellent. The Training methodology incorporated by InfoSec Train helped me to understand the concepts effectively. Looking forward to experiencing more such learning experiences with this team!

Vedprakash Upadhyay

India

This was my first training with the InfoSec train and I'd like to appreciate all the efforts taken by my tutor. He is so great in explaining every topic and I loved the experience of learning from him. I would definitely recommend these courses to my colleagues. Thank you Team InfoSecTrain!... Read More

Samuel Koshy

The Training instructor was well prepared for the classes and could solve the doubts presented to him. Thoroughly enjoyed his delivery and the way the overall training was structured. Kudos to Team InfoSec Train.