Certificate of Cloud Security Knowledge Exam Prep

Covers foundational cloud concepts, governance, organizational management, and risk/compliance considerations. This domain emphasizes understanding cloud service and deployment models, designing secure and resilient architectures, and managing governance, risk, and compliance across the enterprise.

• Task 1.1: Explain core cloud computing concepts and service/deployment models
• Differentiate IaaS, PaaS, and SaaS responsibilities
• Compare public, private, hybrid, and multi-cloud deployment models
• Describe essential cloud characteristics
• Apply migration concepts
• Task 1.2: Apply cloud architecture and design principles
• Interpret shared responsibility across service models

Key references: CCSK official exam guide · ExamPal shared topic tree

Covers data security, identity and access management, and foundational Zero Trust controls. This domain focuses on protecting data across its lifecycle, securing cryptographic material and secrets, and implementing strong identity, authentication, and access controls.

• Task 2.1: Classify and handle data throughout its lifecycle
• Apply classification schemes to cloud-hosted data
• Define handling requirements for storage, use, sharing, and disposal
• Determine retention and destruction requirements
• Identify ownership and accountability for data protection decisions
• Task 2.2: Protect data at rest, in transit, and in use
• Select encryption controls appropriate to risk and regulatory requirements

Key references: CCSK official exam guide · ExamPal shared topic tree

Covers infrastructure and networking, workload protection, and related cloud platform security. This domain emphasizes securing networks, compute resources, containers, serverless services, platform controls, applications, APIs, and DevSecOps workflows.

• Task 3.1: Secure cloud networking and segmentation
• Explain the purpose of VPCs, VNets, subnets, and routing controls
• Apply segmentation using security groups, network ACLs, and microsegmentation
• Protect ingress and egress paths with layered controls
• Evaluate connectivity options for hybrid and multi-cloud architectures
• Task 3.2: Protect cloud-hosted workloads and compute resources
• Secure virtual machines through hardening, patching, and baseline configuration

Key references: CCSK official exam guide · ExamPal shared topic tree

Covers monitoring, detection, resilience, and response in cloud environments. This domain emphasizes logging and visibility, threat detection and investigation, incident response, forensics, backup and disaster recovery, and continuous security improvement.

• Task 4.1: Design logging and monitoring for cloud visibility
• Collect activity, audit, platform, network, and application logs
• Centralize telemetry across accounts, subscriptions, and providers
• Ensure timestamps, integrity, and retention support investigations
• Balance visibility requirements with cost and operational constraints
• Task 4.2: Detect threats and investigate suspicious activity
• Analyze administrative actions, API calls, and access events

Key references: CCSK official exam guide · ExamPal shared topic tree