Validates understanding of how cloud computing changes the security model, including the differences between cloud and on-premise environments, cloud service models (IaaS, PaaS, SaaS), shared responsibility, cloud risk landscape, and basic cloud security architecture principles.
Domain 2 – Identity, Access and Zero Trust in Cloud Environments
Validates knowledge of identity-driven security in the cloud, including identity and access management (IAM), role-based and policy-based access, multi-factor authentication, privileged access, and Zero Trust security principles applied to cloud platforms.
Domain 3 – Data Protection and Cloud Cryptography
Validates knowledge of how information is protected in cloud environments, including data classification, encryption in transit and at rest, key management systems, secure storage, backup and retention, and prevention of data exposure and leakage.
Domain 4 – Cloud Infrastructure and Workload Security
Validates knowledge of how cloud-based systems are protected, including virtual machines, containers, platforms, secure configuration, vulnerability management, and foundational workload security principles.
Domain 5 – Network Security in Cloud Environments
Validates knowledge of how network security is implemented in the cloud, including virtual networks, segmentation, firewalls, security groups, web application firewalls, DDoS protection, and secure connectivity models such as VPNs and private links.
