Network Security Specialist to Cloud Security Architect E-Learning

With more businesses implementing cloud technology, it's important to have proper security measures in place. This Learning Kit explores the steps required to go from a Network Security Specialist to a Cloud Security Architect.

Learning Kits are structured learning paths, mainly within the Emerging Tech area. A Learning Kit keeps
the student working toward an overall goal, helping them to achieve your career aspirations. Each part takes the student step by step through a diverse set of topic areas. Learning Kits are
made up of required tracks, which contain all of the learning resources available such as Assessments (Final Exams), Mentor, Practice Labs and of course E learning. And all resources with a 365 days access from first activation.

This Learning Kit, with more than 30 hours of online content, is divided into the following tracks:

Course content

Track 1: Network Security Specialist

In this track, the focus will be on cloud services, cloud security fundamentals, business continuity management, and cloud computing security.
Courses (8 hours +):

Cloud Services: Cloud Computing Concepts

Course: 58 Minutes

• Course Overview
• Moving to the Cloud
• Cloud Computing Roles
• On-premise vs. Cloud
• IaaS
• SaaS
• PaaS
• Private Cloud
• Public Cloud
• Hybrid Cloud
• Community Cloud
• Cloud Migration Risks and Benefits
• Common Cloud Vulnerabilities
• Course Summary

Cloud Security Fundamentals: Basics of Cloud Operations

Course: 54 Minutes

• Course Overview
• Cloud Computing Definitions and Roles
• Key Cloud Computing Characteristics
• Virtualization Building Block Technologies
• Compute Building Block Technologies
• Storage Building Block Technologies
• Networking Building Block Technologies
• Database Building Block Technologies
• Comparisons of Common Public CSP Products
• Exercise: Describing Cloud Computing Technologies

Cloud Security Fundamentals: Architectural & Design Concepts

Course: 33 Minutes

• Course Overview
• The Three-Tier Design Model
• The Shared Responsibility Model
• Performing Cost/Benefit Analysis
• Common Development Lifecycles
• Basics of Risk Management
• Deployment and migration strategies
• The CSA Cloud Data Lifecycle
• Storage Management Lifecycle Basics
• Exercise: Describe Cloud Architecture Concepts

Cloud Security Fundamentals: Cloud Infrastructure Security

Course: 1 Hour

• Course Overview
• Design and Plan Security Controls
• Secure the Root Account
• Identity and Access Management Groups and Users
• IAM Policies and Permissions
• IAM Roles
• Secure Management Access
• Network Access Control Lists
• Stateful Firewalls in the Cloud
• Web Application Firewalls
• Best Practices for Hardening VMs
• Exercise: Describing Cloud Infrastructure Security

Cloud Security Fundamentals: Cloud Data Security

Course: 48 Minutes

• Course Overview
• Survey of Cryptographic Mechanisms
• Common Cryptographic Protocols
• Client-side vs. Server-side Encryption
• File and Database Security
• Object Storage Security
• Key Management Services
• Public Key Infrastructure
• Hardware Security Modules
• Exercise: Describing Cloud Data Security

Cloud Security Fundamentals: Cloud Application Security

Course: 44 Minutes

• Course Overview
• Training and Awareness in Application Security
• Cloud Software Assurance and Validation
• Using Verified Secure Software
• Applying the Secure Software Development Life-Cycle
• Cloud Application Architectures
• Federation and Single-Sign-On Solutions
• Advanced Cloud Security Services and Products
• Exercise: Cloud Application Security

Cloud Security Fundamentals: Legal & Compliance

Course: 30 Minutes

• Course Overview
• Managing Compliance with Regulations and Controls
• Legal Requirements and Risks within the Cloud
• Privacy Issues and Jurisdictional Variation
• Audit Processes and Methodologies for the Cloud
• Outsourcing and Cloud Contract Design
• Survey of Common Regulations and Mandates
• Exercise: Legal and Compliance

Business Continuity: Cloud Integration

Course: 1 Hour, 4 Minutes

• Course Overview
• Cloud Secure Data Lifecycle
• Access Control
• Data and Media Sanitization
• Virtualization Security
• Common Threats
• Evaluating Cloud Service Providers
• Cloud infrastructure Components
• Cloud Infrastructure Risk Assessment
• Data Security Strategies
• Data Discovery and Classification
• Data Rights Management
• Information Rights Management
• Course Summary

Business Continuity: Secure Cloud Computing

Course: 49 Minutes

• Course Overview
• Business Continuity
• Disaster Recovery Strategy
• Migrating Applications to the Cloud
• Data Ownership
• Legal Considerations
• Cost-Benefit Analysis
• Confidentiality, Integrity, and Availability
• Cloud Offering Services
• Functional Security Requirements
• Security Controls
• Retention and Archiving
• Traceability and Accountability
• Course Summary

Cloud Computing Security: Cloud Management

Course: 1 Hour, 13 Minutes

• Course Overview
• Cloud Service Categories
• Cloud Deployment Model Considerations
• Cloud Management
• Cloud Application Architecture
• Identity and Access Management Solutions
• Physical vs. Logical Infrastructure
• Operational Controls and Standards
• Regulations and Compliance
• Privacy Concerns
• Auditing
• Service Level Agreements
• Vendor Management
• Course Summary

Assessment:

Network Security Specialist

Track 2: Security Admin

In this track, the focus will be on security administration and cloud security administration.
Courses (6 hours +)

Cloud Security Administration: Introduction

Course: 1 Hour, 6 Minutes

• Course Overview
• Administration Basics
• Security Baselines
• Cloud Delivery Models
• Architecture of Cloud
• Introduction to Compliance
• Solution Design Basics
• Compliance Strategy
• Cloud Security and Services
• Building Blocks of Cloud Security
• Course Summary

Cloud Security Administration: Infrastructure Planning

Course: 56 Minutes

• Course Overview
• Evolution of Cloud Infrastructure
• Cloud Computing Software Security
• Web Services for the Cloud
• Cloud and Risk
• Service Provider Risk
• Cloud Data Center
• OpenSource Software
• Cloud Security Challenges
• Encryption and Security
• BCDR
• BCDR Plan
• Course Summary

Cloud Security Administration: Cloud Data & Application Security

Course: 1 Hour, 2 Minutes

• Course Overview
• Isolation and Cloud Storage
• Microdata Access
• Secure Deployment Practices
• Identity Access Control
• IAM in AWS and Azure
• Life Cycle of Software
• Encryption and Key Management
• SAAS Security
• Business Continuity
• Supplemental Security Devices
• Data Governance
• Course Summary

Cloud Security Administration: Hardened Cloud Security

Course: 46 Minutes

• Course Overview
• Hardened Hosts and Guests
• Physical Security
• Data Confidentiality
• Vulnerability Analysis
• Security Decoys and Techniques
• Secure Query Execution
• Privacy and Information Systems
• Data and Media Sanitization
• Course Summary

Cloud Security Administration: Continuous Operational Improvement

Course: 1 Hour, 27 Minutes

• Course Overview
• Design Concepts
• Enterprise Operations
• Securing Network Operations
• Dynamic Operations Accounting
• Access Control Operations
• Patch Management Plan
• ITSM and Operations Management
• Risk Management Process
• Communication with Stakeholders
• Course Summary

Cloud Security Administration: Regulatory Conformance

Course: 1 Hour, 30 Minutes

• Course Overview
• Legal and Compliance
• Framework and Guidelines
• e-Discovery
• Auditing the Cloud
• Standards and Privacy Requirements
• Service Level Agreements
• Risk Mitigation
• Cloud Certification
• Supply Chain Managemen
• Course Summary

Assessment:

Security Admin

Track 3: Cloud Security Admin

In this track, the focus will be on cloud security management and securing Amazon Web Services.
Courses (6 hours +)

Cloud Security Management: Architecture Security

Course: 1 Hour, 13 Minutes

• Course Overview
• Cloud Security Management
• Cloud Computing Definitions
• Cloud Computing Roles
• Cloud Transition Scenarios and Functions
• Network Security and Perimeter
• IAM and Access Control
• Common Threats
• Security Considerations with Cloud Models
• Cloud Secure Data Life Cycle
• Business Continuity and DR Planning
• Course Summary

Cloud Security Management: Operations Security

Course: 1 Hour, 25 Minutes

• Course Overview
• Factors Affecting Data Center Design
• Enterprise Operations
• Securing Network Configurations
• Accounting for Dynamic Operations
• Patch Management Planning
• Monitoring Performance
• Operations Management
• Operations Management BCM
• Digital Evidence Operations
• Stakeholder Communication
• Course Summary

Cloud Security Management: Data Security

Course: 49 Minutes

• Course Overview
• Introduction to Data Security
• Data Functions and Controls
• Data Security Technologies
• Data Discovery and Classification
• Data Privacy Acts
• Digital Rights Management
• AWS KMS
• Data Events
• Course Summary

Cloud Security Management: Risk Management

Course: 1 Hour, 5 Minutes

• Course Overview
• Introduction to Cloud Risk
• Physical and Environmental Protection
• Virtualization Systems Controls
• Risk Audit Mechanisms
• Cloud and BCDR
• BCDR Risks
• Creating a BCDR Plan
• Course Summary

Cloud Security Management: Platform & Infrastructure Security

Course: 50 Minutes

• Course Overview
• Network and Communications in the Cloud
• Physical and Environmental Protections
• Virtualization System Controls
• Storage in the Cloud
• Cloud Countermeasure Strategies
• System and Communication Protection
• Course Summary

Cloud Security Management: Legal & Compliance

Course: 48 Minutes

• Course Overview
• Cloud Computing Framework and Guidelines
• Legal Controls and Cloud Service Providers
• Auditing in the Cloud
• Standard Privacy Requirements
• Impact of Distributed IT Models
• Cloud Implications on Enterprise Risk Management
• Outsourcing and Contract Design
• Course Summary

Securing AWS: Fundamentals

Course: 29 Minutes

• Course Overview
• The Shared Responsibility Model
• Understanding the CIA Triad
• Examining Types and Categories of Controls
• Reviewing Core AWS Services
• Surveying Common Threats to AWS Services
• AWS Compliance Services
• Exercise: AWS Security Basics

Securing AWS: Identity & Access Management

Course: 40 Minutes

• Course Overview
• Root Account Security
• Credentials, Passwords, and Access Keys
• Using the AWS Command Line Interface
• Using a Bastion Host
• Introduction to the AWS IAM Service
• IAM Managed Policies
• Exercise: AWS IAM

Securing AWS: Infrastructure Security

Course: 55 Minutes

• Course Overview
• Secure VPC Design
• Network Access Control Lists
• Security Groups for Linux
• Security Groups for Windows
• Web Application Firewall
• AWS Shield and Inspector
• AWS GuardDuty
• AWS Site-to-Site VPN
• AWS SSO and Cognito
• Exercise: Infrastructure Security

Securing AWS: Data Protection

Course: 32 Minutes

• Course Overview
• AWS Cryptography Fundamentals
• Using Access Keys and Key Pairs
• Client-Side vs. Server-Side Encryption
• AWS Key Management Service
• AWS Certificate Manager
• AWS CloudHSM
• Exercise: AWS Data Security

Assessment:
Cloud Security Admin

Track 4: Cloud Security Architect

In this track, the focus will be on cloud security architect and cloud platform security.
Courses (6 hours +)

Cloud Platform Security: Designing Secure Access

Course: 1 Hour, 31 Minutes

• Course Overview
• Identity and Access Management
• Groups and Permissions
• Privileged Access Management
• IAM in Azure
• Azure Active Directory
• Configuring IAM in Azure Cloud
• Availability Zones and Regions
• Virtual Private Clouds
• Linked Services on AWS
• Designing Secure VPC on AWS
• Service Controls in GCP
• Designing Secure VPC in GCP
• Network Security Groups and VNets
• Designing Virtual Networks on Azure
• Course Summary

Cloud Platform Security: Infrastructure Protection

Course: 1 Hour, 33 Minutes

• Course Overview
• Optimizing Security in the Cloud
• Using Azure Advisor
• Security Layers of Cloud Infrastructure
• Applying Cloud Security
• Google Cloud Platform Security
• Access Control Lists (ACLs)
• Custom Access Provisioning Using ACLs
• Configuring ACLs in GCP
• Applications of ACLs in Azure
• Using NSGs to Control Network Access
• Applying Certified Encryption on Hardware
• Enabling the Hardware Security Module in Azure
• Using the Cloud Hardware Security Module in GCP
• Understanding Cryptographic Keys and KMS
• Azure Key Vault
• GCP Cloud KMS
• Course Summary

Cloud Platform Security: System Monitoring & Protection

Course: 1 Hour, 30 Minutes

• Course Overview
• Cloud Monitoring
• Using Built-in Security Information in Azure
• Monitoring Cloud Infrastructure Security in GCP
• Common Types of Vulnerabilities
• Common Security Vulnerabilities
• Combating Threats
• Tools to Combat Threats in Azure
• Google Cloud Armor - Defending Your Services
• Cloud Security Scanner
• VM Placement Algorithm
• Preventing Threats with the VM Placement Algorithm
• Course Summary

Cloud Platform Security: Incident Response & Remediation

Course: 1 Hour, 10 Minutes

• Course Overview
• Preventing Vulnerabilities in Azure
• Detecting Vulnerabilities in Azure
• Responding to Vulnerabilities in Azure
• Preventing Vulnerabilities in GCP
• Using the Activity Page
• Using IAM Logging
• Security Incidents in Azure
• Audit Logs in GCP
• Failover in Azure
• Data Recovery in GCP
• Course Summary

Cloud Platform Security: Platform & Infrastructure Security

Course: 53 Minutes

• Course Overview
• Network and Communications in the Cloud
• Physical and Environmental Protections
• Virtualization System Controls
• Cloud Storage
• Cloud Countermeasure Strategies
• System and Communication Protections
• Course Summary

Assessment:

Cloud Security Architect