

Beschreibung
Klappentext This value-packed set for the serious (ISC)² CCSP certification candidate combines the bestselling CCSP (ISC)² Certified Cloud Security Professional Official Study Guide, 3rd Edition with an updated collection of practice questions and practice exa...Klappentext This value-packed set for the serious (ISC)² CCSP certification candidate combines the bestselling CCSP (ISC)² Certified Cloud Security Professional Official Study Guide, 3rd Edition with an updated collection of practice questions and practice exams in CCSP (ISC)² Certified Cloud Security Professional Official Practice Tests, 3rd Edition to give you the best preparation ever for the high-stakes (ISC)² CCSP exam.(ISC)² CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition is your ultimate resource for the CCSP exam. As the only official study guide reviewed and endorsed by (ISC)², this guide helps you prepare faster and smarter with Sybex study tools that include pre-test assessments that show you what you know, and areas you need to further review. Objective maps, exercises, and chapter review questions help you gauge your progress along the way, and the Sybex interactive online learning environment includes access to a PDF glossary, hundreds of flashcards, and two complete, online practice exams. Covering all domains tested by the CCSP exam, this book walks you through Architectural Concepts and Design Requirements, Cloud Data Security, Cloud Platform and Infrastructure Security, Cloud Application Security, Operations, and Legal and Compliance with real-world scenarios to help you apply your skills along the way.Along with the book, you also get access to Sybex's stellar online interactive learning environment that includes two unique practice exams to help you identify where you need to study more, electronic flashcards to reinforce your learning and give you last-minute test prep before the exam, and a searchable glossary in PDF format to give you instant access to the key terms you need to know for the exam.Add to that the thoroughly updated (ISC)² CCSP Certified Cloud Security Professional Official Practice Tests, 3rd Edition, with two more complete exams and at least another 60 questions for each of the six domains and you'll be ready to succeed on the challenging CCSP exam. Zusammenfassung This value-packed set for the serious (ISC)² CCSP certification candidate combines the bestselling CCSP (ISC)² Certified Cloud Security Professional Official Study Guide, 3rd Edition with an updated collection of practice questions and practice exams in CCSP (ISC)² Certified Cloud Security Professional Official Practice Tests, 3rd Edition to give you the best preparation ever for the high-stakes (ISC)² CCSP exam.(ISC)² CCSP Certified Cloud Security Professional Official Study Guide, 3rd Edition is your ultimate resource for the CCSP exam. As the only official study guide reviewed and endorsed by (ISC)², this guide helps you prepare faster and smarter with Sybex study tools that include pre-test assessments that show you what you know, and areas you need to further review. Objective maps, exercises, and chapter review questions help you gauge your progress along the way, and the Sybex interactive online learning environment includes access to a PDF glossary, hundreds of flashcards, and two complete, online practice exams. Covering all domains tested by the CCSP exam, this book walks you through Architectural Concepts and Design Requirements, Cloud Data Security, Cloud Platform and Infrastructure Security, Cloud Application Security, Operations, and Legal and Compliance with real-world scenarios to help you apply your skills along the way.Along with the book, you also get access to Sybex's stellar online interactive learning environment that includes two unique practice exams to help you identify where you need to study more, electronic flashcards to reinforce your learning and give you last-minute test prep before the exam, and a searchable glossary in PDF format to give you instant access to the key terms you need to know for the exam.Add to that the thoroughly updated (ISC)² CCSP Certified Cloud Security Professional Official Practice Tests, 3rd Edition, with two m...
Inhalt
Introduction xxiii
Assessment Test xxxii
Chapter 1 Architectural Concepts 1
Cloud Characteristics 3
Business Requirements 5
Understanding the Existing State 6
Cost/Benefit Analysis 7
Intended Impact 10
Cloud Computing Service Categories 11
Software as a Service 11
Infrastructure as a Service 12
Platform as a Service 12
Cloud Deployment Models 13
Private Cloud 13
Public Cloud 13
Hybrid Cloud 13
Multi- Cloud 13
Community Cloud 13
Multitenancy 14
Cloud Computing Roles and Responsibilities 15
Cloud Computing Reference Architecture 16
Virtualization 18
Hypervisors 18
Virtualization Security 19
Cloud Shared Considerations 20
Security and Privacy Considerations 20
Operational Considerations 21
Emerging Technologies 22
Machine Learning and Artificial Intelligence 22
Blockchain 23
Internet of Things 24
Containers 24
Quantum Computing 25
Edge and Fog Computing 26
Confidential Computing 26
DevOps and DevSecOps 27
Summary 28
Exam Essentials 28
Review Questions 30
Chapter 2 Data Classification 35
Data Inventory and Discovery 37
Data Ownership 37
Data Flows 42
Data Discovery Methods 43
Information Rights Management 46
Certificates and IRM 47
IRM in the Cloud 47
IRM Tool Traits 47
Data Control 49
Data Retention 50
Data Audit and Audit Mechanisms 53
Data Destruction/Disposal 55
Summary 57
Exam Essentials 57
Review Questions 59
Chapter 3 Cloud Data Security 63
Cloud Data Lifecycle 65
Create 66
Store 66
Use 67
Share 67
Archive 69
Destroy 70
Cloud Storage Architectures 71
Storage Types 71
Volume Storage: File- Based Storage and Block Storage 72
Object- Based Storage 72
Databases 73
Threats to Cloud Storage 73
Designing and Applying Security Strategies for Storage 74
Encryption 74
Certificate Management 77
Hashing 77
Masking, Obfuscation, Anonymization, and Tokenization 78
Data Loss Prevention 81
Log Capture and Analysis 82
Summary 85
Exam Essentials 85
Review Questions 86
Chapter 4 Security in the Cloud 91
Chapter 5 Shared Cloud Platform Risks and Responsibilities 92
Cloud Computing Risks by Deployment Model 94
Private Cloud 95
Community Cloud 95
Public Cloud 97
Hybrid Cloud 101
Cloud Computing Risks by Service Model 102
Infrastructure as a Service (IaaS) 102
Platform as a Service (PaaS) 102
Software as a Service (SaaS) 103
Virtualization 103
Threats 105
Risk Mitigation Strategies 107
Disaster Recovery (DR) and Business Continuity (BC) 110
Cloud- Specific BIA Concerns 110
Customer/Provider Shared BC/DR Responsibilities 111
Cloud Design Patterns 114
Summary 115
Exam Essentials 115
Review Questions 116
Cloud Platform, Infrastructure, and Operational Security 121
Foundations of Managed Services 123
Cloud Provider Responsibilities 124
Shared Responsibilities by Service Type 125
IaaS 125
PaaS 126
SaaS 126
Securing Communications and Infrastructure 126
Firewalls 127
Intrusion Detection/Intrusion Prevention Systems 128
Honeypots 128
Vulnerability Assessment Tools 128
Bastion Hosts 129
Identity Assurance in Cloud and Virtual Environments 130
Securing Hardware and Compute 130
Securing Software 132
Third- Party Software Management 133
Validating Open- Source Software 134
OS Hardening, Monitoring, and Remediation 134
Managing Virtual Systems 135
Assessing Vulnerabilities 137
Securing the Management Plane 138
Auditing Your Environment and Provider 141
Adapting Processes for the Cloud 142
Planning for Cloud Audits 143
Summary 144
Exam Essentials 145
Review Questions 147
Chapter 6 Cloud Application Security 151
Developing Software for the Cloud 154
Common Cloud Application Deployment Pitfalls 155
Cloud Application Architecture 157
Cryptography 157
Sandboxing 158
Application Virtualization and Orchestration 158
Application Programming Interfaces 159
Multitenancy 162
Supplementa…