CompTIA - Secure Cloud Professional (Security+/Cloud+)

Curriculum

Security+

1.0 Network Security

• 1.1 Implement security configuration parameters on network devices and other technologies.
• 1.2 Given a scenario, use secure network administration principles.
• 1.3 Explain network design elements and components.
• 1.4 Given a scenario, implement common protocols and services.
• 1.5 Given a scenario, troubleshoot security issues related to wireless networking.

2.0 Compliance and Operational Security

• 2.1 Explain the importance of risk related concepts.
• 2.2 Summarise the security implications of integrating systems and data with third parties.
• 2.3 Given a scenario, implement appropriate risk mitigation strategies.
• 2.4 Given a scenario, implement basic forensic procedures.
• 2.5 Summarise common incident response procedures.
• 2.6 Explain the importance of security related awareness and training.
• 2.7 Compare and contrast physical security and environmental controls.
• 2.8 Summarise risk management best practices.
• 2.9 Given a scenario, select the appropriate control to meet the goals of security.

3.0 Threats and Vulnerabilities

• 3.1 Explain types of malware.
• 3.2 Summarise various types of attacks.
• 3.3 Summarise social engineering attacks and the associated effectiveness with each attack.
• 3.4 Explain types of wireless attacks.
• 3.5 Explain types of application attacks.
• 3.6 Analyse a scenario and select the appropriate type of mitigation and deterrent techniques.
• 3.7 Given a scenario, use appropriate tools and techniques to discover security threats and vulnerabilities.
• 3.8 Explain the proper use of penetration testing versus vulnerability scanning.

4.0 Application, Data and Host Security

• 4.1 Explain the importance of application security controls and techniques.
• 4.2 Summarise mobile security concepts and technologies.
• 4.3 Given a scenario, select the appropriate solution to establish host security.
• 4.4 Implement the appropriate controls to ensure data security.
• 4.5 Compare and contrast alternative methods to mitigate security risks in static environments.

5.0 Access Control and Identity Management

• 5.1 Compare and contrast the function and purpose of authentication services.
• 5.2 Given a scenario, select the appropriate authentication, authorisation or access control.
• 5.3 Install and configure security controls when performing account management, based on best practices.

6.0 Cryptography

• 6.1 Given a scenario, utilise general cryptography concepts.
• 6.2 Given a scenario, use appropriate cryptographic methods.
• 6.3 Given a scenario, use appropriate PKI, certificate management and associated components.

Cloud+

1.0 Cloud Concepts and Models

• Compare and contrast cloud services.
• Compare and contrast cloud delivery models and services.
• Summarise cloud characteristics and terms.
• Explain object storage concepts.

2.0 Virtualisation

• Explain the differences between hypervisor types.
• Install, configure, and manage virtual machines and devices.
• Given a scenario, perform virtual resource migration.
• Explain the benefits of virtualisation in a cloud environment.
• Compare and contrast virtual components used to construct a cloud environment.

3.0 Infrastructure

• Compare and contrast various storage technologies.
• Explain storage configuration concepts.
• Execute storage provisioning.
• Given a scenario, implement appropriate network configurations.
• Explain the importance of network optimisation.
• Given a scenario, troubleshoot basic network connectivity issues.
• Explain common network protocols, ports, and topologies.
• Explain common hardware resources and features used to enable virtual environments.

4.0 Network Management

• Given a scenario, implement and use proper resource monitoring techniques.
• Given a scenario, appropriately allocate physical (host) resources using best practices.
• Given a scenario, appropriately allocate virtual (guest) resources using best practices.
• Given a scenario, use appropriate tools for remote access.

5.0 Security

• Explain network security concepts, tools, and best practices.
• Explain storage security concepts, methods, and best practices.
• Compare contrast different encryption technologies and methods.
• Identify access control methods.
• Implement guest and host hardening techniques.

6.0 Systems Management

• Explain policies and procedures as they relate to a cloud environment.
• Given a scenario, diagnose, remediate and optimise physical host performance.
• Explain common performance concepts as they relate to the host and the guest.
• Implement appropriate testing techniques when deploying cloud services.

7.0 Business Continuity in the Cloud

• Compare and contrast disaster recovery methods and concepts.
• Deploy solutions to meet availability requirements.