Cloud computing has entirely revolutionized the way organizations operate as more and more businesses are turning to the cloud these days. Despite the numerous benefits of cloud computing, there are a number of security concerns and issues.
https://www.infosectrain.com/courses/cloud-security-practitioner-training/
Role Of Transgenic Animal In Target Validation-1.pptx
ย
Cloud Security Practitioner Training.pdf
1. @infosectrain SWIPE FOR COURSE CONTENT
CLOUD SECURITY
PRACTITIONER TRAINING
40 hrs of instructor-led training
Access to the recorded sessions
Certified & Experienced Instructors
Training Certificate
******
*****
LOGIN
PASSWORD
USD 299
EARLY BIRD OFFER
INR 5,999 TAXES
+
INR 19,999
USD 99
SPEAKER
Rishabh
MCT | AZ 104 | AZ 500 | AZ 303 | AZ 304 |
SC 200 | CEH | ECIH | CND | CEI | Security+
| CSA | CCSE
10+ Years Experienced
2. @infosectrain SWIPE
MODULE 01
CLOUD BASICS AND MODELS
COURSE CONTENT
Topics:
Evolution of infrastructure technology
Virtualization and Hypervisor.
Introduction and Benefit of the cloud
Shared model of cloud
Service provided by cloud
Challenges in cloud
Exercise:
Create Azure Free Account
Create AWS Account
3. @infosectrain SWIPE
MODULE 02
DEPLOY AND UNDERSTAND COMPUTE AND CONFIGURATION
Topics:
Secure Instance / Virtual Machine Deployment
Host Configuration Management
Manage Host Configuration
Type of Cloud Storage: Disk for Compute
Application Security
Threat Modelling overview
Platform as a Service (PaaS)
Container and Kubernetes
Exercise:
Deploy a Virtual Machine.
Discuss disk option, image option.
Snapshot of Disk
Deploy Web App.
Deploy the Container.
4. @infosectrain SWIPE
MODULE 03
CONTROL YOUR IDENTITY AND ACCESS MANAGEMENT
Topics:
Lifecycle for Identity and Access Management
Concept of Cloud Account and Least privileges: Policies and
Permissions, Groups and Roles, Temporary Credentials
Secrets Management
Customer Account Management and External Access
Security Loopholes in Cloud IAM Services
More IAM Best Practices
Exercise:
Create a cloud-based identity
Apply roles to the account
Create group
Assign role
Enable MFA
Different Security option and Service
Identity Audit with Identity governance feature in Azure
5. @infosectrain SWIPE
MODULE 04
DEPLOY AND MONITOR NETWORK RESOURCES
Topics:
Cloud Virtual Networking
Network Segmentation
Log Collection and Analysis
Traffic Analysis of Cloud network
Network Protection Services: Service Endpoints and Private Endpoints
Restricting Access to Network via JIT
Cloud Logging Services
Infrastructure as Code
Exercise:
Deploy Virtual Network
Allow Administrative Access
Jump Server and Bastion Host
VPN
Troubleshoot the virtual Network.
Enable logging option
Deploy Network and VM using json.
6. @infosectrain SWIPE
MODULE 05
ENCRYPT AND PROTECT DATA
Topics:
Lifecycle Management
Storage Account
Data Identification and Classification
Cloud Service Encryption: Data at Rest Encryption, Data in Transit
Encryption, Disk Level Encryption
Data Asset Management
Cloud Access Security Brokers (CASB)
Exercise:
Deploy storage account with availability option
Encryption option
Encryption option for disk storage
Deploy SQL Server
Data classification and Identification
Data Masking
Data Encryption option
7. @infosectrain SWIPE
MODULE 06
DETECTING AND HANDLING CLOUD INCIDENTS
WITH SECURITY OPERATION
Topics:
Understand Cloud Incident Response Lifecycle: Discuss Each Phase
Understand How SOAR Accelerates Incident Response
Security As a Service
Cloud Based SIEM Models
Exercise:
Creating alert using azure monitor service.
Microsoft Defender for Cloud
AWS Cloud Trail
AWS Cloud Watch and SNS
Microsoft Sentinel
8. @infosectrain SWIPE
MODULE 07
BASICS OF PENETRATION TESTING AND FORENSIC IN CLOUD
Topics:
Pen Testing in Cloud
Scope of Cloud Pen Test
Common Steps of Pen Testing
Cloud Forensics
Cloud Forensics Challenges
Exercise:
Examine Logs on Cloud
Identify Misconfigured S3 Bucket and Publicly accessible data
9. @infosectrain SWIPE
MODULE 08
MANAGE BUSINESS CONTINUITY AND DISASTER RECOVERY
Topics:
Discuss Cloud Disaster Recovery and Business Continuity
Main Element of BC/DR in cloud
Learn to Design Disaster Recovery and Business Continuity in Cloud
Exercise:
Implementing Backup for VM
Implementing DR for storage account
10. @infosectrain SWIPE
MODULE 09
HANDLING LEGAL ISSUE AND POLICY IN CLOUD
Topics:
Understand the laws impacting cloud computing
Learn the cloud computing standards
Describe the legal frameworks for data protection and privacy
Learn audit planning and reporting in the cloud
Describe outsourcing and vendor management
Exercise:
Auditing Compliance of Azure Resources by creating Policy Assignments
with Azure Policy
Conducting Security Audit in AWS with AWS Trusted Advisor
11. @infosectrain SWIPE
MODULE 10
MANAGE GRC FOR THE CLOUD
Topics:
Understand GRC in the cloud
Discuss cloud governance
Learn to implement and maintain governance for cloud computing
Discuss risk management in the cloud
Understand risk management framework and process in the cloud
Understand cloud compliance
Learn to implement GRC in the cloud
Exercise:
Deploying Policy for the restriction of deployment
Enforce Compliance by Assigning In-built Policy and Creating Custom
Policy in Azure