CCSP
The CCSP certification prep path will provide you with a comprehensive overview of the cybersecurity principles and security best practices needed to pass the CCSP certification exam.
22
H
23
M
Intermediate
12
Learners at 96% of Fortune 1000 companies trust Cybrary
.svg){kind=small}
About this Path
ISC2’s Certified Cloud Security Professional (CCSP) is a global leading cloud certification for IT security professionals. Earning this certification demonstrates that you understand foundational cloud technologies, how to protect data in the cloud, the risks associated with cloud infrastructure, and the legal and compliance risks that come with cloud computing.
The CCSP exam will test your knowledge of six major cloud security domains outlined by ISC2, including:
- Cloud Concepts, Architecture, and Design
- Cloud Data Security
- Cloud Platform and Infrastructure Security
- Cloud Application Security
- Cloud Security Operations
- Legal, Risk, and Compliance
Skills you'll gain
Path Outline
Collection Outline
Coming Soon
The Leadership and Management Career Path is expected to release in Q2 of 2025. Sign up now to explore our other leadership courses and content.
Start Learning for FreeLearn
Learn core concepts and get hands-on with key skills.
CCSP: Domain 1 - Cloud Concepts, Architecture and Design
In this CCSP: Domain 1 - Cloud Concepts, Architecture and Design course you will learn about cloud computing definitions, roles, and responsibilities, the impact of related technologies, and virtualization security.
CCSP: Domain 2 - Cloud Data Security
In this CCSP: Domain 2 - Cloud Data Security course you will learn about storage types, encryption and key management, and hashing, data obfuscation, and tokenization.
CCSP: Domain 3 - Cloud Platform and Infrastructure Security
In this CCSP: Domain 3 - Cloud Platform and Infrastructure Security course you will learn about how to design a secure data center, about identification, authentication, and authorization in the cloud, as well as business continuity and disaster recovery planning and testing.
CCSP: Domain 4 - Cloud Application Security
In this CCSP: Domain 4 - Cloud Application Security course you will learn about cloud development basics, common pitfalls, and vulnerabilities, cloud specific risks, and cryptography, sandboxing, virtualization, and orchestration.
CCSP: Domain 5 - Cloud Security Operations
In this CCSP: Domain 5 - Cloud Security Operations course you will learn about secure network configurations and controls, forensics, evidence collection and preservation, and logging, incident management, and vulnerability assessments.
CCSP: Domain 6 - Legal, Risk and Compliance
In this CCSP: Domain 6 - Legal, Risk and Compliance course you will learn about legal frameworks and forensics, privacy in the cloud, and enterprise risk management.
Practice
Exercise your problem-solving and creative thinking skills with security-centric puzzles
Implement API Management to Publish APIs Securely
In this IT Pro Challenge provided by Learn on Demand Systems, you will implement an Azure API Management Instance to then publish and secure your API using a product and subscription.
Configure Geo-Replication for your Database
This Configure Geo-Replication for your Database IT Pro Challenge virtual lab shows learners how to create a new Azure SQL Database, enable it for Geo-Replication, and test it for failover. The skills that learners acquire in this challenge are valuable to database administrators in the IT or cybersecurity fields.
Configure Virtual Network Connectivity using Peering
In this lab, you assume the role of an Azure® administrator. First, you will create an Azure virtual network by using the Azure portal. Next, you will create an Azure virtual network by using Azure Cloud Shell. Finally, you will configure virtual network peering connections for secure bidirectional communication.
Create and Configure Application Security Groups
The Azure platform provides cloud-based tools for businesses to deploy their web services. This IT Pro Challenge virtual lab will give you an Azure application security groups' overview. Application security groups allow system administrators to control access to Azure virtual machines. In this lab, you will deploy an application security group.
Configure Azure Disk Encryption
This IT Pro Challenge virtual lab teaches how to encrypt a virtual machine’s disk using Azure’s Cloud Shell commands. Hands-on experience — creating and deploying a virtual machine and a data disk, and using a command-line interface — advances System Administrators, Cybersecurity Specialists, and Microsoft Azure Cloud Engineers career paths.
Configure Security Recommendations for Virtual Machines
This "Configure Security Recommendations for Virtual Machines" IT Pro Challenges virtual lab teaches learners how to configure security recommendations for a virtual machine by enabling security recommendations and Azure Disk Encryption. Skills learned in this lab are crucial for the job roles of System Administrators and Azure Administrators.
Configure Monitoring by Using Azure Monitor
Azure Monitor (AM) helps you understand how applications are performing and proactively identify issues affecting them. This lab gives hands-on experience configuring the available options and reviewing the activity logs and alerts collected by AM.
Implement Identity and Access Management
In this lab, students will created an S3 bucket to host company assets. Students will then create a user account and a group Identity and Access Management (IAM) policy.
Enable Security for Azure Data Lake
Gain hands-on experience enabling security for Azure Data Lake. Lab activities include: deploying a storage account that uses Azure Data Lake Storage, creating a container for blob data, designing access control list (ACL) and role-based access control (RBAC) security for the data lake, and enabling ACL and RBAC security for the data lake.
Perform Automatic Remediation by Using an AWS Config Rule
Gain hands-on experience configuring an AWS Config rule to ensure that public access to Amazon S3 buckets is automatically disabled. Lab activities include: creating an Amazon Identity and Access Management role for automation, creating an S3 bucket that is noncompliant, and creating an AWS Config rule to remediate any noncompliant S3 buckets.
Using the OWASP Zed Attack Proxy Web Application Scanner
In this challenge you will gain understanding of OWASP Zed Attack Proxy by performing basic scans against a vulnerable web server. OWASP ZAP is an open-source web application security scanner, and is used by those new to application security as well as seasoned professional penetration testers.
Prove
Assess your knowledge and skills to identify areas for improvement and measure your growth
Certified Cloud Security Professional (CCSP) Practice Test
This practice test from CyberVista will help you prepare for the Certified Cloud Security Professional (CCSP) exam by demonstrating your knowledge and hands-on experience with cloud security architecture, design, operations and service orchestration.
Train Your Team
Cybrary’s expert-led cybersecurity courses help your team remediate skill gaps and get up-to-date on certifications. Utilize Cybrary to stay ahead of emerging threats and provide team members with clarity on how to learn, grow, and advance their careers within your organization.
Instructors
Instructors
Get Hands-on Learning
Put your skills to the test in virtual labs, challenges, and simulated environments.
Measure Your Progress
Track your skills development from lesson to lesson using the Cybrary Skills Tracker.
Connect with the Community
Connect with peers and mentors through our supportive community of cybersecurity professionals.
Success from Our Learners
Frequently Asked Questions
This certification prep path is designed for mid-career practitioners with at least three years of information security experience. To take the official CCSP exam, candidates must have a minimum of five years cumulative paid work experience in information technology, of which three years must be in information security and one year in one or more of the six domains of the CCSP Common Body of Knowledge (CBK):
- Cloud Concepts, Architecture, and Design
- Cloud Data Security
- Cloud Platform and Infrastructure Security
- Cloud Application Security
- Cloud Security Operations
- Legal, Risk, and Compliance
CCSP certification validates your expertise in cloud security architecture, design, and operations. It is a valuable, trusted credential for professionals working with cloud platforms like AWS, Azure, or Google Cloud.
The cybersecurity professional organization that grants this certification, ISC2, has an excellent reputation and is highly regarded for its rigorous standards.
This certification prep path is aligned with the 2022 version of CCSP. The August 2024 updates impacted testing time and number of questions but the six domains and format of the exam were not changed.
Read more information about the CCSP exam here.
The CCSP exam covers a broad range of cloud security topics, emphasizing both technical expertise and strategic skills. The goal is to assess whether candidates can effectively design, manage, and secure cloud environments while aligning with industry best practices and regulatory requirements.
Earning your CCSP certification prepares you for a variety of mid- to senior-level cloud security roles. A CCSP-certified professional can go on to become a Cloud Security Engineer, Cloud Architect, Cloud Administrator, or Cloud Consultant.
