CompTIA Security+ SY0-601 Cert Guide, 5th Edition

Chapter 22

Applying Cybersecurity Solutions to the Cloud

This chapter covers the following topics related to Objective 3.6 (Given a scenario, apply cybersecurity solutions to the cloud) of the CompTIA Security+ SY0-601 certification exam:

• Cloud security controls

  • High availability across zones

  • Resource policies

  • Secrets management

  • Integration and auditing

  • Storage

    • Permissions

    • Encryption

    • Replication

    • High availability

  • Network

    • Virtual networks

    • Public and private subnets

    • Segmentation

    • API inspection and integration

  • Compute

    • Security groups

    • Dynamic resource allocation

    • Instance awareness

    • Virtual private cloud (VPC) endpoint

    • Container security

  • Solutions

    • CASB

    • Application security

    • Next-generation secure web gateway (SWG)

    • Firewall consideration in ...