CCP Module 8:
Advanced Cloud Security

This advanced course covers cloud security mechanisms and architectural design patterns that address data and access control security for virtual machines, as well as trust boundaries, geotagging and BIOS security. The course also explains common methods used by attackers to breach organizational resources and provides a methodology for countering such attacks. The course concludes by demonstrating the relationship between threats, attacks, and risks via threat modeling.

The following primary topics are covered:
– Cloud Service Security Patterns and Supporting Mechanisms
– Virtual Machine Platform Protection Patterns
– Considerations for Setting Up Secure Ephemeral Perimeters
– Trusted Cloud Resource Pools and Cloud Resource Access Control
– Permanent Data Access Loss Protection and Cloud Data Breach Protection
– Isolated Trust Boundaries
– The Attack Lifecycle and the Security Lifecycle
– Proactive Mitigation vs. Incidence Response
– Threats, Vulnerabilities, Impacts from Exploitation
– Threat Modeling, Threats and Mitigations

Duration: 1 Day

Taking the Course at a Workshop

This course can be taken as part of instructor-led workshops taught by Arcitura Certified Trainers. These workshops can be open for public registration or delivered privately for a specific organization. Certified Trainers can teach workshops in-person at a specific location or virtually using a video-enabled remote system, such as WebEx. Visit the Workshop Calendar page to view the current calendar of public workshops or visit the Private Training page to learn more about Arcitura’s worldwide private workshop delivery options.

Below are the base materials provided to public and private workshop participants. Some public and private workshops offer promotions whereby participants receive entire Study Kits for attending workshops, or are offered discounts for the purchase of Study Kits and/or Pearson VUE exam vouchers.







Note that this course contains reading exercises that require the Cloud Computing Design Patterns text book that is provided as part of the course materials for the pre-requisite CCP Module 7.

Taking the Course using a Study Kit

This course can be completed via self-study by purchasing a Study Kit, which includes the base course materials as well as additional supplements and resources designed specifically for self-paced study and exam preparation.

Visit the CCP Module 8 Study Kit page for pricing information and for details. Also, visit the Study Kits Overview page for information regarding discounted Certification Study Kit Bundles for individual certification tracks.

The following materials are provided in the Study Kit for this course:







Note that this course contains reading exercises that require the Cloud Computing Design Patterns text book that is provided as part of the course materials for the pre-requisite CCP Module 7.

This Study Kit can be purchased with or without a discounted Pearson VUE voucher for Exam C90.08.

Study Kits and Study Bundles can be purchased using the online store. By purchasing and registering this Study Kit, you may be eligible for discounts on the registration of this course as part of a public workshop.


This course corresponds to Exam C90.08, which is required for the following certification(s):
Certified Cloud Security Specialist

Vendor-Neutral Topic Overview

Note that all CCP course modules are focused on vendor-neutral topics and therefore do not provide detailed coverage of any vendor-specific platforms or technologies. CCP courses are intentionally authored this way so as to provide an unambiguous and objective understanding of practices and technology that can be further complemented with product-specific training.

Fact Sheet

Download a printable PDF document with information about this course module and its corresponding Study Kit.