CompTIA CASP+: Secure Cloud Computing

IN THIS COURSE

• 1.  Course Overview
  1m 28s
  Here, you’ll learn more about your instructor and this course. In this course, you’ll learn to identify cloud deployment and service models. Next, you'll review cloud service level agreements and cloud security solutions. You’ll learn how to work with cloud VNets. Then, you’ll configure cloud auto-scaling and increase application availability. Lastly, you'll create a cloud key vault and enable cloud storage security. FREE ACCESS
• 2.  Cloud Computing
  6m 51s
  Here, you’ll explore cloud computing. When you talk about cloud computing, you're talking about some kind of computing service, an IT service, that's available over a network. That network could be a public network like the internet or a private network on a local area network. Either way, it's important that connections be secured. Network security is going to be important to encrypt transmissions or ensure only transmissions through an encrypted VPN tunnel are allowed. FREE ACCESS
• 3.  Cloud Deployment Models
  6m 55s
  Here, you’ll learn about cloud computing models. There are a few different cloud deployment models or different types of clouds. With a public cloud, anybody over the internet can potentially become a member. They’ll sign up with an account with a public cloud provider. You also need to consider the underlying infrastructure, the buildings for the data centers and all of the equipment that's housed within them to support cloud services. FREE ACCESS
• 4.  Cloud Service Models
  8m 15s
  Here, you’ll learn about cloud service models. There are a number of different types of IT services that are accessible in the cloud computing environment. When you talk about cloud service models, you’re referring to an IT service that is accessed over a network. There are different categories of these IT services, and those are the cloud service models. Because you're accessing these IT services over a network, you must think about authentication. FREE ACCESS
• 5.  Reviewing Cloud Service Level Agreements
  4m 52s
  In this video, you’ll look at service level agreements or SLAs. These are a contract between a provider of a service and a consumer of that said service. Service level agreements are important because they guarantee uptime for a service. One aspect of security is availability, making sure that services and data are available when they are needed. FREE ACCESS
• 6.  Cloud Network Security
  7m 30s
  This video explores cloud network security. In a cloud computing environment, cloud network security options can be manually configured. If you're using a GUI, a command-line tool, or doing it programmatically, it might be a managed service where you don't really do much of the configuring. Many cloud service providers have a number of security accreditations with different security standards bodies. They have different regulations from different parts of the world. FREE ACCESS
• 7.  Viewing CSA STAR Data
  6m 44s
  Here, you’ll look at CSA STAR data. The use of cloud computing implies the level of trust from the perspective of the cloud customer. They trust the cloud service provider has done their due diligence in hiring personnel to man their data centers, and that the underlying equipment is configured securely in accordance with industry security standards and perhaps data privacy regulations. FREE ACCESS
• 8.  Configuring Cloud VNets
  6m 44s
  Here, you’ll learn how to configure cloud VNets. In the cloud, a VNet is a virtual network. You’ll need to take the same care in setting it up and securing it that you would with a regular network on-premises. That means defining the purpose of the network. All of the same considerations apply in the cloud as they do on-premises. FREE ACCESS
• 9.  Limiting Network Traffic with a Network Security Group
  6m 15s
  Here, you’ll watch a demo. You’ll learn how to create a network security group. In Microsoft Azure, a network security group is like a packet-filtering firewall configuration where you can create multiple rules to allow or deny traffic based on what appears in packet headers. To get started, you’ll head to the portal and click on "Create a resource". Then, you’ll choose network security group. FREE ACCESS
• 10.  Deploying a Windows Virtual Machine in the Cloud
  7m 29s
  Here, you’ll watch a demo. You’ll learn how to deploy a Windows virtual machine into the Microsoft Azure cloud. Cloud computing offers self-provisioning. In other words, you are the cloud customer, so you get to provision virtual machines as you see fit. You can do that programmatically or using command-line tools. You can also do it using a GUI, which you’ll do here. FREE ACCESS
• 11.  Deploying a Linux Virtual Machine in the Cloud
  7m 54s
  In this video, you’ll learn to deploy a Linux virtual machine in the cloud. You can quickly and easily deploy virtual machines in the cloud, as you would on-premises, if you already have virtual machine templates or if you're using operating system images that are pre-hardened. Here, you’ll deploy a Linux virtual machine in the Microsoft Azure public cloud. To get started in the Azure portal, you’ll click "Create a resource". FREE ACCESS
• 12.  Peering Cloud VNets
  6m 10s
  Here, you’ll learn that in the cloud, after you've defined virtual networks, you can peer them together. Peering a VNet together provides the benefit of allowing virtual machines in one VNet to communicate directly with virtual machines in the peered VNet using public IP addresses. Without peering, you need to communicate using public IPs, which goes over the internet. But when you use private IPs, the traffic stays on the cloud provider's backbone global network. FREE ACCESS
• 13.  Deploying a Cloud-based Firewall
  7m 15s
  Here, you’ll learn how to deploy a cloud-based firewall. One of the great things about cloud computing and security is the ease with which you can deploy secure solutions like firewall appliances. Here, you’ll configure Azure firewall. In the Azure portal, you’ll start by clicking "Create a resource”. Then, you’ll click on “Firewall”. Finally, you’ll click on "Create". You’ll deploy this to your Subscription and to an existing Resource group. FREE ACCESS
• 14.  Configuring Cloud-based Firewall Routing
  5m 40s
  Here, you’ll watch a demo. You’ll configure the required network settings to make the Azure firewall work. First, you’ll make sure the firewall was deployed. In the Azure portal, you’ll go to the All Resources view. You’ll see a firewall called azurefw has been deployed for firewall east1. You’ll open that up. Then, you click "Firewall Manager". FREE ACCESS
• 15.  Enabling RDP through Cloud Firewalls
  5m 40s
  Here, you’ll watch a demo. You’ll learn to enable RDP through cloud firewalls. You’ll first connect to a Windows virtual machine in the cloud. Next, you’ll make sure it's using the Azure firewall to block connections to facebook.com. FREE ACCESS
• 16.  Configuring Cloud Autoscaling
  4m 47s
  Here, you’ll watch a demo. You’ll learn more about configuring cloud autoscaling. Scalability is an important aspect of cloud computing. With autoscaling, you can make a configuration so that when things get busy you can start scaling out horizontally. This allows you to add virtual machines to handle the increased workload. Then, when traffic calms down, you can configure scaling-in or the removal of VMs. FREE ACCESS
• 17.  Deploying a Cloud Key Vault
  6m 25s
  Here, you’ll watch a demo. You’ll learn to deploy a cloud key vault. When you're working with cloud computing, you might come to a point where you need a centralized and secured way of storing secrets. This could include things like database connection strings or working with decryption keys and encryption keys for protecting data at rest. All of these items can be managed centrally in a Microsoft Azure key vault. FREE ACCESS
• 18.  Enabling Cloud Storage Security
  2m 45s
  Here, you’ll watch a demo. You’ll learn to enable cloud storage security. Encrypting data at rest is required by most data privacy standards. To enable this in the Azure Cloud, you’ll begin by creating a storage account. Then, you’ll use a custom encryption key to protect data at rest to encrypt the contents of the storage account. FREE ACCESS
• 19.  Course Summary
  1m 9s
  Here, you’ll summarize what you’ve learned in this course. You’ve examined how to apply security controls to various cloud service models to securely manage VNets, key vaults, and cloud storage. You explored cloud deployment and service models, cloud service level agreements, and network security. You configured cloud VNets, limited network traffic with a network security group, and deployed a Windows and Linux virtual machine in the cloud. FREE ACCESS