IT Professional Certifications     CompTIA     CompTIA Cloud Essentials+     CLO-002: CompTIA Cloud Essentials+

---

Following secure cloud service design principles is a client consumer's top priority. Applying defense-in-depth principles and using cloud service provider security enablers can help achieve this.
You'll start this course by examining the cloud service security taxonomy, identity and access management in cloud environments, authentication mechanisms provided by cloud platforms, and the components of an IAM strategy in the cloud.
Next, you'll investigate the benefits of single sign-on, the prominent types of multi-factor authentication (MFA), and the fundamental design principles of federation. You'll then examine the Cloud Federation Reference Architecture.
Moving on, you'll recognize common cloud deployment and enterprise data center security practices. You'll use Active Directory Federation Services to implement federated authentication, manage access to AWS resources, and enable virtual MFA devices for IAM users in public cloud.
You can use this course in preparation for the CompTIA Cloud Essentials+ (CLO-002) certification exam.

---

---

Objectives

CompTIA Cloud Essentials+ (CLO-002): Security Considerations discover the key concepts covered in this course list the types of security challenges applicable to cloud computing services and the main security objectives to consider when securing services for cloud computing specify the taxonomy of cloud service security and describe the comparative analysis used to differentiate aspects of cloud environment identity and access management mechanisms recall the critical authentication mechanisms provided by cloud platforms that control access to cloud services describe the key characteristics of a standard IAM strategy along with the key components involved in defining an IAM strategy for the cloud specify the concept of and benefits associated with single sign-on recall the concept of multi-factor authentication and list the features of the prominent multi-factor authentication types recognize the fundamental design principles of federation and the characteristics of the Cloud Federation Reference Architecture, which captures the fundamental aspects of federated authentication and authorization implement federated authentication with the Active Directory Federation Services and AWS create and manage AWS users and groups using AWS IAM and use permissions to allow and deny their access to AWS resources enable a virtual multi-factor authentication device for an IAM user in public cloud list security standards, map them to various security categories, and describe the status that helps identify the appropriate standards for a security maturity model recall the governmental and industry regulatory requirements that enterprises need to fulfil to adhere to policies and regulations describe the common security practices followed in an enterprise data center and in cloud deployment models summarize the key concepts covered in this course