Chapter 1 of 6 · ISC2 CCSP
Cloud Concepts, Architecture and Design
Cloud definitions, roles, reference architecture, security concepts, secure design, provider evaluation and AI in security.
- 5topics
- 25 minfast track
- 1diagrams and exhibits
- 17%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Cloud Computing Concepts and Reference ArchitectureCCSP cloud basics: NIST and ISO definitions, cloud roles, essential characteristics, building blocks, service categories and…Diagram5 min
- 2Shared Considerations and Evaluating Cloud ProvidersCCSP cloud shared considerations from portability to SLAs and auditability, plus how to evaluate a CSP with criteria, Common…5 min
- 3Security Concepts for Cloud ComputingCCSP cloud security concepts: key management, identity, sanitization and crypto erase, network and virtualization security, cloud…5 min
- 4Design Principles of Secure Cloud ComputingCCSP secure cloud design: data lifecycle, cloud BC and DR, BIA with CBA and ROI, portability and lock-in, duties per category…5 min
- 5AI, ML and Emerging Technologies in the CloudCCSP AI and ML for cloud threat detection, data validation, SOAR, ethics and regulation, plus blockchain, IoT, edge, quantum and…5 min
About this chapter
What this chapter covers
Cloud Concepts, Architecture and Design is 17% of the ISC2 CCSP exam. It builds the vocabulary the other five domains rely on: what makes a service "cloud", who does what, and how security responsibility shifts with each service category and deployment model.
The domain covers cloud computing concepts and roles (1.1), the cloud reference architecture with its activities, capabilities, categories, deployment models, shared considerations and related technologies (1.2), security concepts such as cryptography, identity, sanitization, network and virtualization security (1.3), design principles for secure cloud computing (1.4), evaluating cloud service providers (1.5) and the role of AI and machine learning in cloud security (1.6).
Questions are written from the viewpoint of a cloud security architect advising the business. Expect to pick the BEST deployment model for a stated requirement, the party that is responsible for a control, or the FIRST thing to verify before trusting a provider.
How the topics fit together
Concepts and roles define the terms, the reference architecture shows how services are organized, and the security concepts and design principles say how to protect them. Provider evaluation checks that a real service meets those principles, while AI and other new technologies change both the threats and the tools.
Most Domain 1 questions turn on the shared responsibility model. Before answering, ask which service category is in play and who controls the layer the question is about. The customer always remains accountable for its data and for deciding who may access it.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full ISC2 CCSP question bank has 900 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by ISC2. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.