Chapter 3 of 6 · ISC2 CCSP
Cloud Platform and Infrastructure Security
Infrastructure components, secure data center design, infrastructure risk, security controls, and cloud BC and DR planning.
- 5topics
- 25 minfast track
- 1diagrams and exhibits
- 17%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Cloud Infrastructure and Platform ComponentsCCSP cloud infrastructure components: physical environment, network and communications, compute, virtualization, storage and the…5 min
- 2Designing a Secure Data CenterCCSP secure data center design: tenant partitioning and access control, location and buy or build, HVAC, multi-vendor…5 min
- 3Risks to Cloud Infrastructure and PlatformsCCSP infrastructure risk: identification and analysis, qualitative and quantitative methods, cloud vulnerabilities, threats and…5 min
- 4Planning and Implementing Security ControlsCCSP infrastructure controls: physical and environmental protection, system, storage and communication protection, cloud IAM…5 min
- 5Cloud Business Continuity and Disaster RecoveryCCSP cloud BC and DR: strategies from backup to active-active, RTO, RPO and recovery service level, and creating, implementing…Diagram5 min
About this chapter
What this chapter covers
Cloud Platform and Infrastructure Security is 17% of the ISC2 CCSP exam. It looks beneath the services at the physical and virtual infrastructure they run on, and at how both providers and customers protect it and keep it running.
The domain covers the infrastructure and platform components, from the physical environment to the management plane (3.1), designing a secure data center logically, physically and environmentally (3.2), analysing risks to cloud infrastructure and platforms (3.3), planning and implementing security controls (3.4), and planning business continuity and disaster recovery (3.5).
Questions mix provider and customer viewpoints. Expect to identify the risk a design creates, the BEST control for a layer, or the right recovery strategy for a stated RTO and RPO.
How the topics fit together
Knowing the components tells you what can fail or be attacked. Data center design builds protection in, risk analysis finds what remains, controls treat it, and continuity planning covers the failures controls cannot prevent.
The management plane is the crown jewel of cloud infrastructure. When a question asks which component needs the strongest protection, or what an attacker would target for the widest impact, the management plane is usually the answer.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with tables and examples.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full ISC2 CCSP question bank has 900 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by ISC2. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.