WEBVTT

00:00:01.240 --> 00:00:01.850
Hello.

00:00:01.850 --> 00:00:03.950
My name is Lyron Andrews.

00:00:04.040 --> 00:00:06.330
Thank you for joining me in the course, Platform and

00:00:06.330 --> 00:00:09.290
Infrastructure Security for the CCSP.

00:00:09.440 --> 00:00:16.280
I have worked as an official author for the (ISC)² CISSP and CCSP, and have

00:00:16.290 --> 00:00:21.560
been a trainer for the CISSP, CCSP, and SSCP globally.

00:00:21.740 --> 00:00:27.110
Let's get started with the Primary Cloud Platform and Infrastructure Services.

00:00:27.120 --> 00:00:31.590
What we'll do first is consider the primary services of cloud

00:00:31.590 --> 00:00:33.520
computing and their corresponding uses.

00:00:33.530 --> 00:00:38.250
Then what we'll do is take a look at an analysis of major

00:00:38.250 --> 00:00:41.490
risks associated with consuming services at the level of

00:00:41.490 --> 00:00:43.360
the platform and infrastructure.

00:00:43.520 --> 00:00:44.260
Finally,

00:00:44.270 --> 00:00:47.750
we'll consider some mitigation strategies to help reduce those

00:00:47.750 --> 00:00:52.780
risks to cloud computing. For the CCSP certification exam, the

00:00:52.780 --> 00:00:57.450
Cloud Platform and Infrastructure Security domain accounts for 17%

00:00:57.460 --> 00:00:59.860
of the weight of the total exam.

00:01:00.440 --> 00:01:07.180
Let's get into those cloud service descriptions. You'll recall earlier if

00:01:07.180 --> 00:01:13.650
you took the previous courses, that NIST has a solid definition of cloud

00:01:13.650 --> 00:01:17.260
computing in this special publication 800‑145.

00:01:17.740 --> 00:01:19.590
It's five characteristics.

00:01:20.340 --> 00:01:25.260
I enjoy taking those five characteristics and putting them into an acronym

00:01:25.260 --> 00:01:28.890
that I call BRROM, standing for broad network access,

00:01:29.020 --> 00:01:33.110
resource pooling, rapid elasticity, on demand, and

00:01:33.110 --> 00:01:36.420
measured. If you were to consider for a moment,

00:01:36.430 --> 00:01:40.480
just the resource pooling descriptor, there you will find the

00:01:40.480 --> 00:01:44.460
services listed directly from NIST as follows.

00:01:44.470 --> 00:01:48.650
What we're going to do in this course is look at those primary cloud

00:01:48.650 --> 00:01:55.070
services including network, compute, storage, virtualization, and the

00:01:55.080 --> 00:01:59.900
management plane. Where we are going to get started is a description of

00:01:59.910 --> 00:02:04.330
virtualization and how that helps to serve up the infrastructure and

00:02:04.330 --> 00:02:08.880
platform capabilities in the cloud. Join me over in the next clip as we

00:02:08.880 --> 00:02:09.560
begin this.