Find the exact control, technique, lesson, or book.
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
Domain 1 of the CCSP exam sets the stage by covering the core principles of cloud concepts, architecture, and design. In this episode, we introduce the high-level topics within the domain, from service and deployment models to reference architectures and shared responsibilities.…
This episode introduces Domain 2 of the CompTIA Server+ exam, which focuses on the skills and knowledge needed to install, configure, and maintain server operating systems and services.…
In this episode, we wrap up Domain 3: Cloud Technology and Services, summarizing the key concepts and topics that you need to understand for the AWS Certified Cloud Practitioner exam.…
In this episode, we dive into Amazon ElastiCache, a fully managed, in-memory data store service designed to accelerate application performance by caching frequently accessed data.…
Employers often monitor employees’ use of technology and communications systems, raising important privacy issues. This episode examines the scope of monitoring activities, including computer usage, email systems, telephone records, and workplace video surveillance.…
Data in transit crosses many boundaries—wired, wireless, internal, and external—and the exam expects you to secure each with protocols and configurations that stand up to scrutiny.…
In this episode, we cover encryption in AWS, focusing on key services like AWS Key Management Service (KMS), AWS Certificate Manager (ACM), and AWS Macie.…
This episode focuses on reducing attack surfaces by hardening network device configurations. We explain the process of closing unused ports, disabling insecure or unnecessary protocols, and applying firmware updates to address vulnerabilities.…
This episode explains how to secure individual server hosts and applications through targeted hardening measures. We discuss deploying antivirus and anti-malware tools, ensuring timely application of patches, and disabling unnecessary application features or services.…
This episode focuses on the fundamentals of identity and access management (IAM) in cloud environments. We explain how identification verifies user identity, while authentication confirms it through credentials, and authorization determines what resources the user can access.…
Identity is the new perimeter in cloud, and integrating it correctly is critical. This episode explores federated identity, single sign-on, and the use of identity providers to manage access to cloud control planes.…
In this episode, we introduce Infrastructure as Code (IaC) and explore two key AWS tools for managing infrastructure in a repeatable and automated way: AWS CloudFormation and the AWS Cloud Development Kit (CDK).…
Modern systems depend on many interacting components, and the CSSLP exam emphasizes whether those integrations are designed to limit risk rather than amplify it.…
In this episode, we focus on AWS CloudTrail, a key service for monitoring and auditing activity within your AWS environment. CloudTrail records API calls made on your account, providing an audit trail of changes to your AWS resources.…
Systems rarely run in ideal conditions, and the CSSLP exam frequently explores how well designs account for the constraints and operational realities they will face.…
In this episode, we detail the protocols that protect data in transit across cloud networks. IPSec is covered as a suite for securing IP communications, including its modes, encryption methods, and authentication options.…
In this episode, we explore password policies and how AWS Secrets Manager helps you securely manage sensitive information like API keys, database credentials, and other secrets.…
In this episode, we explore the principle of least privilege (PoLP), a key concept in AWS identity and access management (IAM). The principle of least privilege dictates that users and services should be granted the minimum level of access necessary to perform their tasks.…