Cloud Concepts, Design, & Architecture (17%):

• Understand the concepts of security that are appropriate for Cloud computing – This domain covers the skills in cryptography & key management, network security, common threats, virtualization security, access control, and media & data sanitization;
• Measure the Cloud service providers – This section requires your understanding of system & subsystem product certifications and verification against prerequisites.
• Explain the Cloud Reference Architecture – The candidates should develop an understanding of the Cloud computing activities, Cloud shared considerations, Cloud service categories, Cloud service capabilities, Cloud deployment models, and the effect of the associated technologies;
• Understand the principles of design of secure Cloud computing – This one focuses on the skills related to the Cloud secure data lifecycle, functional security prerequisites, cost-benefit analysis, Cloud-based disaster recovery & business continuity planning, and security considerations for various Cloud categories;
• Understand the concept of Cloud computing – This area requires the skills in the Cloud computing definitions, core characteristics of Cloud computing, Cloud computing roles, and building block technologies;

Reference: https://www.isc2.org/certifications/ccsp/ccsp-certification-exam-outline#Domain%206:%20Legal,%20Risk%20and%20Compliance

The Certified Cloud Security Professional certification exam, best known as the CCSP, fulfills the growing demands for experienced and specialized Cloud Security specialists. This test was introduced in 2015 and is available in more than 800 locations and 114 countries across the globe. Particularly, such a certification is focused on specialists working with cloud technologies to ensure that data is not only safer, but that security vulnerability is recognized to overcome those risks. Also, the CCSP certification is suitable for IT security leaders seeking to demonstrate their knowledge of cybersecurity and cloud computing. As a rule, the CCSP trained specialists can identify the issues and challenges faced by several cloud computing companies around the world.

Cloud Application Security (17%):

• Validate Cloud software – This area covers the security testing methodologies and functional testing;
• Design the relevant identity & access management solutions.
• Advocate awareness & training for application security – This part covers the Cloud development fundamentals, common Cloud vulnerabilities, and common pitfalls;
• Apply SDLC – The students should understand quality assurance, threat modeling, Cloud-specific risks, as well as software configuration versioning and management;
• Explain the SDLC process – This one focuses on phases, methodologies, and business requirements;
• Understand the basics of Cloud application architecture;
• Utilize verified secure software;

How much the duration of time

The time span for the CCSP exam is 03 hours. In these 03 hours, you have to answer all the asked questions.