Tỷ trọng thi — Exam Domain Weights
D1 · Cloud Architecture
D2 · Data Security
D3 · Platform Security
D4 · Application Security
D5 · Security Operations
D6 · Legal & Compliance
Danh sách chương — Chapter list
Kiến trúc & Thiết kế bảo mật đám mây
D1 · 17%Cloud Concepts, Architecture & Design — NIST SP 800-145, SPI model, shared responsibility, zero trust cloud, Well-Architected Framework.
Bảo mật dữ liệu đám mây
D2 · 20%Cloud Data Security — mã hóa CSE/SSE/CMEK/BYOK, AWS KMS, Azure Key Vault, DLP, data residency, object storage security, ILM.
Bảo mật nền tảng & Hạ tầng đám mây
D3 · 17%Cloud Platform & Infrastructure Security — container/Kubernetes, serverless, VPC/VNET, IaC security, CIS Benchmarks, workload identity.
Bảo mật ứng dụng đám mây
D4 · 17%Cloud Application Security — OWASP Cloud-Native Top 10, API Gateway, mTLS/service mesh, secrets management, CI/CD security, container registry signing.
Vận hành bảo mật đám mây
D5 · 16%Cloud Security Operations — CSPM, SIEM, cloud IR/forensics, vulnerability management, JIT access, BCP/DR, chaos engineering.
Pháp lý, Rủi ro & Tuân thủ đám mây
D6 · 13%Legal, Risk & Compliance — GDPR/CLOUD Act, SLA negotiation, FedRAMP/ISO 27017/PCI DSS, CSA STAR, eDiscovery, audit rights.