Lesson 9: Cloud and Virtualization Security
Week of Tue, Nov 10 · lesson closes Mon, Nov 16
Take Meerk's quiz for Lesson 9
This lesson's items
Exact due times are in Canvas.
Watch — Professor Messer
Watch — Professor Messer: Cloud Security (SY0-701)
Free, independent educational resource. Not affiliated with or endorsed by CompTIA. Watch, then read the notes below.
Know these cold
- Shared responsibility model: cloud provider secures the infrastructure (hypervisor, physical data center); customer secures data, OS, applications, and IAM configuration.
- Cloud threats: misconfiguration (most common), insecure APIs, data breaches from over-permissive IAM, account hijacking, insecure serverless functions.
- Secure coding: OWASP Top 10 lists the most critical web vulnerabilities. DevSecOps integrates security into CI/CD pipelines — 'shift left' means testing earlier.
Meerk's quiz — open the Lesson 9 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: If your cloud provider has a major outage, is that their fault or yours to prepare for?
En español: Si tu proveedor de nube tiene una interrupción importante, ¿es culpa de ellos o tuya prepararse?