Chapter 1
Cloud Architecture
Course: Comptia Cloud Cv0 004
Subject: Comptia Cloud Cv0004
Chapter: Security
In cloud environments, security controls are essential to safeguard data, applications, and infrastructure. Unlike traditional on-premises infrastructure, the cloud operates on a shared responsibility model, where the cloud provider manages the security of the cloud, and the customer manages the security in the cloud.
The following are key security controls applied in cloud computing environments:
1. Endpoint Protection
Definition
Endpoint protection in the cloud context refers to safeguarding compute resources and devices — such as cloud-hosted virtual machines (VMs), containers, and user devices — that interact with or access cloud services. These endpoints are often the entry point for attackers and require advanced protection beyond traditional antivirus.
Purpose
- Prevent malware and ransomware infections (e.g., crypto-miners on EC2).
- Detect advanced persistent threats (APTs) attempting lateral movement across cloud-hosted environments.
- Respond to incidents such as privilege escalation, credential theft, and fileless attacks in real time.
- Support compliance with industry standards such as ISO 27001, NIST 800-53, and PCI DSS.