Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

CompTIA · Free, ad-free audio course

CompTIA CloudNetX

A structured, audio-first learning route for CompTIA CloudNetX, designed for focused review and practical understanding.

Every Bare Metal Cyber audio course is free and 100% ad-free.

PUT IT INTO PRACTICE

Practice CompTIA CloudNetX concepts

Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.

50 original questionsExplanation after every answerAchievements and sharing

Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.

Certification practice in the BMC Cyber Challenge

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

120 lessons available

S01E09Transcript

Hybrid Network Architecture and Connectivity

Subnetting for Architects: CIDR, VLSM, and right-sizing networks

Subnetting is frequently tested in CloudNetX scenarios as a design reasoning skill, not as an arithmetic exercise, and this episode teaches how to use CIDR and VLSM to build networks that scale cleanly.…

Transcript availableJanuary 16, 2026
S01E11Transcript

Hybrid Network Architecture and Connectivity

TCP vs UDP Decisions: reliability, latency, and application fit

Transport protocol choices appear in CloudNetX scenarios as design decisions that shape reliability, performance, and troubleshooting outcomes, so this episode clarifies what TCP and UDP each provide and what they intentionally do not.…

Transcript availableJanuary 16, 2026
S01E12Transcript

Hybrid Network Architecture and Connectivity

NAT Patterns: port forwarding vs PAT and what each solves

NAT shows up in CloudNetX scenarios because it sits at the intersection of addressing, reachability, logging, and security policy, and this episode explains the most common NAT patterns in operational terms.…

Transcript availableJanuary 16, 2026
S01E13Transcript

Hybrid Network Architecture and Connectivity

NAT64 and IPv6 Interop: when it appears and what breaks

NAT64 appears in CloudNetX scenarios as an interoperability tool used when IPv6-enabled clients must reach IPv4-only destinations, and this episode explains how it works and why it introduces unique failure modes.…

Transcript availableJanuary 16, 2026
S01E14Transcript

Hybrid Network Architecture and Connectivity

DHCP by Design: scope sizing, resilience, and failure signals

DHCP is a core dependency in many network scenarios, and CloudNetX often tests whether you understand how DHCP design choices affect availability and troubleshooting outcomes.…

Transcript availableJanuary 16, 2026
S01E15Transcript

Hybrid Network Architecture and Connectivity

NTP by Design: time dependencies, auth impact, and incident clues

Time is a hidden dependency in almost every modern network and security system, and this episode explains why NTP design matters for both operations and incident response.…

Transcript availableJanuary 16, 2026
S01E17Transcript

Hybrid Network Architecture and Connectivity

Secure DNS: DNSSEC vs DoT vs DoH and what each protects

Secure DNS options appear in CloudNetX scenarios as targeted protections rather than blanket solutions, and this episode clarifies what each mechanism actually provides.…

Transcript availableJanuary 16, 2026
S01E18Transcript

Hybrid Network Architecture and Connectivity

Authentication Protocols: 802.1X, RADIUS, TACACS+, LDAP in scenarios

Authentication protocols are frequently referenced in CloudNetX scenarios as indicators of where and how access decisions are made, and this episode establishes clear mental models for the most common ones.…

Transcript availableJanuary 16, 2026
S01E19Transcript

Hybrid Network Architecture and Connectivity

Static Routing: simplicity benefits and operational risks

Static routing appears in CloudNetX scenarios as both a valid design choice and a hidden risk, depending on context, and this episode explains how to evaluate it correctly.…

Transcript availableJanuary 16, 2026
S01E20Transcript

Hybrid Network Architecture and Connectivity

Dynamic Routing Overview: what changes when routes must adapt

Dynamic routing protocols change how networks behave under failure and growth, and CloudNetX scenarios often test whether you understand those behavioral shifts rather than protocol mechanics.…

Transcript availableJanuary 16, 2026
S01E21Transcript

Hybrid Network Architecture and Connectivity

OSPF vs BGP: which problem each one is solving

OSPF and BGP appear in CloudNetX scenarios as signals about routing scope and intent, and this episode clarifies the distinct problems each protocol solves.…

Transcript availableJanuary 16, 2026
S01E22Transcript

Hybrid Network Architecture and Connectivity

BGP Design Thinking: peering intent, policy, and stability

BGP design in CloudNetX scenarios is rarely about memorizing attributes and more about understanding peering intent, route control, and operational stability.…

Transcript availableJanuary 16, 2026
S01E25Transcript

Hybrid Network Architecture and Connectivity

Picking a Topology: star, mesh, hub-and-spoke, point-to-point

Topology selection in CloudNetX scenarios is about matching connectivity structure to traffic patterns, resilience needs, and operational capacity, and this episode explains how to make that selection deliberately.…

Transcript availableJanuary 16, 2026
S01E26Transcript

Hybrid Network Architecture and Connectivity

Spine-and-Leaf: what it optimizes and when it’s justified

Spine-and-leaf designs appear in CloudNetX content as a scalable approach for environments with heavy east/west traffic, and this episode explains what the architecture optimizes and why it is used.…

Transcript availableJanuary 16, 2026
S01E28Transcript

Hybrid Network Architecture and Connectivity

Traffic Flows: designing for north/south versus east/west

Traffic flow direction is one of the fastest ways to interpret a scenario and choose appropriate controls, and this episode builds a practical model for north/south and east/west design.…

Transcript availableJanuary 16, 2026
S01E30Transcript

Hybrid Network Architecture and Connectivity

VLAN Segmentation: what it solves and common design traps

VLANs remain a common segmentation mechanism in campus and data center scenarios, and this episode explains what VLAN segmentation solves and where it commonly goes wrong.…

Transcript availableJanuary 16, 2026
S01E31Transcript

Hybrid Network Architecture and Connectivity

VXLAN: what overlays enable and why architects use them

VXLAN appears in modern network design scenarios as a way to extend segmentation across large environments without relying on traditional Layer 2 scaling limits.…

Transcript availableJanuary 16, 2026
S01E32Transcript

Hybrid Network Architecture and Connectivity

GENEVE: where encapsulation shows up and what it implies

Encapsulation shows up in CloudNetX scenarios because modern segmentation and service chaining often rely on tunnels that carry one network inside another, and this episode explains GENEVE as a flexible encapsulation approach in that broader category.…

Transcript availableJanuary 16, 2026
S01E34Transcript

Hybrid Network Architecture and Connectivity

WAN Selection Framework: MPLS, SD-WAN, DIA, metro, dark fiber

WAN choices in CloudNetX scenarios require aligning connectivity options to business outcomes, operational constraints, and performance requirements rather than selecting the most modern-sounding technology.…

Transcript availableJanuary 16, 2026
S01E35Transcript

Hybrid Network Architecture and Connectivity

Cellular Links: when constraints make cellular the best answer

Cellular connectivity appears in CloudNetX scenarios as a pragmatic option when traditional wired connectivity is unavailable, delayed, or insufficiently resilient, and this episode explains when cellular becomes the best design choice.…

Transcript availableJanuary 16, 2026
S01E36Transcript

Hybrid Network Architecture and Connectivity

Satellite Links: latency reality and use cases that fit

Satellite connectivity shows up in CloudNetX scenarios as an option of necessity, chosen when terrestrial connectivity is unavailable or when geographic reach outweighs performance constraints.…

Transcript availableJanuary 16, 2026
S01E37Transcript

Hybrid Network Architecture and Connectivity

Cloud Interconnects: Direct Connect, ExpressRoute, SDCI selection logic

Private cloud interconnects appear in CloudNetX scenarios as mechanisms to improve predictability, reduce exposure to the public internet, and support compliance-driven connectivity requirements.…

Transcript availableJanuary 16, 2026
S01E38Transcript

Hybrid Network Architecture and Connectivity

VPN Types: site-to-site vs point-to-site vs remote access

VPN scenarios in CloudNetX require distinguishing connectivity intent, trust scope, and operational impact, and this episode provides clear models for the main VPN types.…

Transcript availableJanuary 16, 2026
S01E40Transcript

Hybrid Network Architecture and Connectivity

WireGuard in Hybrid: why it’s referenced and when it fits

WireGuard appears in CloudNetX objectives as an example of a modern VPN approach, and this episode explains why it is referenced and what it implies in hybrid designs.…

Transcript availableJanuary 16, 2026
S01E41Transcript

Hybrid Network Architecture and Connectivity

Bastion Hosts: safe admin access paths in hybrid designs

Administrative access is a high-value pathway in hybrid environments, and CloudNetX scenarios often test whether you can design that pathway with minimal exposure and strong accountability.…

Transcript availableJanuary 16, 2026
S01E42Transcript

Hybrid Network Architecture and Connectivity

SSH vs RDP: secure management assumptions the exam tests

Remote management protocols appear in CloudNetX scenarios as design signals about administrative needs, exposure risk, and operational controls, and this episode clarifies how to choose between SSH and RDP responsibly.…

Transcript availableJanuary 16, 2026
S01E43Transcript

Hybrid Network Architecture and Connectivity

Application Gateways: what they do beyond routing and firewalling

Application gateways show up in CloudNetX scenarios when traffic decisions must be made with application context rather than only IP and port, and this episode explains what they add beyond routing and firewalling.…

Transcript availableJanuary 16, 2026
S01E44Transcript

Hybrid Network Architecture and Connectivity

Service Endpoints: private access patterns for managed services

Service endpoints appear in CloudNetX scenarios as private connectivity options for managed services, and this episode explains how they reduce exposure while simplifying access patterns.…

Transcript availableJanuary 16, 2026
S01E45Transcript

Hybrid Network Architecture and Connectivity

Transit Gateways: hub routing without spaghetti networks

Transit gateways appear in CloudNetX scenarios as a way to scale connectivity in cloud and hybrid designs without creating an unmanageable web of peerings and custom routes.…

Transcript availableJanuary 16, 2026
S01E46Transcript

Hybrid Network Architecture and Connectivity

VPC Peering vs Private Link: choosing the right private connectivity model

CloudNetX scenarios often include private connectivity choices that look similar on the surface but carry very different risk and governance implications, and this episode clarifies the distinction between broad network peering and narrowly scoped private service access.…

Transcript availableJanuary 16, 2026
S01E47Transcript

Hybrid Network Architecture and Connectivity

Availability Requirements: turning uptime promises into architecture

Availability requirements appear throughout CloudNetX scenarios as the driver that determines whether a design can tolerate component failure, site loss, or maintenance disruption, and this episode explains how to translate uptime promises into concrete architectural decisions.…

Transcript availableJanuary 16, 2026
S01E48Transcript

Hybrid Network Architecture and Connectivity

Load Balancing Basics: global vs local and what VIP means

Load balancing is a foundational availability and performance mechanism in CloudNetX scenarios, and this episode establishes the baseline concepts needed to reason about it correctly.…

Transcript availableJanuary 16, 2026
S01E50Transcript

Hybrid Network Architecture and Connectivity

High Availability Patterns: active-active vs active-passive tradeoffs

High availability patterns are a recurring CloudNetX decision point because they determine whether a service continues through failures, how complex synchronization must be, and how recovery behaves under stress.…

Transcript availableJanuary 16, 2026
S01E51Transcript

Hybrid Network Architecture and Connectivity

Link Aggregation: capacity, redundancy, and failure behavior

Link aggregation shows up in CloudNetX scenarios because it is one of the simplest ways to increase uplink capacity while also improving resilience, but it behaves differently than many people assume.…

Transcript availableJanuary 16, 2026
S01E52Transcript

Hybrid Network Architecture and Connectivity

Autoscaling: availability, cost control, and risk of runaway scaling

Autoscaling appears in CloudNetX scenarios as an availability and cost control mechanism, but the exam expects you to recognize that autoscaling is only as good as the signals and guardrails behind it.…

Transcript availableJanuary 16, 2026
S01E53Transcript

Hybrid Network Architecture and Connectivity

Regions and Availability Zones: designing around failure domains

Regions and availability zones are tested in CloudNetX as building blocks for resilience, and this episode explains how to treat them as deliberate failure domains rather than marketing terms.…

Transcript availableJanuary 16, 2026
S01E54Transcript

Hybrid Network Architecture and Connectivity

CDN Decisions: performance, resilience, and correct placement

CDNs appear in CloudNetX scenarios as performance and resilience tools, and this episode explains how to decide when a CDN is appropriate and where it belongs in the delivery path.…

Transcript availableJanuary 16, 2026
S01E55Transcript

Hybrid Network Architecture and Connectivity

Fault Domains and Update Domains: planning for “planned failure” events

CloudNetX scenarios often assume you can design for failure that is scheduled, not just failure that is accidental, and this episode explains fault domains and update domains as tools for surviving planned disruption.…

Transcript availableJanuary 16, 2026
S01E57Transcript

Hybrid Network Architecture and Connectivity

Power Planning: voltage, wattage, amperage, PDUs, UPS essentials

Physical campus requirements in CloudNetX include power planning because networks fail in predictable ways when electrical capacity and protection are treated as afterthoughts.…

Transcript availableJanuary 16, 2026
S01E58Transcript

Hybrid Network Architecture and Connectivity

Power Events: blackout, brownout, surge, spike and protective choices

CloudNetX expects learners to understand how different power events affect infrastructure and what protections are appropriate, because these events create outages that look like “random failures” unless the root cause is recognized.…

Transcript availableJanuary 16, 2026
S01E59Transcript

Hybrid Network Architecture and Connectivity

Environmental Requirements: temperature, humidity, BTUs, and failure prevention

Environmental requirements are included in CloudNetX because many infrastructure failures are driven by heat, airflow, and humidity conditions that degrade performance long before a device “fails.” This episode defines temperature and humidity as operational constraints that influence reliability and service life, then explains BTUs as a way to quantify heat output and plan cooling capacity.…

Transcript availableJanuary 16, 2026
S01E60Transcript

Hybrid Network Architecture and Connectivity

Fire Suppression Awareness: what network architects must account for

Fire suppression considerations appear in CloudNetX because safety systems directly influence availability planning, facility design, and recovery procedures even though they are not “network technologies.” This episode introduces fire suppression awareness as a requirement for architects who design MDF and IDF spaces, data rooms, and wiring pathways that must remain safe and recoverable.…

Transcript availableJanuary 16, 2026
S01E62Transcript

Hybrid Network Architecture and Connectivity

Switching vs Routing: Layer 2 vs Layer 3 decision patterns

CloudNetX scenarios often depend on whether a problem is confined to a local broadcast domain or requires subnet-level separation and policy enforcement, so this episode clarifies switching versus routing as different roles with different design implications.…

Transcript availableJanuary 16, 2026
S01E63Transcript

Hybrid Network Architecture and Connectivity

PoE Design: budgeting power and avoiding late-stage surprises

Power over Ethernet is included in CloudNetX campus design objectives because it links network design to physical power constraints and can create widespread outages if capacity is miscalculated.…

Transcript availableJanuary 16, 2026
S01E64Transcript

Hybrid Network Architecture and Connectivity

Three-Tier vs Collapsed Core: selecting the right hierarchy

Campus and enterprise designs often require choosing an architectural hierarchy that matches site size, growth expectations, and operational capability, and CloudNetX scenarios test this decision repeatedly.…

Transcript availableJanuary 16, 2026
S01E66Transcript

Hybrid Network Architecture and Connectivity

STP Essentials: why loops happen and how designs prevent them

Spanning Tree Protocol appears in CloudNetX objectives because Layer 2 loops are one of the fastest ways to take down a network segment, and exam scenarios often hinge on recognizing loop symptoms and prevention strategies.…

Transcript availableJanuary 16, 2026
S01E67Transcript

Hybrid Network Architecture and Connectivity

Trunking and Tagging: how VLANs move across the network

Trunking and tagging are essential VLAN concepts tested in CloudNetX because they determine how segmentation is preserved across switches and where misconfiguration creates leaks or outages.…

Transcript availableJanuary 16, 2026
S01E68Transcript

Hybrid Network Architecture and Connectivity

Bonding: when to bundle links and what can go wrong

Bonding is tested in CloudNetX because it affects both performance and resilience at the server and infrastructure edge, and it can cause outages when assumptions between endpoints are mismatched.…

Transcript availableJanuary 16, 2026
S01E69Transcript

Hybrid Network Architecture and Connectivity

Voice/Video Signals: SIP, WebRTC, RTSP, H.323 as scenario hints

Voice and video protocols appear in CloudNetX scenarios as clues about traffic behavior and performance sensitivity, and this episode teaches how to interpret those clues without getting lost in implementation detail.…

Transcript availableJanuary 16, 2026
S01E70Transcript

Hybrid Network Architecture and Connectivity

CPE and Media Converters: edge realities that break perfect diagrams

Edge connectivity components appear in CloudNetX objectives because real networks depend on provider handoffs, physical media constraints, and demarcation ownership, and these realities often drive the “best answer” in scenario questions.…

Transcript availableJanuary 16, 2026
S01E72Transcript

Hybrid Network Architecture and Connectivity

Antennas and Placement: coverage assumptions and practical constraints

Wireless performance is heavily influenced by physical placement decisions, and CloudNetX scenarios often test whether you understand the practical constraints that drive coverage and capacity outcomes.…

Transcript availableJanuary 16, 2026
S01E73Transcript

Hybrid Network Architecture and Connectivity

Bands and Channels: 2.4/5/6 GHz tradeoffs and overlap problems

Band and channel decisions are a common source of wireless success or failure, and CloudNetX scenarios use these choices to test whether you can balance range, capacity, and interference.…

Transcript availableJanuary 16, 2026
S01E74Transcript

Hybrid Network Architecture and Connectivity

SSID Strategy: hidden vs advertised and what it affects

SSID strategy appears in CloudNetX scenarios as a signal about segmentation intent, user experience, and security posture, and this episode explains what SSID design actually affects.…

Transcript availableJanuary 16, 2026
S01E76Transcript

Hybrid Network Architecture and Connectivity

Non-Wi-Fi Options: BLE, NFC, LoRaWAN and where they fit

CloudNetX includes non-Wi-Fi wireless technologies because campuses and enterprises often need connectivity for devices that do not match the bandwidth and power profile of traditional Wi-Fi clients.…

Transcript availableJanuary 16, 2026
S01E77Transcript

Requirements, Documentation and Validation

Requirements Analysis: business, technical, compliance, and SOW inputs

Requirements analysis appears explicitly in CloudNetX objectives because many scenario answers depend on correctly interpreting stakeholder intent and translating it into design constraints and acceptance outcomes.…

Transcript availableJanuary 16, 2026
S01E78Transcript

Requirements, Documentation and Validation

Network Diagrams: physical vs logical and high-level vs low-level

Network diagrams appear in CloudNetX scenarios as part of documentation artifacts, and this episode explains how different diagram types support different decisions and reduce operational risk.…

Transcript availableJanuary 16, 2026
S01E79Transcript

Requirements, Documentation and Validation

Flow Diagrams: narrating traffic paths for security and ops

Flow diagrams are emphasized in CloudNetX because they translate architecture into an understandable packet story that supports security control placement and operational troubleshooting.…

Transcript availableJanuary 16, 2026
S01E80Transcript

Requirements, Documentation and Validation

Verification and Validation: proving the design meets requirements

CloudNetX includes verification and validation because successful network design requires proof that the solution matches its specification and actually satisfies the intended outcomes.…

Transcript availableJanuary 16, 2026
S01E81Transcript

Requirements, Documentation and Validation

Runbooks: turning architecture into repeatable operations

Runbooks appear in CloudNetX because architecture is incomplete until it can be operated consistently, and runbooks are how teams translate design into predictable actions during routine work and incidents.…

Transcript availableJanuary 16, 2026
S01E82Transcript

Requirements, Documentation and Validation

WBS and KB Articles: project structure and maintainable knowledge

CloudNetX includes project and knowledge artifacts because networks are delivered and operated by teams, and those teams need structured plans and durable documentation to avoid repeated errors.…

Transcript availableJanuary 16, 2026
S01E83Transcript

Requirements, Documentation and Validation

Baselines: what to measure, when, and why it matters

Baselines appear in CloudNetX because you cannot identify anomalies or prove improvement without knowing what normal looks like, and many scenario questions depend on that operational reality.…

Transcript availableJanuary 16, 2026
S01E84Transcript

Requirements, Documentation and Validation

Reference Architectures: internal vs external and how to use them

Reference architectures appear in CloudNetX documentation objectives because they provide proven patterns that speed design while reducing inconsistency and repeated mistakes.…

Transcript availableJanuary 16, 2026
S01E87Transcript

Threats and Risk

DDoS and SYN Floods: recognition patterns and mitigations

Denial-of-service scenarios in CloudNetX test whether you can recognize availability attacks and choose layered mitigations that match the attack type and environment constraints.…

Transcript availableJanuary 16, 2026
S01E89Transcript

Threats and Risk

On-Path Attacks: what gets exposed and how to reduce it

On-path attacks appear in CloudNetX scenarios as threats to confidentiality and integrity when attackers can observe, intercept, or manipulate traffic between endpoints.…

Transcript availableJanuary 16, 2026
S01E91Transcript

Threats and Risk

Credential Attacks: reuse, brute force, and layered defenses

Credential-based attacks are a core CloudNetX security theme because they exploit the most common weakness in real environments: reused passwords, weak authentication controls, and overly broad access once a login succeeds.…

Transcript availableJanuary 16, 2026
S01E92Transcript

Threats and Risk

Social Engineering: why network controls still matter afterward

Social engineering appears in CloudNetX scenarios because it bypasses technical controls by manipulating people, and effective network design assumes that some users will eventually be tricked.…

Transcript availableJanuary 16, 2026
S01E93Transcript

Threats and Risk

Evil Twin and Rogue APs: detection mindset and prevention controls

Wireless impersonation and unauthorized access points appear in CloudNetX because they exploit user trust and create direct entry paths into networks, especially in public or high-traffic environments.…

Transcript availableJanuary 16, 2026
S01E94Transcript

Threats and Risk

BGP Hijacking: what it is and what mitigations look like

BGP hijacking is included in CloudNetX because it represents a high-impact routing threat where traffic can be misdirected or intercepted due to false route announcements, and scenario questions often test recognition and appropriate mitigations.…

Transcript availableJanuary 16, 2026
S01E98Transcript

Security Controls, Zero Trust and IAM

Firewall Types: NGFW vs cloud-native firewall vs WAF

Firewall selection is a common CloudNetX decision point because different firewall types operate at different layers and solve different problems, and scenarios test whether you can match the control to the traffic.…

Transcript availableJanuary 16, 2026
S01E99Transcript

Security Controls, Zero Trust and IAM

IDS vs IPS: detection versus prevention and tuning tradeoffs

IDS and IPS decisions appear in CloudNetX scenarios because teams must balance visibility, prevention, and operational stability, and the exam expects you to recognize when blocking is appropriate and when it is too risky.…

Transcript availableJanuary 16, 2026
S01E100Transcript

Security Controls, Zero Trust and IAM

Encryption Basics: symmetric vs asymmetric and scenario expectations

Encryption appears throughout CloudNetX scenarios as a foundational mechanism for protecting confidentiality and integrity, and this episode clarifies the practical distinction between symmetric and asymmetric cryptography.…

Transcript availableJanuary 16, 2026
S01E101Transcript

Security Controls, Zero Trust and IAM

TLS Inspection: what it reveals, what it breaks, performance impact

TLS inspection appears in CloudNetX scenarios as a deliberate tradeoff between visibility and privacy, and the exam expects you to understand both the security value and the operational risk.…

Transcript availableJanuary 16, 2026
S01E102Transcript

Security Controls, Zero Trust and IAM

Secure Web Gateway vs Application Gateway: choosing the right control point

CloudNetX scenarios often include “gateway” terminology that can be misleading unless you focus on traffic direction and enforcement intent, and this episode clarifies secure web gateways versus application gateways as distinct control points.…

Transcript availableJanuary 16, 2026
S01E103Transcript

Security Controls, Zero Trust and IAM

NAC Concepts: posture assessment, enforcement points, dynamic lists

Network access control appears in CloudNetX because it is a practical way to decide who and what can connect, and to adapt that decision based on device trustworthiness rather than assuming all endpoints are equal.…

Transcript availableJanuary 16, 2026
S01E105Transcript

Security Controls, Zero Trust and IAM

Decryption Rules: when inspection is required and common pitfalls

Decryption rules are a focused CloudNetX topic because they determine where encrypted traffic becomes visible for security controls and where it remains private, which directly affects risk management and operational stability.…

Transcript availableJanuary 16, 2026
S01E106Transcript

Security Controls, Zero Trust and IAM

NACL vs NSG: stateless/stateful thinking and inbound/outbound logic

CloudNetX scenarios often include cloud filtering controls that sound similar but behave differently, and the exam expects you to reason about state, direction, and enforcement scope.…

Transcript availableJanuary 16, 2026
S01E107Transcript

Security Controls, Zero Trust and IAM

IDS/IPS Signatures: what to automate and what to constrain

Signature-driven detection and prevention are included in CloudNetX because they represent a practical security control that must be tuned and governed to avoid either missed threats or self-inflicted outages.…

Transcript availableJanuary 16, 2026
S01E108Transcript

Security Controls, Zero Trust and IAM

Geolocation Rules: when geo blocking helps and when it backfires

Geolocation-based rules appear in CloudNetX scenarios as a simple control that can reduce exposure, but the exam expects you to understand its limitations and operational impact.…

Transcript availableJanuary 16, 2026
S01E109Transcript

Security Controls, Zero Trust and IAM

URL and Content Filtering: categories, apps, file blocking tradeoffs

URL and content filtering is included in CloudNetX because it is a common control for reducing web-borne risk and limiting unsafe data movement, and scenarios often test whether you can apply it without crippling productivity.…

Transcript availableJanuary 16, 2026
S01E110Transcript

Security Controls, Zero Trust and IAM

DLP Controls: preventing leakage without stopping business

DLP is a recurring CloudNetX control because it addresses one of the hardest security problems: preventing sensitive data from leaving through legitimate channels without breaking core workflows.…

Transcript availableJanuary 16, 2026
S01E111Transcript

Security Controls, Zero Trust and IAM

Port Security: limiting lateral movement at the edge

Port security appears in CloudNetX objectives because edge access is where unauthorized devices most often enter, and controlling that entry reduces lateral movement risk before higher-layer controls ever engage.…

Transcript availableJanuary 16, 2026
S01E112Transcript

Security Controls, Zero Trust and IAM

Zero Trust Fundamentals: identity as perimeter and continuous verification

Zero Trust appears in CloudNetX objectives because modern networks cannot rely on location-based trust, and scenario questions often test whether you can design access around identity, context, and verification rather than assumptions.…

Transcript availableJanuary 16, 2026
S01E113Transcript

Security Controls, Zero Trust and IAM

Microsegmentation: limiting east/west movement without chaos

Microsegmentation is included in CloudNetX because internal lateral movement is one of the fastest ways attacks spread, and scenarios often test whether you can limit east/west flows without breaking critical dependencies.…

Transcript availableJanuary 16, 2026
S01E114Transcript

Security Controls, Zero Trust and IAM

ZTNA: replacing broad trust with precise access decisions

ZTNA appears in CloudNetX because it represents a practical application of Zero Trust that changes how remote access is granted, moving from broad network connectivity toward application-specific access.…

Transcript availableJanuary 16, 2026
S01E115Transcript

Security Controls, Zero Trust and IAM

SASE and SSE: tying controls to users, devices, and apps

SASE and SSE appear in CloudNetX because hybrid work and cloud adoption reduce the effectiveness of perimeter-centric designs, and scenarios often require choosing architectures that enforce consistent policy regardless of user location.…

Transcript availableJanuary 16, 2026
S01E116Transcript

Security Controls, Zero Trust and IAM

CASB: visibility and control for cloud usage and data flows

CASB appears in CloudNetX objectives because cloud adoption shifts data movement into SaaS and managed platforms where traditional perimeter controls may have limited visibility.…

Transcript availableJanuary 16, 2026
S01E117Transcript

Security Controls, Zero Trust and IAM

Federation and SSO: SAML vs OAuth 2.0 vs OIDC, clearly explained

Federation and SSO appear in CloudNetX scenarios because modern hybrid environments rely on shared identity across many services, and correct protocol selection affects both security and user experience.…

Transcript availableJanuary 16, 2026
S01E118Transcript

Security Controls, Zero Trust and IAM

MFA and Passwordless: what each solves and when it’s required

MFA and passwordless authentication appear in CloudNetX scenarios because credential compromise is common, and stronger authentication changes the outcome of many access and threat scenarios.…

Transcript availableJanuary 16, 2026
S01E120Transcript

Security Controls, Zero Trust and IAM

IAM Deep Dive: PAM, RBAC/ABAC, PKI, KMS, SCIM, CIEM in network scenarios

Identity and access management concepts are central in CloudNetX because modern network security and connectivity decisions depend on who is requesting access, what they are allowed to do, and how trust is established across systems.…

Transcript availableJanuary 16, 2026

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.