Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

CompTIA · Free, ad-free audio course

CompTIA Cloud+

A structured, audio-first learning route for CompTIA Cloud+, designed for focused review and practical understanding.

Listen to the complete course Browse 164 lessons

Hear the course trailer →

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

PUT IT INTO PRACTICE

Practice CompTIA Cloud+ concepts

Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.

50 original questionsExplanation after every answerAchievements and sharing
Open CompTIA Cloud+ PracticeSee Challenge achievements

Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.

Certification practice in the BMC Cyber Challenge

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

164 lessons available

S01E01Transcript

Getting Started

Welcome to the Cloud+ PrepCast

This first episode is your orientation to the CompTIA Cloud+ PrepCast and the journey ahead toward earning the CV0-003 certification.…

Transcript availableAugust 24, 2025
→
S01E02Transcript

Getting Started

What Is the CompTIA Cloud+ Certification?

In this episode, we define the purpose and scope of the CompTIA Cloud+ certification and explain why it’s an important credential for cloud professionals.…

Transcript availableAugust 24, 2025
→
S01E03Transcript

Getting Started

Cloud+ Exam Format, Domains, and Scoring Explained

Here, we walk you through the structure of the CV0-003 exam so you know exactly what to expect on test day. You’ll learn about the maximum number of questions, the 90-minute time limit, and the difference between multiple-choice and performance-based question types.…

Transcript availableAugust 24, 2025
→
S01E04Transcript

Getting Started

How to Study for the Cloud+ Exam Effectively

This episode provides a detailed study framework tailored for the Cloud+ certification. We guide you through breaking down the objectives into manageable sections, setting a realistic timeline, and choosing study methods that improve both understanding and retention.…

Transcript availableAugust 24, 2025
→
S01E05Transcript

Getting Started

Understanding the Official Exam Objectives

In this episode, we examine the official CompTIA Cloud+ exam objectives in depth, showing how they serve as both a blueprint for the test and a practical checklist for your preparation.…

Transcript availableAugust 24, 2025
→
S01E06Transcript

Getting Started

Choosing the Best Cloud+ Study Resources

This episode focuses on how to evaluate and select the most effective study materials for your Cloud+ preparation.…

Transcript availableAugust 24, 2025
→
S01E07Transcript

Getting Started

Cloud+ vs. Other Cloud Certifications — What Sets It Apart?

In this episode, we compare CompTIA Cloud+ to both vendor-specific certifications such as AWS Certified Solutions Architect, Microsoft Azure Administrator, and Google Cloud Associate Engineer, as well as vendor-neutral credentials like CompTIA Network+ and Server+.…

Transcript availableAugust 24, 2025
→
S01E08Transcript

Getting Started

Glossary Deep Dive Part 1 — Cloud Architecture and Design

This glossary episode delivers detailed explanations of key terms from the Cloud Architecture and Design domain, ensuring you understand both the definitions and the practical applications.…

Transcript availableAugust 24, 2025
→
S01E11Transcript

Domain 1 · Cloud Architecture and Design

Domain 1.0 Cloud Architecture and Design — Overview

This episode introduces Domain 1 of the Cloud+ CV0-003 exam, which focuses on understanding and applying cloud architecture and design principles.…

Transcript availableAugust 24, 2025
→
S01E15Transcript

Domain 1 · Cloud Architecture and Design

Cloud Service Models — IaaS, PaaS, SaaS Compared

This episode compares the three primary cloud service models—Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)—detailing their unique capabilities, responsibilities, and use cases.…

Transcript availableAugust 24, 2025
→
S01E17Transcript

Domain 1 · Cloud Architecture and Design

Emerging Cloud Services — IoT, Serverless, and AI/ML Workloads

This episode covers emerging technologies that are increasingly shaping cloud environments and exam content. We start with the Internet of Things (IoT), explaining how connected devices generate, transmit, and process massive data streams in cloud platforms.…

Transcript availableAugust 24, 2025
→
S01E18Transcript

Domain 1 · Cloud Architecture and Design

Shared Responsibility Model — Dividing Risk Between Vendor and Customer

In this episode, we break down the shared responsibility model, a foundational concept in cloud security and operations. You’ll learn how responsibilities are divided between cloud service providers and customers across different service models like IaaS, PaaS, and SaaS.…

Transcript availableAugust 24, 2025
→
S01E20Transcript

Domain 1 · Cloud Architecture and Design

Capacity Planning Templates and Budget Analysis

In this episode, we focus on the tools and techniques used to create repeatable, effective capacity planning processes. You’ll learn how to use templates to standardize data collection, resource forecasting, and scaling strategies.…

Transcript availableAugust 24, 2025
→
S01E22Transcript

Domain 1 · Cloud Architecture and Design

Licensing Strategies — Volume Licensing and License Portability

This episode builds on licensing fundamentals by exploring strategies that can optimize cost and operational flexibility. We discuss volume licensing agreements, which allow organizations to purchase large quantities of licenses at discounted rates while simplifying administration.…

Transcript availableAugust 24, 2025
→
S01E23Transcript

Domain 1 · Cloud Architecture and Design

Planning for Density — User Load and System Impact

In this episode, we explore the concept of planning for density, which involves anticipating the maximum number of users or workloads a system can support while maintaining performance and reliability.…

Transcript availableAugust 24, 2025
→
S01E25Transcript

Domain 1 · Cloud Architecture and Design

Trend Analysis in Capacity Planning — Baselines and Forecasting

In this episode, we focus on using trend analysis to inform capacity planning decisions. We explain how to establish performance baselines that reflect normal operating conditions, and how to monitor for deviations that may indicate growth or potential issues.…

Transcript availableAugust 24, 2025
→
S01E26Transcript

Domain 1 · Cloud Architecture and Design

Pattern Recognition and Anomaly Detection in Workload Trends

This episode examines how pattern recognition and anomaly detection can enhance capacity planning and operational stability. We explain how pattern recognition identifies recurring workload behaviors, such as traffic spikes during specific times or predictable storage growth.…

Transcript availableAugust 24, 2025
→
S01E27Transcript

Domain 1 · Cloud Architecture and Design

Performance Capacity Planning — Metrics, Thresholds, and Planning Cycles

In this episode, we focus on the performance metrics that drive effective capacity planning. We cover CPU utilization, memory allocation, storage IOPS, and network throughput, explaining how each affects overall system performance.…

Transcript availableAugust 24, 2025
→
S01E30Transcript

Domain 1 · Cloud Architecture and Design

Avoiding Single Points of Failure — Resiliency in Network and Compute

This episode focuses on identifying and eliminating single points of failure in cloud architectures. We discuss how to design redundant network paths, distribute workloads across multiple compute nodes, and ensure failover capabilities for critical services.…

Transcript availableAugust 24, 2025
→
S01E32Transcript

Domain 1 · Cloud Architecture and Design

Cloud Bursting — Extending Workloads Beyond On-Prem Limits

This episode explains the concept of cloud bursting, where workloads temporarily overflow from on-premises infrastructure into the cloud to handle demand spikes.…

Transcript availableAugust 24, 2025
→
S01E33Transcript

Domain 1 · Cloud Architecture and Design

Business-Aligned Cloud Design — Requirements, SLA, and Integration Targets

In this episode, we look at how to align cloud design decisions with business goals, service-level agreements (SLAs), and integration requirements. We explain how to capture stakeholder priorities, regulatory obligations, and cost constraints in the initial design phase.…

Transcript availableAugust 24, 2025
→
S01E34Transcript

Domain 2 · Security

Domain 2.0 Security — Overview

This episode introduces Domain 2 of the Cloud+ exam, which covers securing cloud environments across identity management, network protection, application hardening, and compliance measures.…

Transcript availableAugust 24, 2025
→
S01E35Transcript

Domain 2 · Security

Identity and Access Management — Identification and Authorization Basics

This episode focuses on the fundamentals of identity and access management (IAM) in cloud environments. We explain how identification verifies user identity, while authentication confirms it through credentials, and authorization determines what resources the user can access.…

Transcript availableAugust 24, 2025
→
S01E37Transcript

Domain 2 · Security

Account Lifecycle Management — Provisioning and Deprovisioning

This episode focuses on the processes for securely creating, managing, and removing user accounts in cloud systems. We break down provisioning, which involves granting new users the correct access rights, applying security policies, and enabling required services.…

Transcript availableAugust 24, 2025
→
S01E38Transcript

Domain 2 · Security

Role-Based Access Control (RBAC) Explained

In this episode, we break down Role-Based Access Control (RBAC) and how it enforces consistent permissions across cloud resources. We explain how roles group permissions together, simplifying management and reducing the chance of misconfiguration.…

Transcript availableAugust 24, 2025
→
S01E39Transcript

Domain 2 · Security

Discretionary, Non-Discretionary, and Mandatory Access Models

This episode covers three primary access control models and their application in cloud security. Discretionary Access Control (DAC) allows resource owners to determine access, offering flexibility but requiring careful oversight.…

Transcript availableAugust 24, 2025
→
S01E41Transcript

Domain 2 · Security

Federation and Identity Trust Relationships

In this episode, we examine how federation enables users from one domain to access resources in another without needing separate authentication credentials.…

Transcript availableAugust 24, 2025
→
S01E42Transcript

Domain 2 · Security

Certificate Management Fundamentals

This episode focuses on the role of digital certificates in securing cloud communications and verifying system identities. We cover the components of a certificate, including public and private keys, certificate authorities (CAs), and trust chains.…

Transcript availableAugust 24, 2025
→
S01E43Transcript

Domain 2 · Security

Multifactor Authentication — Configurations and Use Cases

In this episode, we explore multifactor authentication (MFA) as a core security control in cloud environments. We define the three common factor types—something you know, something you have, and something you are—and explain how combining them strengthens identity verification.…

Transcript availableAugust 24, 2025
→
S01E44Transcript

Domain 2 · Security

Single Sign-On and SAML in Cloud Environments

This episode explains how single sign-on (SSO) reduces friction for users by enabling access to multiple applications with a single authentication event.…

Transcript availableAugust 24, 2025
→
S01E45Transcript

Domain 2 · Security

Public Key Infrastructure — Concepts and Cloud Use Cases

In this episode, we explore the architecture and functions of Public Key Infrastructure (PKI), which supports secure communications through encryption, authentication, and digital signatures.…

Transcript availableAugust 24, 2025
→
S01E46Transcript

Domain 2 · Security

Secret and Key Management — Secure Credential Handling

In this episode, we cover the essential practices for managing sensitive information such as API keys, encryption keys, passwords, and tokens in cloud environments.…

Transcript availableAugust 24, 2025
→
S01E48Transcript

Domain 2 · Security

DNS Security — DNSSEC, DoH, DoT

In this episode, we explore how securing the Domain Name System (DNS) protects against spoofing, cache poisoning, and man-in-the-middle attacks.…

Transcript availableAugust 24, 2025
→
S01E49Transcript

Domain 2 · Security

Time Synchronization and NTP Security

This episode discusses the importance of accurate timekeeping for authentication, logging, and system coordination in cloud environments.…

Transcript availableAugust 24, 2025
→
S01E50Transcript

Domain 2 · Security

Network Encryption — IPSec, TLS, HTTPS

In this episode, we detail the protocols that protect data in transit across cloud networks. IPSec is covered as a suite for securing IP communications, including its modes, encryption methods, and authentication options.…

Transcript availableAugust 24, 2025
→
S01E51Transcript

Domain 2 · Security

Secure Tunneling — SSH, GRE, L2TP, PPTP

In this episode, we cover the tunneling protocols that enable secure or encapsulated communications in cloud and hybrid network architectures. Secure Shell (SSH) is explained as both a remote access protocol and a secure tunneling mechanism for other traffic.…

Transcript availableAugust 24, 2025
→
S01E53Transcript

Domain 2 · Security

IPS, IDS, NAC, and Advanced Network Protection

In this episode, we look at intrusion prevention systems (IPS), intrusion detection systems (IDS), and network access control (NAC) as part of a broader cloud security architecture.…

Transcript availableAugust 24, 2025
→
S01E54Transcript

Domain 2 · Security

Packet Brokers and DLP Tools in Cloud Monitoring

This episode explains how packet brokers and data loss prevention (DLP) tools enhance visibility and control in cloud environments. Packet brokers aggregate and filter traffic from multiple sources, optimizing monitoring tool performance.…

Transcript availableAugust 24, 2025
→
S01E55Transcript

Domain 2 · Security

Log and Event Monitoring for Network Security

In this episode, we cover the role of log and event monitoring in detecting and responding to security incidents. We explain the types of logs generated by firewalls, IDS/IPS, and network devices, and how to centralize them for analysis.…

Transcript availableAugust 24, 2025
→
S01E56Transcript

Domain 2 · Security

Network Flow Analysis and Anomaly Detection

In this episode, we explore how network flow analysis provides valuable insights into traffic patterns, bandwidth utilization, and potential security threats in cloud environments.…

Transcript availableAugust 24, 2025
→
S01E57Transcript

Domain 2 · Security

Hardening Network Configurations — Ports, Protocols, Firmware

This episode focuses on reducing attack surfaces by hardening network device configurations. We explain the process of closing unused ports, disabling insecure or unnecessary protocols, and applying firmware updates to address vulnerabilities.…

Transcript availableAugust 24, 2025
→
S01E59Transcript

Domain 2 · Security

DDoS Protection in the Cloud — Design and Defense

This episode explores how to design cloud environments to withstand Distributed Denial of Service (DDoS) attacks. We discuss layered defense strategies, including upstream filtering by cloud providers, traffic scrubbing services, and auto-scaling to absorb surges.…

Transcript availableAugust 24, 2025
→
S01E60Transcript

Domain 2 · Security

OS and Application Security Policies — Passwords, Lockouts, Whitelisting

In this episode, we focus on the security policies that protect operating systems and applications in cloud environments. We cover password complexity and expiration requirements, account lockout thresholds, and application whitelisting to prevent unauthorized software execution.…

Transcript availableAugust 24, 2025
→
S01E61Transcript

Domain 2 · Security

User Permissions, Antivirus, and Endpoint Detection

In this episode, we look at three critical layers of endpoint and application security in cloud environments. User permissions define the specific resources and actions a user can access, enforcing the principle of least privilege.…

Transcript availableAugust 24, 2025
→
S01E62Transcript

Domain 2 · Security

HIDS and HIPS — Host-Level Detection and Prevention

This episode covers Host-based Intrusion Detection Systems (HIDS) and Host-based Intrusion Prevention Systems (HIPS) as part of a layered cloud security approach.…

Transcript availableAugust 24, 2025
→
S01E63Transcript

Domain 2 · Security

Hardened OS and Application Baselines

In this episode, we explain how hardened baselines create secure, standardized configurations for operating systems and applications. We cover the process of removing unnecessary services, disabling unused accounts, applying security patches, and configuring system-level protections.…

Transcript availableAugust 24, 2025
→
S01E64Transcript

Domain 2 · Security

Security Through Configuration Management and Event Monitoring

This episode looks at how configuration management and event monitoring work together to maintain cloud security. Configuration management ensures systems are deployed and maintained according to predefined policies, reducing drift and misconfigurations.…

Transcript availableAugust 24, 2025
→
S01E66Transcript

Domain 2 · Security

Mandatory Access Control and Software Firewalls

In this episode, we examine the Mandatory Access Control (MAC) model and its role in enforcing strict, label-based security policies in cloud systems.…

Transcript availableAugust 24, 2025
→
S01E67Transcript

Domain 3 · Deployment

Domain 3.0 Deployment — Overview

This episode introduces Domain 3 of the Cloud+ exam, which focuses on deploying cloud solutions effectively and securely. We outline the major topic areas, from provisioning compute, storage, and network resources to integrating subscription services and containerized applications.…

Transcript availableAugust 24, 2025
→
S01E72Transcript

Domain 3 · Deployment

Deploying VMs — From Base Images to Custom Builds

This episode covers the deployment of virtual machines (VMs) in cloud platforms, starting from provider base images and extending to fully customized builds.…

Transcript availableAugust 24, 2025
→
S01E74Transcript

Domain 3 · Deployment

Implementing Cloud Identity Management Solutions

This episode focuses on deploying cloud-based identity management systems that centralize authentication and authorization for users and applications.…

Transcript availableAugust 24, 2025
→
S01E75Transcript

Domain 3 · Deployment

Deploying Containers — Variable Configuration and Secrets

In this episode, we explain how containers package applications and dependencies into portable, consistent units for cloud deployment. We detail how environment variables configure container behavior dynamically, allowing for easy adaptation across environments.…

Transcript availableAugust 24, 2025
→
S01E77Transcript

Domain 3 · Deployment

Auto-Scaling Configurations — Horizontal and Vertical Scaling

This episode examines how auto-scaling mechanisms adjust cloud resources to match demand in real time. Horizontal scaling adds or removes instances to distribute workloads, while vertical scaling adjusts the resources—such as CPU or memory—allocated to a single instance.…

Transcript availableAugust 24, 2025
→
S01E79Transcript

Domain 3 · Deployment

Storage Types in the Cloud — Block, File, and Object

This episode breaks down the three main types of cloud storage. Block storage is discussed as a high-performance option for databases and transactional workloads. File storage offers shared access through protocols like NFS or SMB, ideal for collaborative work or legacy applications.…

Transcript availableAugust 24, 2025
→
S01E81Transcript

Domain 3 · Deployment

NAS and File Storage Fundamentals

In this episode, we explore Network Attached Storage (NAS) and its role in delivering shared file-based storage across cloud and hybrid environments.…

Transcript availableAugust 24, 2025
→
S01E83Transcript

Domain 3 · Deployment

Storage Tiers — Flash, Hybrid, Spinning Disk, and Archival

In this episode, we cover the different tiers of storage available in cloud environments and how they align with performance and cost objectives. Flash storage offers high-speed, low-latency access for mission-critical workloads.…

Transcript availableAugust 24, 2025
→
S01E84Transcript

Domain 3 · Deployment

IOPS and Read/Write Performance Metrics

This episode explains Input/Output Operations Per Second (IOPS) and how it measures the performance capability of storage systems. We detail how read and write operations differ in performance characteristics, and how workload types influence the IOPS requirement.…

Transcript availableAugust 24, 2025
→
S01E85Transcript

Domain 3 · Deployment

Storage Access Protocols — NFS, CIFS, iSCSI, FC, NVMe-oF

In this episode, we break down the protocols used to access and manage cloud storage. Network File System (NFS) and Common Internet File System (CIFS) are file-level protocols, while Internet Small Computer System Interface (iSCSI) and Fibre Channel (FC) provide block-level access.…

Transcript availableAugust 24, 2025
→
S01E86Transcript

Domain 3 · Deployment

RAID Levels Explained — 0, 1, 5, 6, and 10

In this episode, we detail Redundant Array of Independent Disks (RAID) configurations and their impact on storage performance, redundancy, and capacity. RAID 0 offers striping for speed but no fault tolerance, while RAID 1 mirrors data for redundancy at the cost of usable capacity.…

Transcript availableAugust 24, 2025
→
S01E88Transcript

Domain 3 · Deployment

Thin vs. Thick Provisioning in Cloud Storage

In this episode, we compare thin provisioning—allocating storage space on demand—to thick provisioning, which reserves the entire capacity upfront.…

Transcript availableAugust 24, 2025
→
S01E89Transcript

Domain 3 · Deployment

User Quotas and Storage Access Control

This episode focuses on managing storage consumption and securing data access in cloud environments. User quotas enforce limits on the amount of storage each user or group can consume, preventing resource hogging and ensuring fair allocation.…

Transcript availableAugust 24, 2025
→
S01E90Transcript

Domain 3 · Deployment

Hyperconverged Storage and Software-Defined Storage (SDS)

In this episode, we explain how hyperconverged storage integrates compute, storage, and networking into a single software-driven platform, simplifying deployment and scaling.…

Transcript availableAugust 24, 2025
→
S01E91Transcript

Domain 3 · Deployment

Networking Services in Cloud Deployments — DHCP, NTP, DNS, CDN

In this episode, we cover the key networking services that support cloud deployments. Dynamic Host Configuration Protocol (DHCP) automates IP address assignment and network configuration for devices, ensuring consistency and reducing administrative effort.…

Transcript availableAugust 24, 2025
→
S01E92Transcript

Domain 3 · Deployment

IP Address Management and IPAM Use Cases

This episode explains the role of IP Address Management (IPAM) systems in organizing, tracking, and automating IP address allocation across cloud and hybrid networks.…

Transcript availableAugust 24, 2025
→
S01E93Transcript

Domain 3 · Deployment

VPN Types — Site-to-Site, Point-to-Point, and Point-to-Site

In this episode, we examine the primary Virtual Private Network (VPN) types used in cloud connectivity. Site-to-site VPNs link entire networks securely, often for branch-to-headquarters or cloud-to-on-premises connections.…

Transcript availableAugust 24, 2025
→
S01E94Transcript

Domain 3 · Deployment

VPN Protocols — IPSec and MPLS

This episode focuses on two widely used VPN protocols. IPSec secures IP communications through encryption and authentication, operating in tunnel or transport modes for flexibility.…

Transcript availableAugust 24, 2025
→
S01E95Transcript

Domain 3 · Deployment

Virtual Routing — Static vs. Dynamic and vNICs

In this episode, we explore virtual routing in cloud environments, starting with static routing, where administrators manually define network paths, and dynamic routing, where protocols like BGP or OSPF adjust routes automatically based on network changes.…

Transcript availableAugust 24, 2025
→
S01E96Transcript

Domain 3 · Deployment

Cloud Network Appliances — Load Balancers and Firewalls

In this episode, we cover two critical categories of cloud network appliances. Load balancers distribute incoming network traffic across multiple servers to optimize performance, improve redundancy, and ensure availability.…

Transcript availableAugust 24, 2025
→
S01E97Transcript

Domain 3 · Deployment

Virtual Private Cloud Designs — Hub-and-Spoke, Peering

This episode examines common Virtual Private Cloud (VPC) design models. The hub-and-spoke model centralizes resources and security services in a main hub network, with connected spoke networks for workloads or departments.…

Transcript availableAugust 24, 2025
→
S01E98Transcript

Domain 3 · Deployment

VLAN, VXLAN, and GENEVE Protocols

In this episode, we explore network segmentation technologies starting with Virtual LANs (VLANs), which divide a physical network into logical segments for better security and performance.…

Transcript availableAugust 24, 2025
→
S01E99Transcript

Domain 3 · Deployment

SR-IOV — Virtualizing I/O for Network Efficiency

This episode explains Single Root I/O Virtualization (SR-IOV), a technology that allows a physical network interface card to be shared directly with multiple virtual machines, bypassing the hypervisor for improved performance.…

Transcript availableAugust 24, 2025
→
S01E100Transcript

Domain 3 · Deployment

Software-Defined Networking — Control Plane and Data Plane

In this episode, we detail how Software-Defined Networking (SDN) separates the control plane, which makes traffic management decisions, from the data plane, which forwards traffic.…

Transcript availableAugust 24, 2025
→
S01E101Transcript

Domain 3 · Deployment

Compute Sizing — Choosing the Right VM Specs for the Workload

In this episode, we discuss how to select virtual machine specifications that match workload requirements. Compute sizing involves balancing CPU cores, clock speed, memory, storage performance, and network bandwidth to ensure applications run efficiently.…

Transcript availableAugust 24, 2025
→
S01E102Transcript

Domain 3 · Deployment

Virtualization Types — Hypervisors Type 1 and Type 2

This episode examines the two main hypervisor types used in virtualization. Type 1 hypervisors, or bare-metal hypervisors, run directly on host hardware and provide superior performance and resource efficiency.…

Transcript availableAugust 24, 2025
→
S01E103Transcript

Domain 3 · Deployment

SMT and Oversubscription in Cloud Environments

In this episode, we define Simultaneous Multi-Threading (SMT) and how it allows a single CPU core to execute multiple threads concurrently, improving utilization and throughput.…

Transcript availableAugust 24, 2025
→
S01E104Transcript

Domain 3 · Deployment

CPU, vCPU, and GPU Allocation Models

This episode explains how physical CPUs, virtual CPUs (vCPUs), and Graphics Processing Units (GPUs) are allocated in cloud environments.…

Transcript availableAugust 24, 2025
→
S01E105Transcript

Domain 3 · Deployment

Clock Speed vs. IPC — Performance Considerations

In this episode, we compare clock speed, measured in gigahertz, with Instructions Per Cycle (IPC) as two key determinants of processor performance. Clock speed dictates how many cycles a CPU can execute per second, while IPC measures how much work is completed in each cycle.…

Transcript availableAugust 24, 2025
→
S01E106Transcript

Domain 3 · Deployment

Hyperconverged Compute Architectures

In this episode, we explore hyperconverged compute architectures that integrate compute, storage, and networking into a single, software-driven platform.…

Transcript availableAugust 24, 2025
→
S01E107Transcript

Domain 3 · Deployment

Dynamic Memory Allocation and Ballooning Explained

This episode focuses on dynamic memory allocation techniques that adjust RAM assignments to virtual machines based on workload demand. Ballooning is covered in detail, explaining how hypervisors reclaim unused memory from one VM and allocate it to another without downtime.…

Transcript availableAugust 24, 2025
→
S01E108Transcript

Domain 3 · Deployment

Cloud Migration Strategies — P2V and V2V Workflows

In this episode, we examine cloud migration workflows starting with Physical-to-Virtual (P2V), which converts physical systems into virtual machines for cloud hosting. We also cover Virtual-to-Virtual (V2V) migrations, moving workloads between hypervisors or cloud platforms.…

Transcript availableAugust 24, 2025
→
S01E109Transcript

Domain 3 · Deployment

Cloud-to-Cloud Migrations and Vendor Lock-In

This episode addresses migrations between cloud providers, often driven by cost optimization, service availability, or strategic alignment. We explain how to assess compatibility, data transfer methods, and service mapping when moving workloads between platforms.…

Transcript availableAugust 24, 2025
→
S01E110Transcript

Domain 3 · Deployment

PaaS and SaaS Migration Challenges — ACLs and Firewalls

In this episode, we focus on the unique challenges of migrating Platform as a Service (PaaS) and Software as a Service (SaaS) applications. Access Control Lists (ACLs) must be reviewed and adjusted to ensure correct user permissions post-migration.…

Transcript availableAugust 24, 2025
→
S01E111Transcript

Domain 3 · Deployment

Storage Migration in the Cloud — Block, File, and Object

In this episode, we cover the processes and considerations for migrating storage within cloud environments. Block storage migrations often involve moving high-performance workloads like databases, requiring minimal downtime and careful synchronization.…

Transcript availableAugust 24, 2025
→
S01E112Transcript

Domain 3 · Deployment

Database Migrations — Relational and Non-Relational Models

This episode examines database migration strategies for both relational and non-relational systems. Relational database migrations require schema transfer, data validation, and potentially complex query rewrites if moving between engines.…

Transcript availableAugust 24, 2025
→
S01E113Transcript

Domain 3 · Deployment

Cross-Service Database Portability and Configuration

In this episode, we explain how to move databases across services or environments while preserving functionality. This includes adapting configuration settings, modifying access controls, and ensuring compatibility with new infrastructure.…

Transcript availableAugust 24, 2025
→
S01E114Transcript

Domain 4 · Operations and Support

Domain 4.0 Operations and Support — Overview

This episode introduces Domain 4 of the Cloud+ exam, which covers operational tasks, monitoring, and lifecycle management for cloud environments. We outline key areas including logging and alerting, performance monitoring, patch management, and backup/restore operations.…

Transcript availableAugust 24, 2025
→
S01E115Transcript

Domain 4 · Operations and Support

Logging Fundamentals — Collection, Types, and Categorization

In this episode, we break down the fundamentals of logging in cloud environments. We explain how to collect logs from diverse sources including applications, operating systems, and network devices.…

Transcript availableAugust 24, 2025
→
S01E116Transcript

Domain 4 · Operations and Support

SNMP and Syslog Collectors in Cloud Environments

In this episode, we explore how Simple Network Management Protocol (SNMP) and Syslog operate as essential monitoring and diagnostic tools in cloud deployments.…

Transcript availableAugust 24, 2025
→
S01E117Transcript

Domain 4 · Operations and Support

Audit Logging and Authentication Logs — What to Track and Why

This episode examines the value of audit logging and authentication logs in maintaining a secure and compliant cloud environment. Audit logs record changes to configurations, permissions, and critical resources, helping administrators detect unauthorized or erroneous actions.…

Transcript availableAugust 24, 2025
→
S01E118Transcript

Domain 4 · Operations and Support

Log Automation, Analysis, and Trending Data

In this episode, we focus on automating log collection and analysis to reduce manual workload and improve responsiveness. Automation tools aggregate logs, normalize data formats, and apply rules to identify anomalies or threshold breaches.…

Transcript availableAugust 24, 2025
→
S01E120Transcript

Domain 4 · Operations and Support

Monitoring Cloud Performance — Applications and Infrastructure

In this episode, we explain how to monitor both application and infrastructure performance in cloud environments. Application monitoring involves tracking response times, transaction success rates, and error frequencies to ensure optimal user experience.…

Transcript availableAugust 24, 2025
→
S01E121Transcript

Domain 4 · Operations and Support

Resource Utilization and Uptime Verification

In this episode, we discuss how to monitor and verify that cloud resources are being utilized efficiently while meeting uptime targets.…

Transcript availableAugust 24, 2025
→
S01E122Transcript

Domain 4 · Operations and Support

SLA Compliance — Availability Tracking and Guarantees

This episode examines how to measure and ensure compliance with Service Level Agreements (SLAs) in cloud environments. Availability tracking involves monitoring system uptime, performance consistency, and responsiveness against contractual targets.…

Transcript availableAugust 24, 2025
→
S01E123Transcript

Domain 4 · Operations and Support

Monitoring Tool Integrations and Continuous Verification

In this episode, we explore how integrating monitoring tools across infrastructure, applications, and security layers creates a unified visibility framework.…

Transcript availableAugust 24, 2025
→
S01E124Transcript

Domain 4 · Operations and Support

Log Scrubbing and Tagging Strategies for Clean Metrics

This episode covers techniques for improving the quality and relevance of log data. Log scrubbing removes sensitive or irrelevant information before storage or analysis, supporting compliance and reducing storage costs.…

Transcript availableAugust 24, 2025
→
S01E125Transcript

Domain 4 · Operations and Support

Alerting Mechanisms — Email, SMS, Dashboards

In this episode, we explain how alerting systems notify administrators of events that require attention.…

Transcript availableAugust 24, 2025
→
S01E126Transcript

Domain 4 · Operations and Support

Maintenance Mode and Alert Suppression Policies

In this episode, we discuss how maintenance mode and alert suppression policies help prevent unnecessary or false-positive alerts during planned system updates.…

Transcript availableAugust 24, 2025
→
S01E127Transcript

Domain 4 · Operations and Support

Alert Categorization and Response Policies

This episode explains how categorizing alerts by severity, impact, and urgency supports a more efficient incident response process. Categories might range from informational events that require logging only, to critical alerts that demand immediate escalation and resolution.…

Transcript availableAugust 24, 2025
→
S01E128Transcript

Domain 4 · Operations and Support

Backup Verification and Cloud Data Protection

In this episode, we explore the importance of verifying backups to ensure they are complete, uncorrupted, and restorable. Backup verification includes automated checksum validation, test restores, and scheduled audits to confirm that recovery objectives can be met.…

Transcript availableAugust 24, 2025
→
S01E129Transcript

Domain 4 · Operations and Support

Life-Cycle Management — Versions, Roadmaps, and Deprecations

This episode covers life-cycle management as it applies to cloud services and applications. Version control tracks changes to configurations and code, ensuring rollback capability and documentation.…

Transcript availableAugust 24, 2025
→
S01E130Transcript

Domain 4 · Operations and Support

Change Management Practices in Cloud Environments

In this episode, we explain structured change management processes for cloud deployments. This includes evaluating risks, obtaining approvals, scheduling changes during low-impact windows, and documenting the entire process.…

Transcript availableAugust 24, 2025
→
S01E131Transcript

Domain 4 · Operations and Support

Asset Management and CMDB Tracking

In this episode, we examine how asset management and Configuration Management Databases (CMDB) work together to provide visibility and control over cloud resources. Asset management tracks hardware, software, licenses, and virtual resources, ensuring accountability and compliance.…

Transcript availableAugust 24, 2025
→
S01E132Transcript

Domain 4 · Operations and Support

Cloud Patching — What, When, and How

This episode focuses on patching strategies to keep cloud environments secure and stable. We explain the types of patches—security updates, bug fixes, and feature enhancements—and how to prioritize them based on severity and exposure.…

Transcript availableAugust 24, 2025
→
S01E133Transcript

Domain 4 · Operations and Support

Rollbacks and Patch Policy Enforcement (e.g., n-1)

In this episode, we cover rollback procedures for reversing patches or updates that cause instability or security issues. Effective rollback planning includes keeping backups, maintaining version histories, and ensuring minimal downtime during reversions.…

Transcript availableAugust 24, 2025
→
S01E134Transcript

Domain 4 · Operations and Support

Upgrade Methods — Blue-Green, Canary, and Active-Passive

This episode explores upgrade deployment strategies that reduce risk and downtime. Blue-green deployments run two identical environments, switching traffic to the updated one once validated.…

Transcript availableAugust 24, 2025
→
S01E136Transcript

Domain 5 · Troubleshooting

Domain 5.0 Troubleshooting — Overview

In this episode, we introduce Domain 5 of the Cloud+ exam, which focuses on identifying, diagnosing, and resolving issues in cloud environments.…

Transcript availableAugust 24, 2025
→
S01E137Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 1 — Identifying the Problem and Gathering Info

This episode focuses on the first and most critical step in troubleshooting: identifying the problem. We discuss methods for collecting detailed information, including user reports, log analysis, monitoring data, and environmental checks.…

Transcript availableAugust 24, 2025
→
S01E138Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 2 — Establishing a Theory and Researching Symptoms

In this episode, we explain how to formulate a theory of probable cause based on collected evidence. This involves reviewing system documentation, researching known issues, and comparing current symptoms to baseline performance data.…

Transcript availableAugust 24, 2025
→
S01E139Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 3 — Testing the Theory and Re-Evaluating if Needed

This episode covers the process of testing your theory to confirm the root cause of a problem. We explain how to perform controlled changes or simulations to verify whether the suspected cause produces or resolves the observed symptoms.…

Transcript availableAugust 24, 2025
→
S01E140Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 4 — Creating and Implementing the Action Plan

In this episode, we outline how to develop and execute an action plan that resolves the confirmed issue. Planning includes defining the specific changes, scheduling them to minimize impact, and ensuring all required resources and approvals are in place.…

Transcript availableAugust 24, 2025
→
S01E141Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 5 — Verifying Functionality and Preventing Recurrence

In this episode, we cover the critical step of verifying that the implemented fix has fully resolved the issue. Verification involves functional testing, monitoring affected systems, and confirming with end users that normal operations have been restored.…

Transcript availableAugust 24, 2025
→
S01E142Transcript

Domain 5 · Troubleshooting

Troubleshooting Step 6 — Documenting Findings and Outcomes

This episode emphasizes the importance of documenting every phase of the troubleshooting process. Detailed records should include the problem description, investigation steps, theories tested, actions taken, and final resolution.…

Transcript availableAugust 24, 2025
→
S01E143Transcript

Domain 5 · Troubleshooting

Troubleshooting Security — Missing or Incomplete Privileges

In this episode, we explore troubleshooting issues caused by missing or incomplete privileges in a cloud environment. These problems can prevent users or services from accessing necessary resources, executing commands, or integrating with other systems.…

Transcript availableAugust 24, 2025
→
S01E144Transcript

Domain 5 · Troubleshooting

Troubleshooting Security — Authentication and Authorization Failures

This episode focuses on diagnosing and resolving issues with authentication and authorization systems. Authentication failures can stem from incorrect credentials, expired certificates, or mismatched authentication methods.…

Transcript availableAugust 24, 2025
→
S01E145Transcript

Domain 5 · Troubleshooting

Troubleshooting Security Groups — Directory and Network

In this episode, we explain how security group misconfigurations can cause connectivity or access problems. Directory security groups manage access to identity resources, while network security groups control traffic to and from specific subnets or instances.…

Transcript availableAugust 24, 2025
→
S01E146Transcript

Domain 5 · Troubleshooting

Troubleshooting Certificates — Expired, Revoked, or Misconfigured

In this episode, we examine common certificate-related issues and how they impact cloud services. Expired certificates can cause service outages, prevent secure connections, and disrupt authentication flows.…

Transcript availableAugust 24, 2025
→
S01E147Transcript

Domain 5 · Troubleshooting

Troubleshooting Policies — Misconfigurations and Misapplications

This episode addresses problems that arise when security or operational policies are misconfigured or incorrectly applied. Examples include overly restrictive firewall rules, improper access control settings, or conflicting automation policies.…

Transcript availableAugust 24, 2025
→
S01E148Transcript

Domain 5 · Troubleshooting

Troubleshooting Data Security — Encryption, Classification, and Exposure

In this episode, we explore how encryption failures, incorrect data classification, and accidental exposure can create serious security incidents. Encryption problems may involve weak ciphers, improper key management, or unencrypted channels.…

Transcript availableAugust 24, 2025
→
S01E149Transcript

Domain 5 · Troubleshooting

Troubleshooting Exposed Endpoints and Insecure Interfaces

This episode focuses on identifying and resolving issues where endpoints or interfaces are unintentionally exposed to the public internet. Common causes include overly permissive firewall rules, default configurations, or lack of authentication.…

Transcript availableAugust 24, 2025
→
S01E150Transcript

Domain 5 · Troubleshooting

Troubleshooting Security Appliances — WAF, IPS, IDS, NAC

In this episode, we examine problems related to security appliances such as Web Application Firewalls (WAFs), Intrusion Prevention Systems (IPS), Intrusion Detection Systems (IDS), and Network Access Control (NAC) solutions.…

Transcript availableAugust 24, 2025
→
S01E151Transcript

Domain 5 · Troubleshooting

Troubleshooting Unsupported Protocols and Cipher Use

In this episode, we address issues that arise when legacy or insecure protocols and ciphers are still in use within a cloud environment.…

Transcript availableAugust 24, 2025
→
S01E152Transcript

Domain 5 · Troubleshooting

Investigating Internal and External Attack Symptoms

This episode examines how to identify signs of both internal and external threats within cloud environments. Internal attack indicators may include unusual access patterns, privilege escalation, or unauthorized data transfers.…

Transcript availableAugust 24, 2025
→
S01E153Transcript

Domain 5 · Troubleshooting

Troubleshooting Deployment — Connectivity Failures and Outages

In this episode, we explore the causes of connectivity failures and outages during cloud deployments. Problems can occur due to misconfigured routing tables, incorrect IP assignments, firewall restrictions, or DNS resolution errors.…

Transcript availableAugust 24, 2025
→
S01E154Transcript

Domain 5 · Troubleshooting

Deployment Performance Issues — Latency and Resource Lag

This episode focuses on performance degradation that can occur after deployment. Latency may result from suboptimal network routing, overloaded servers, or insufficient bandwidth. Resource lag can be caused by under-provisioned compute, storage bottlenecks, or poor load balancing.

Transcript availableAugust 24, 2025
→
S01E156Transcript

Domain 5 · Troubleshooting

Troubleshooting Scaling and Capacity — Compute, Storage, Bandwidth

In this episode, we focus on diagnosing issues where scaling configurations fail to meet demand or capacity is exceeded. Compute-related problems may arise when auto-scaling rules are misconfigured, instance limits are reached, or workloads are not properly balanced.…

Transcript availableAugust 24, 2025
→
S01E157Transcript

Domain 5 · Troubleshooting

Troubleshooting Licensing and Subscription Conflicts

This episode examines issues that arise when licensing or subscription entitlements are not aligned with deployed resources. These conflicts can result in service interruptions, feature limitations, or compliance violations.…

Transcript availableAugust 24, 2025
→
S01E158Transcript

Domain 5 · Troubleshooting

Vendor and Platform Issues — API Limits, Migration Errors, Cost

In this episode, we explore problems that stem from vendor-imposed limitations or platform-specific behaviors. API rate limits can cause integration failures, while migration errors may result from incompatible configurations or unsupported features.…

Transcript availableAugust 24, 2025
→
S01E162Transcript

Domain 5 · Troubleshooting

DNS, VLAN/VXLAN, Proxies, MTU, QoS, and Time Sync Errors

This episode looks at multi-layered networking issues that can disrupt cloud services. DNS errors may involve incorrect records, propagation delays, or misapplied DNSSEC settings.…

Transcript availableAugust 24, 2025
→
S01E163Transcript

Domain 5 · Troubleshooting

Network Tools — Using Ping, Tracert, IP, NSLookup, Netstat, and More

In this episode, we explain how to use essential network troubleshooting tools effectively. Ping verifies connectivity and measures latency, while Tracert or Traceroute maps the path packets take through the network.…

Transcript availableAugust 24, 2025
→
S01E164Transcript

Domain 5 · Troubleshooting

Troubleshooting Automation and Orchestration — Mismatches and Failures

This episode addresses problems in automation and orchestration workflows. Mismatches can occur when scripts or templates are out of sync with infrastructure changes, causing failed deployments or inconsistent configurations.…

Transcript availableAugust 24, 2025
→

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.

Related Magazine Features

Connect the course to current cybersecurity analysis.

Cover art for The Great Unmanaged: Contractors, Partners, and Temporary Access Gone Permanent
Issue 40 · October 7, 2026The Great Unmanaged: Contractors, Partners, and Temporary Access Gone PermanentRead the feature →
Cover art for Autonomous Agents, Unattended Risk: When Bots Start Opening Tickets for You
Issue 30 · July 29, 2026Autonomous Agents, Unattended Risk: When Bots Start Opening Tickets for YouRead the feature →
Cover art for Secrets Everywhere: Managing the Credential Sprawl in Dev, Ops, and AI
Issue 22 · June 3, 2026Secrets Everywhere: Managing the Credential Sprawl in Dev, Ops, and AIRead the feature →

Related Cyber Wiki

Continue with the concepts behind the course.

Agentic AI

AI Agents and Tool Use

An AI agent selects actions and invokes tools, services, or workflows to pursue a goal across multiple steps.

AI change assurance

AI Change Evidence Package

An AI change evidence package assembles the artifacts needed to understand, approve, reproduce, and later audit a model, data, prompt, configuration, or integration change.

AI engineering assurance

AI Configuration Reproducibility

AI configuration reproducibility means an authorized team can recreate the relevant model build or runtime behavior from recorded code, data references, parameters, dependencies, prompts, and infrastructure settings.

Agentic AI security

AI Connector and Plugin Security

AI connector and plugin security governs integrations that let models read data or act through external applications and services.

AI safety engineering

AI Guardrail Engineering

AI guardrail engineering implements enforceable limits around model inputs, outputs, tools, data, and operating conditions.

Generative AI application security

AI Output Validation

AI output validation treats generated text, code, commands, queries, and structured data as untrusted until the consuming system verifies it.