GIAC · Free, ad-free audio course
A structured, audio-first learning route for GIAC GCLD, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
87 lessons available
Getting Started and Threat-Informed Defense
Listen to Decode the GCLD exam format, rules, scoring, and timing calmly in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Build a spoken study plan that sticks for busy cloud defenders in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Understand shared responsibility clearly across IaaS, PaaS, and SaaS realities in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Apply threat-informed defense by matching controls to real cloud adversaries in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Identify high-probability cloud attacker goals, incentives, and target choices in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Track common initial access paths attackers use in public cloud environments in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Recognize privilege escalation patterns unique to cloud identity and policy systems in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Contain cloud intrusions fast using isolation, credential resets, and scoped actions in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Preserve cloud evidence correctly so investigations remain reliable and defensible in the GIAC GCLD audio course.
Getting Started and Threat-Informed Defense
Listen to Recover safely after cloud compromise with controlled rebuilds and trust restoration in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Master cloud account fundamentals: tenants, subscriptions, projects, and billing boundaries in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Design multi-account strategy that reduces blast radius and simplifies governance in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Structure organizational units and account groupings for predictable security inheritance in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Set up guardrails early with policies that prevent dangerous service configurations in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Establish account-level security baselines that survive rapid growth and change in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Build IAM foundations that prevent identity sprawl across teams and workloads in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Translate job duties into roles that stay minimal, precise, and auditable in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Design least privilege policies that avoid wildcards and unnecessary broad actions in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Prevent privilege creep with periodic access reviews and automated entitlement cleanup in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Control root and break-glass access with tight processes and strong monitoring in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Secure service accounts with strict scope, limited lifetime, and clear ownership in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Reduce session risk with short lifetimes, reauthentication, and device-aware access in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Harden authentication using MFA, phishing resistance, and conditional access logic in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Validate federation patterns so enterprise identity extends safely into cloud services in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Secure third-party access by scoping permissions, monitoring behavior, and revoking fast in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Control external access by limiting public endpoints and enforcing private connectivity in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Prevent accidental exposure by verifying default-deny behaviors and explicit allow lists in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Implement safe remote administration paths that reduce internet-facing management risk in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Apply IAM best practices to external entry points so access stays intentional in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Secrets Management: eliminate hardcoded keys and reduce credential lifetime aggressively in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Store secrets safely using managed services, encryption, access controls, and logging in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Rotate secrets reliably with automation that prevents outages and forgotten credentials in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Scope secrets to least privilege so one leak cannot unlock broad cloud access in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Deliver secrets to workloads safely without embedding them in images or source code in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Cloud Automation: use Infrastructure as Code to make security repeatable and testable in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Prevent configuration drift with policy-as-code and continuous posture enforcement in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Secure CI/CD pipelines so build systems cannot become attacker bridges in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Validate automated deployments with approvals, change tracking, and safe rollback patterns in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Automate guardrails that block risky storage, network, and IAM configurations instantly in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Frameworks for built-in security: map provider native capabilities into reliable patterns in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Design security-by-default architectures using managed services and least-management surfaces in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Operationalize secure landing zones that standardize identity, logging, and network controls in the GIAC GCLD audio course.
Cloud Accounts, Identity, Secrets and Automation
Listen to Extend built-in controls consistently across single-cloud and multi-cloud environments in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Cloud Logging Fundamentals: choose log sources that answer real investigation questions in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Capture identity logs that reveal misuse, privilege changes, and suspicious sign-ins in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Capture control-plane logs that show configuration changes and risky administrative actions in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Capture data access logs that reveal sensitive reads, writes, deletes, and sharing in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Protect log integrity using centralized storage, immutability controls, and tight permissions in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Set retention intentionally so logs remain useful across incident and audit timelines in the GIAC GCLD audio course.
Cloud Logging and Evidence
Listen to Normalize logs for correlation so patterns emerge across accounts and regions in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Cloud networking technology: understand VPC or VNET primitives and routing behaviors in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Segment networks intentionally to reduce blast radius and limit lateral movement in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Control ingress with security groups, firewalls, and service-specific access policies in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Control egress to reduce exfiltration paths and limit command-and-control reachability in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Design private connectivity patterns that replace public exposure with controlled paths in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Encrypt network traffic properly across regions, services, and hybrid connections in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Secure DNS and name resolution so attackers cannot redirect trust or hide access in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Validate network design continuously by testing intended paths versus actual reachability in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Securing cloud networks: prevent misroutes, shadow paths, and accidental trust relationships in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Reduce exposure from load balancers, gateways, and proxies with strong defaults in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Protect administrative network services so management planes stay isolated and controlled in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Network security monitoring in the cloud: choose signals that reveal attacker movement in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Detect identity abuse by correlating logins, token use, and privilege changes in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Detect lateral movement by monitoring network flows, service calls, and unusual access paths in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Detect data exfiltration attempts using volume baselines, destination analysis, and timing in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Tune detections to reduce noise while keeping high-confidence cloud security alerts in the GIAC GCLD audio course.
Cloud Networking, Monitoring and Detection
Listen to Investigate alerts with cloud context to decide benign behavior versus true compromise in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Secure compute deployment: harden images, reduce services, and enforce patch cadence in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Use immutable infrastructure patterns to shrink the window for persistent compromise in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Validate compute security with baselines, policy enforcement, and continuous posture checks in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Apply runtime protections that limit execution, persistence, and privilege inside workloads in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Secure serverless and managed compute by controlling permissions, triggers, and inputs in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Containers and cloud storage: secure container builds from source to registry to runtime in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Enforce image hygiene by scanning, signing, and blocking risky dependencies in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Isolate containers using least privilege runtime settings and strong boundary controls in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Protect cloud storage with encryption, access policies, and safe sharing defaults in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Prevent public bucket mistakes by validating policies, ACLs, and inherited permissions in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Control object lifecycle and versioning to support recovery, accountability, and integrity in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Discovering sensitive data: classify what matters and reduce unknown data sprawl in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Find sensitive data in storage, databases, logs, and object metadata consistently in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Store sensitive data safely with encryption, key management, and strict access controls in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Use sensitive data responsibly by controlling purpose, retention, and minimum exposure in the GIAC GCLD audio course.
Compute, Containers, Storage and Data Protection
Listen to Prevent data leakage with monitoring, blocking controls, and tested response playbooks in the GIAC GCLD audio course.
Risk, Compliance and Cloud Assessment
Listen to Risk management and compliance: translate cloud risk into defensible business decisions in the GIAC GCLD audio course.
Risk, Compliance and Cloud Assessment
Listen to Map controls to requirements so audits become evidence-driven rather than narrative-driven in the GIAC GCLD audio course.
Risk, Compliance and Cloud Assessment
Listen to Prepare for cloud audits by aligning logs, configurations, and access reviews to evidence in the GIAC GCLD audio course.
Risk, Compliance and Cloud Assessment
Listen to Perform practical cloud security assessments that surface misconfigurations before attackers do in the GIAC GCLD audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Cyber Wiki
AI deactivation and contingency controls let an organization pause, limit, localize, roll back, or replace an AI capability when risk exceeds tolerance.
AI safety engineeringAI guardrail engineering implements enforceable limits around model inputs, outputs, tools, data, and operating conditions.
Generative AI application securityAI output validation treats generated text, code, commands, queries, and structured data as untrusted until the consuming system verifies it.
AI architectureAI shared-responsibility mapping assigns control duties across model providers, cloud platforms, application teams, data owners, users, and oversight functions.
AuthorizationHost access control lists extend basic owner-group-other permissions with named user and group entries, default inheritance, and more precise authorization for shared files and directories.
Assurance practiceAccess reviews verify that users, services, groups, roles, and privileged accounts still need the permissions they hold.
