CCP-C study plan

Diagram the shared responsibility model, marking which controls shift to the customer for IaaS, PaaS, and SaaS

Compare vertical and horizontal scaling and match three workload patterns to the correct approach

Explain high availability, fault tolerance, and disaster recovery using RTO and RPO values you define yourself

List the essential characteristics of cloud computing and give one concrete provider example of each

Map each cloud service model to the customer-versus-provider control boundary for compute, network, storage, and identity

Distinguish identity federation, single sign-on, and multi-factor authentication, then sketch a login flow that uses all three

Classify ten common security controls as preventive, detective, or corrective

Define the confidentiality, integrity, and availability triad with one cloud-specific failure example per leg

Apply a four-step risk process (identify, assess, treat, monitor) to a workload that stores regulated data

Differentiate SOC 2, ISO 27001, PCI DSS, HIPAA, and GDPR by scope and by who they actually bind

Explain encryption at rest, in transit, and in use, and place key management correctly in each

Describe the incident response lifecycle and state where provider responsibility ends and yours begins

List the five most common cloud misconfigurations and the control that prevents each

Contrast the six migration strategies and select one for three given workloads with a stated justification

Sequence a provisioning workflow from template to running resource, naming the approval and validation gates

Distinguish blue/green, canary, and rolling deployments and state when each is unsafe

Define patching, backup, and monitoring cadences for a production workload in a single table

Compare VPN, dedicated interconnect, and peering by latency, cost, and appropriate use case

Design a virtual network layout with public and private subnets and state which resources belong where

Differentiate block, file, and object storage and select the right type for four given workloads

Explain replication versus backup versus archival, stating the recovery-point implication of each

Define a data lifecycle policy (hot, warm, cold, delete) with retention periods for three data categories

Explain infrastructure-as-code idempotency and state management, and describe what breaks when state drifts

Compare CI/CD pipeline stages and identify which stage catches which class of defect

Write a rollback strategy for a failed infrastructure-as-code deployment

Apply a tagging scheme to allocate spend across three teams and identify untagged spend

Distinguish committed-use, spot, and on-demand pricing by workload suitability

Identify three cost-optimization levers and the risk each introduces, such as spot interruption

Explain the governance mechanisms of budget alerts, quotas, policy as code, and approval workflows

Retake full-length timed practice exams and log every objective you miss

Re-derive the 30 most-missed facts from memory on blank paper

Recite a two-minute explanation of each of the seven domains without notes

Re-test every item on your gap list and retire the ones you now get right