EXIN Cloud Computing Foundation study plan
EXIN Cloud Computing Foundation · Give each week a clear focus.
8 weeks · About 6 hours per week
Cloud Computing Foundations & Cloud Architecture and Service Models
Define cloud computing using the NIST definition and list its five essential characteristics, three service models, and four deployment models.
Explain the differences between IaaS, PaaS, and SaaS, and give two real-world examples of each that you have personally used.
Describe the shared responsibility model and identify which responsibilities belong to the provider and which to the customer for each service model.
Compare public, private, hybrid, and community clouds in terms of cost, control, scalability, and typical use cases.
Your checkpoint
Create a one-page comparison table (or mind map) that summarizes the NIST characteristics, service models, and deployment models with your own examples.
Cloud Computing Foundations & Cloud Architecture and Service Models
Explain the concepts of virtualization, hypervisors (Type 1 and Type 2), and containers, and how they enable cloud computing.
Describe the key components of cloud architecture: front-end, back-end, network, and virtualization layers.
Identify the main benefits and drawbacks of cloud computing (e.g., cost, elasticity, vendor lock-in, latency).
Map the EXIN Cloud Computing Foundation exam objectives for Domains 1 and 2 to your study notes and flag any gaps.
Your checkpoint
Write a 300-word summary explaining how virtualization and service models relate, and list three exam-style questions you created for Domains 1 and 2.
Cloud Adoption and Implementation & Cloud Computing Foundations
Outline a cloud adoption framework (e.g., strategy, design, migration, operations) and explain each phase.
List the key factors to consider when selecting a cloud provider (SLA, pricing, compliance, support, lock-in).
Describe common migration strategies (rehost, replatform, refactor, retire, retain) and match them to business scenarios.
Review Domain 1 concepts by creating flashcards for the NIST definition and deployment models.
Your checkpoint
Draft a one-page cloud adoption roadmap for a fictional small business, including provider selection criteria and a migration strategy for two applications.
Cloud Security, Risk and Compliance & Cloud Adoption and Implementation
Explain the CIA triad (confidentiality, integrity, availability) and apply it to cloud environments.
Identify common cloud security threats (data breaches, misconfiguration, insecure APIs, account hijacking) and basic mitigations.
Describe identity and access management (IAM) concepts: authentication, authorization, roles, and least privilege.
Explain data protection mechanisms: encryption at rest and in transit, key management, and data residency.
Summarize major compliance standards (GDPR, ISO/IEC 27001, SOC 2) and their implications for cloud adoption.
Your checkpoint
Produce a risk register with at least five cloud-specific risks, their likelihood/impact, and proposed controls, plus a short note on how each control supports compliance.
Cloud Security, Risk and Compliance & Cloud Operations and Management
Describe the incident response lifecycle in the cloud and the customer's role under the shared responsibility model.
Explain the purpose and components of a service level agreement (SLA) and service level objectives (SLOs).
Define cloud monitoring and logging concepts, including metrics, alerts, and audit trails.
Compare cloud pricing models (on-demand, reserved, spot) and their impact on cost management.
Review Domain 4 by answering practice questions on security and compliance and analyzing mistakes.
Your checkpoint
Create a security and compliance checklist for a cloud deployment, covering IAM, encryption, logging, and incident response steps.
Cloud Operations and Management & Cloud Architecture and Service Models
Explain cloud service management processes: change management, configuration management, and release management.
Describe availability and business continuity concepts: redundancy, backup, disaster recovery, RTO, and RPO.
Outline performance monitoring and capacity planning in the cloud.
Compare cloud service models (IaaS, PaaS, SaaS) from an operational management perspective (patching, scaling, monitoring).
Review Domain 2 by mapping each service model to operational responsibilities.
Your checkpoint
Write a one-page operations runbook for a sample cloud application, including monitoring, backup, and incident escalation procedures.
Cloud Computing Foundations & Cloud Architecture and Service Models & Cloud Adoption and Implementation & Cloud Security, Risk and Compliance & Cloud Operations and Management
Take a full-length practice exam (or a set of questions covering all domains) under timed conditions.
Identify your three weakest sub-topics based on practice exam results and create a focused review plan.
Revisit key definitions and models (NIST, service models, shared responsibility, CIA triad) using spaced repetition.
Explain out loud (or in writing) how the five domains interconnect in a real-world cloud scenario.
Your checkpoint
Complete a practice exam and produce a score report with a prioritized list of topics to review in Week 8.
Cloud Computing Foundations & Cloud Architecture and Service Models & Cloud Adoption and Implementation & Cloud Security, Risk and Compliance & Cloud Operations and Management
Review all flagged weak areas using summaries, flashcards, and targeted practice questions.
Re-take any practice questions you previously missed and confirm understanding.
Create a one-page cheat sheet of key formulas, definitions, and acronyms for last-minute review.
Simulate exam conditions with a final timed practice set and review your answers.
Your checkpoint
Finalize a personal cheat sheet and achieve a consistent score of at least 80% on practice questions across all domains.
Milestones
Week 2: Can you explain the NIST definition, the three service models, and the four deployment models without notes, and give one example of each?
Week 4: Can you describe the shared responsibility model for IaaS, PaaS, and SaaS, and list three cloud security risks with mitigations?
Week 6: Can you outline the incident response lifecycle and explain the purpose of an SLA, RTO, and RPO?
Week 8: Have you scored at least 80% on a full-length timed practice exam covering all five domains?