Exoscale Certified Cloud Professional study materials
Exoscale Certified Cloud Professional study resources

Exoscale Certified Cloud Professional study plan

Exoscale Certified Cloud Professional · Give each week a clear focus.

8 weeks · About 6 hours per week

Week 1

Compute

  • Map the Compute domain objectives into a personal checklist and mark each item as known, partial, or unknown before studying anything else.

  • Create an Exoscale account, generate API keys, and install the CLI so you can launch and inspect instances from the command line.

  • Launch instances across at least two instance families and record how vCPU, memory, and CPU model differ in practice.

  • Practice start, stop, reboot, and destroy lifecycle actions and note which actions preserve the disk versus which bill differently.

  • Write down the difference between a compute instance and the platform's managed Kubernetes offering in terms of who owns the control plane.

Your checkpoint

A one-page cheat sheet listing instance families, lifecycle states, and the exact CLI commands you used, with timings observed for each action.

Week 2

Compute & Storage

  • Attach a block storage volume to a running instance, format and mount it, then detach and reattach it to a second instance to confirm data persistence.

  • Resize an instance and predict in advance whether the resize requires a stop, then verify your prediction against the actual behavior.

  • Create an anti-affinity group and prove that two instances in the same group are placed on different physical hosts.

  • Compare object storage buckets with block volumes on durability, access pattern, and typical use case, and state when each is the wrong choice.

  • Configure a bucket policy or ACL that makes one object publicly readable while keeping the rest private, then test both paths.

Your checkpoint

A working demo with one instance, one attached volume surviving a detach/reattach cycle, and one bucket with mixed public and private objects, documented with screenshots or command output.

Week 3

Storage & DBaaS

  • Enable versioning or lifecycle rules on an object storage bucket and verify that an expired object is actually removed on schedule.

  • Explain the platform's snapshot behavior for block volumes and demonstrate restoring a volume from a snapshot into a new volume.

  • Provision a managed database service and connect to it from an instance over the private network only, with public access disabled.

  • Configure an automated database backup and perform a point-in-time or snapshot restore into a separate service instance.

  • Document which storage and database services are zone-scoped versus regional, and what that means for a failure scenario.

Your checkpoint

A restore drill report: snapshot restore time for a volume and database restore time, each with the commands used and the observed recovery point.

Week 4

DBaaS & Networking

  • Compare the managed database engines offered and list one workload where each engine is the correct pick and one where it is not.

  • Set up a private network, place two instances and a database in it, and confirm that the database is unreachable from the internet.

  • Create a network load balancer in front of two instances and verify health-check failover by stopping one backend.

  • Configure security groups so that only the load balancer can reach the application port, then prove the direct path is blocked.

  • Draft the questions you still cannot answer about database scaling, replicas, and maintenance windows, and resolve at least half of them from documentation.

Your checkpoint

A network diagram of your private network with load balancer, instances, and database, annotated with the security group rules that enforce each traffic path.

Week 5

Networking

  • Set up a zone-aware architecture with resources in two zones and describe exactly which failure each zone protects against.

  • Configure an elastic IP and move it between two instances to simulate a failover with minimal DNS change.

  • Build a DNS record set for a domain you control, including an A record, a CNAME, and a short TTL used for failover testing.

  • Use the platform's private connectivity option to reach an external service or your on-premises network and document the routing involved.

  • Measure and record latency between two instances in the same private network and between zones to build intuition for placement decisions.

Your checkpoint

A failover runbook: step-by-step actions to move traffic from a failed instance to a standby using elastic IP and DNS, with measured time to recovery.

Week 6

Security

  • Create a non-root IAM user or API key with least-privilege permissions and prove that an over-broad key is rejected for a forbidden action.

  • Enable key rotation practice by issuing a new API key, updating automation to use it, and revoking the old key without downtime.

  • Harden an instance: disable password SSH, enforce key-based login, and restrict the SSH port to your own address via security groups.

  • Encrypt data at rest and in transit for a database connection and verify the TLS handshake from a client.

  • Review audit or activity logs for your account and identify at least three events that would matter in an incident investigation.

Your checkpoint

A security hardening checklist applied to one live instance and one database, with before-and-after evidence for each control.

Week 7

Concrete AI & Trust, Compliance and Data Residency

  • Describe what the platform's AI offering provides, how you authenticate to it, and which deployment or data-handling model applies to prompts you send.

  • Run a minimal working example against the AI service and record latency, token limits, and error responses you encounter.

  • Map every service you have used to the zone or region where its data resides and flag any service that stores data outside your intended jurisdiction.

  • Summarize the platform's compliance posture and certifications relevant to a regulated customer, citing the categories of attestation rather than inventing specifics.

  • Write the data residency questions you would ask a vendor and answer them for your own demo architecture.

Your checkpoint

A data residency and compliance matrix: one row per service used in your demo, columns for data location, encryption, and relevant attestation category.

Week 8

Compute & DBaaS & Networking & Security & Trust, Compliance and Data Residency

  • Rebuild your full demo architecture from scratch in under two hours using only your own notes, to expose gaps in documentation.

  • Take two timed practice sets weighted by domain percentage and log every missed question by domain and root cause.

  • Re-study only the domains where your practice accuracy fell below your target, using your earlier checklists.

  • Write a one-page summary of the five facts you most often got wrong and the correct version of each.

  • Do a final pass over the trust, compliance, and residency material since it is easy to under-prepare relative to its weight.

Your checkpoint

A scored practice report with per-domain accuracy, a ranked list of weak areas, and a remediation note for each.

Milestones

Week 2: You can launch, resize, and destroy an instance and attach persistent block storage from the CLI without looking up commands.

Week 4: A private network with load-balanced instances and a managed database is reachable only through intended paths, and you can explain each security group rule.

Week 6: Your account uses least-privilege keys, an instance is hardened, and you can name the log events that would matter in an incident.

Week 8: You rebuilt the full architecture from your own notes and scored at or above your target on weighted practice sets in every domain.