IBM Cloud Security Engineer study guide
IBM Cloud Security Engineer · Work through your exam, one topic at a time.
The IBM Cloud Security Engineer credential is listed by IBM as exam C1000-117, and candidates often search for it under that code or as the IBM Certified Cloud Security Engineer. This page is an independent study resource: it is not affiliated with, endorsed by, or operated by IBM, and it does not host or reproduce official exam content. The IBM Cloud Security Engineer study guide has 6 sections and about 1,877 words.
01Cloud Security Fundamentals and Governance
IBM secures facilities, hypervisors, the network fabric, and the managed-service platform itself. You own identity configuration, network rules, key custody, data classification, and workload hardening.
328 words, about 2 min02Identity and Access Management in IBM Cloud
IAM policies bind a subject (user, service ID, access group, trusted profile) to a target (account, resource group, resource type, or specific resource) with a role. Platform roles are Viewer, Operator, Editor, Administrator; service roles include Reader, Writer, Manager, and service-specific ones.
322 words, about 2 min03Data Protection, Encryption, and Key Management
Data is encrypted with data encryption keys; data encryption keys are wrapped by a root key held in Key Protect or Hyper Protect Crypto Services (HPCS). Key Protect is FIPS 140-2 Level 3 and multi-tenant.
316 words, about 2 min04Network Security and Infrastructure Protection
A VPC contains subnets bound to a zone. Security groups are stateful and allow-only, attached to interfaces; network ACLs are stateless, attached to subnets, and support deny rules, so return traffic must be explicitly permitted.
294 words, about 1 min05Security Monitoring, Logging, and Incident Response
Activity Tracker Event Routing captures account-level audit events for IAM-enabled services: who did what, to which target, with which outcome, from which address. It is regional and routes to targets such as IBM Cloud Logs, Object Storage, or Event Streams.
306 words, about 2 min06Compliance, Risk Management, and Security Architecture
Security and Compliance Center evaluates resources against profiles and controls, producing findings you can attach to an audit. The IBM Cloud Framework for Financial Services is a control framework IBM publishes for regulated workloads; the shared responsibility model means IBM's certifications cover the platform, while your configurations need their own evidence.
311 words, about 2 min