D01 Defines how secure connectivity is designed and operated across on-premises and cloud environments. Focuses on boundaries, segmentation, access control, secure transport, and visibility that limit attack spread and support reliable operations. Emphasizes enforceable outcomes that can be tested, measured, and defended.

​

Build secure, resilient cloud environments by defining trust boundaries, access intent, and encryption defaults, then validating them with automated checks and evidence. Interpret architecture diagrams, map requirements to technical outputs, and prove controls work through monitoring, response, change, and recovery drills across networks and multiple clouds.

Covers how to secure the environments where software runs, from hosts and virtual machines to containers and serverless services. Focuses on access boundaries, trusted images and updates, runtime monitoring, and evidence that controls are working across on-premises and cloud platforms.

​

Defines how to design and build software that protects business logic and data in real systems. Covers trust boundaries, authorization decisions, safe input and serialization handling, session and token behavior, and defender useful logging. Emphasizes measurable tests and evidence that demonstrate controls work before release, and explains how to interpret system diagrams as well.

Describe how to engineer data protection across on-premises and cloud systems. Cover classification and tagging, purpose-bound access, encryption by policy, loss prevention, investigation-ready logging, and recoverability. Connect requirements and controls to measurable acceptance criteria, and learn how to read system diagrams to spot exposure.

Design identity and access foundations that withstand attacks and audits across cloud and on-premises systems. Define trust boundaries, strengthen authentication, control privileged access, govern service identities, and produce defensible evidence through logging, testing, and validation.

​

Explores how threats and weaknesses emerge across on-premises and cloud systems, and how to reduce exposure through continuous discovery, risk-based prioritization, rapid remediation, and ongoing validation. Emphasizes measurable requirements, clear acceptance criteria, and evidence that fixes work so teams can keep pace with real adversaries.

​Learn how monitoring and response are engineered, collect and normalize security signals, detect suspicious behavior with explicit rules and analytics, and run repeatable response playbooks that protect evidence. You will measure detection and response speed, reduce noise, and keep visibility working across data centers, cloud services, and critical systems.

This course explains how secure data protection depends on sound cryptographic design and disciplined key management. Learners explore how encryption safeguards information in storage and transit, how keys are generated, rotated, and retired, and how trust is maintained across systems through certificates and validation practices.

A practical guide to secure software delivery that shows how ten security domains divide responsibilities across enterprise and cloud systems. Covers everyday how to translate design intent into build, test, release, and deploy controls with clear requirements and measurable acceptance targets, and how to read a system diagram through a secure delivery lens.