ISC2 CC: Networking and Cloud Security Concepts
The provider lists this domain at 21.3% of the exam.
In plain English
How networks and cloud services are protected: splitting a network into zones, layering defences, trusting nothing by default, and knowing which security jobs belong to you or to the cloud provider.
What the provider lists under it
- Network security concepts and firewalls
- Wireless, embedded, IoT and ICS systems
- Segmentation, defence in depth, zero trust
- Cloud characteristics, service and deployment models, shared responsibility
Terms worth knowing
- OSI model: A seven-layer way of describing how data travels across a network.
- Subnet: A smaller network carved out of a larger IP range.
- Zero trust: A security approach that never assumes a request is safe just because it comes from inside the network.
- IaaS, PaaS and SaaS: Three ways to rent cloud computing, from raw servers (IaaS) to a platform for your code (PaaS) to a finished app (SaaS).
- Shared responsibility model: The cloud provider secures the cloud itself, and you secure what you put in it.
- IDS and IPS: An IDS detects suspicious traffic and raises an alert. An IPS sits in the path and can block it.
Quick answers
How much of the ISC2 CC exam is Networking and Cloud Security Concepts?
The provider lists it at 21.3% of the exam, according to the ISC2 CC exam outline (effective 1 September 2026).
What topics are in Networking and Cloud Security Concepts?
Network security concepts and firewalls; Wireless, embedded, IoT and ICS systems; Segmentation, defence in depth, zero trust; Cloud characteristics, service and deployment models, shared responsibility.
The other ISC2 CC domains
- Security Principles (24% of the exam)
- Security Governance (17.3% of the exam)
- Identity and Access Management (IAM) Concepts (20% of the exam)
- Security Operations and Incident Response (17.3% of the exam)
Test yourself
Full-length ISC2 CC practice tests with an explanation for every answer option.
Browse the ISC2 CC practice testsAll domainsDomain names, weights and topic lists come from the ISC2 CC exam outline (effective 1 September 2026), checked 2 November 2026. Providers change their outlines, so confirm the current version before you book. The plain-English explanations are ours, not the provider’s. Not affiliated with, endorsed by or sponsored by any certification vendor or exam body. Certification names, exam codes and product names are trademarks of their respective owners and are used only to identify the exam a practice product prepares for. Our questions are original and are not actual exam questions.