Infrastructure & Security

CI/CD pipeline basics, secrets management, baseline vulnerability mitigation, and reading logs and dashboards.

On the exams

How this domain is tested

The share of each exam, and what the domain covers at that level.

CI/CD pipeline basics, secrets management, baseline vulnerability mitigation, and reading logs and dashboards

Observability (metrics, logs, traces), Kubernetes scaling, threat modeling, software supply chain security, and infrastructure as code

Disaster recovery runbooks, multi-region compliance, and enterprise FinOps

Global regulatory resilience, sovereign data residency, and cyber catastrophe mitigation

Model jailbreak prevention, PII scrubbing, private model hosting, and token rate limits

Identity Federation (OIDC/SAML), DDoS mitigation, egress controls, and FinOps

Supply chain security (SLSA, SBOMs), automated rollback criteria, and artifact signing

Secure boot, cryptographic hardware roots, dual-bank OTA updates, and CAN bus isolation

Air-gapped server configurations, sovereign data compliance, and physical memory wiping

Clean cloud region selection, idle workload reclamation, and low-power container runtime

Go deeper

TPBOK Domain Guide 4 Infrastructure Security, free in the IICTP library.

Blog post

Blog post

Blog post

Blog post