Course Overview

PROMOTION: until the end of December 2023 you will receive a 50% discount when booking and participating in this training. To claim this discount you must use the promotional code ECDE50. Only at Global Knowledge!

This 3-day EC-Council training is a course that will prepare you for the EC-Council’s Certified DevSecOps Engineer (E|CDE) certification. EC-Council’s Certified DevSecOps Engineer is a hands-on, comprehensive DevSecOps certification program designed by SMEs that helps professionals build the essential skills for designing, developing, and maintaining secure applications.

Benefits EC-Council’s Certified DevSecOps Engineer certification:

  • Adding security to a DevOps skill set enhances career prospects.
  • The information provided in the E|CDE course is complemented with labs to help learners hone their practical skills and become industry ready.
  • This course teaches students how to use various DevSecOps tools and create secure code throughout the software development life cycle.
  • Participants gain familiarity with DevSecOps tools that enable the secure development of software and web applications, both on premises and in the cloud.
  • The E|CDE course focuses on application DevSecOps and also provides insights into infrastructure DevSecOps.
  • The integration of today’s most popular and important tools is illustrated at each stage of the DevOps life cycle.
  • The E|CDE program helps DevSecOps engineers develop and enhance their knowledge and skills in securing applications at all stages of the DevOps pipeline.

Course Objectives

  • Understand the DevSecOps toolchain and security controls in the DevOps automated pipeline.
  • Adopt security practices such as gathering security requirements, modeling threats, and securing code reviews within the development workflow.
  • Learn AWS and Azure DevSecOps tools for securing applications.
  • Integrate tools and practices to build continuous feedback in the DevSecOps pipeline using Jenkins and Microsoft Teams email notifications.
  • Audit code pushes, pipelines, and compliances using various logging tools and monitoring logs like Sumo Logic, Datadog, Splunk, ELK, and Nagios.

Course Content

This EC-Council course covers the integration and automation of all the widely used DevSecOps tools, processes, and methodologies that help organizations quickly build secure applications. E|CDE trains students in DevSecOps for cloud-based networks, including Amazon Web Services and Microsoft Azure. Our program has over 80 skill-based labs that teach security and tools integration at all eight DevOps stages.

  • MODULE 01 | Understanding DevOps Culture
  • MODULE 02 | Introduction to DevSecOps
  • MODULE 03 | DevSecOps Pipeline—Plan Stage
  • MODULE 04 | DevSecOps Pipeline—Code Stage
  • MODULE 05 | DevSecOps Pipeline—Build and Test Stage
  • MODULE 06 | DevSecOps Pipeline—Release and Deploy Stage
  • MODULE 07 | DevSecOps Pipeline—Operate and Monitor Stage

Course Overview

The Value Stream Management Foundation course from Value Stream Management Consortium, and offered in partnership with DevOps Institute, is an introductory course taking learners through a value stream management implementation journey. It considers the human, process, and technology aspects of this way of working and explores how optimizing value streams for flow and realization positively impacts organizational performance.

Value Stream Management Foundation℠  is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

  • Describe the origins of value stream management and key concepts such as flow, value, and delivery
  • Describe what value stream management is, why it’s needed and the business benefits of its practice
  • Describe how lean, agile, DevOps, and ITSM principles contribute to value stream management
  • Identify and describe value streams, where they start and end, and how they interconnect
  • Identify value stream roles and responsibilities
  • Express value streams visually using mapping techniques, define current and target states and hypothesis backlog
  • Write value stream flow and realization optimization hypotheses and experiments
  • Apply metrics such as touch/processing time, wait/idle time, and cycle time to value streams
  • Understand flow metrics and how to access the data to support data-driven conversations and decisions
  • Examine value realization metrics and aligning to business outcomes, and how to
  • sense and respond to them (outcomes versus outputs)
  • Architect a DevOps toolchain alongside a value stream and data connection points
  • Design a continuous inspection and adaptation approach for organizational evolution

Course Overview

The SRE (Site Reliability Engineering) Practitioner course introduces ways to economically and reliably scale services in an organization. It explores strategies to improve agility, cross-functional collaboration, and transparency of health of services towards building resiliency by design, automation and closed loop remediations.

The course aims to equip participants with the practices, methods, and tools to engage people across the organization involved in reliability through the use of real-life scenarios and case stories. Upon completion of the course, participants will have tangible takeaways to leverage when back in the office such as implementing SRE models that fit their organizational context, building advanced observability in distributed systems, building resiliency by design and effective incident responses using SRE practices.

The course is developed by leveraging key SRE sources, engaging with thought-leaders in the SRE space and working with organizations embracing SRE to extract real-life best practices and has been designed to teach the key principles & practices necessary for starting SRE adoption.

This course positions learners to successfully complete the SRE Practitioner certification exam.

Site Reliability Engineering Practitioner (SREP)®  is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

At the end of the course, the following learning objectives are expected to be achieved:

  1. Practical view of how to successfully implement a flourishing SRE culture in your organization.
  2. The underlying principles of SRE and an understanding of what it is not in terms of anti-patterns, and how you become aware of them to avoid them.
  3. The organizational impact of introducing SRE.
  4. Acing the art of SLIs and SLOs in a distributed ecosystem and extending the usage of Error Budgets beyond the normal to innovate and avoid risks.
  5. Building security and resilience by design in a distributed, zero-trust environment.
  6. How do you implement full stack observability, distributed tracing and bring about an Observability-driven development culture?
  7. Curating data using AI to move from reactive to proactive and predictive incident management. Also, how you use DataOps to build clean data lineage.
  8. Why is Platform Engineering so important in building consistency and predictability of SRE culture?
  9. Implementing practical Chaos Engineering.
  10. Major incident response responsibilities for a SRE based on incident command framework, and examples of anatomy of unmanaged incidents.
  11. Perspective of why SRE can be considered as the purest implementation of DevOps.
  12. SRE Execution model
  13. Understanding the SRE role and understanding why reliability is everyone’s problem.
  14. SRE success story learnings

Course Content

Course Introduction

Module 1: SRE Anti-patterns

Module 2: SLO is a Proxy for Customer Happiness

Module 3: Building Secure and Reliable Systems

Module 4: Full-Stack Observability

Module 5: Platform Engineering and AIOPs

Module 6: SRE & Incident Response Management

Module 7: Chaos Engineering

Module 8: SRE is the Purest form of DevOps

Post-class assignments/exercises

Course Overview

Microservices and Cloud-Native architectures have been goals of many organizations to help increase speed and agility, but as complexity grows, systems become increasingly challenging to observe. When issues occur, these issues are often difficult to triage and identify the root causes. This course introduces a range of practices for advancing resilience and how to architect end-to-end Observability for Cloud-Native applications. The advantages of building full-stack metrics, events, logs, and distributed tracing are introduced, along with the impact of DevSecOps on Observability and how AIOPs enhance Observability capabilities. This course also covers how Network and Security Observability plays a key role in building reliability, the key aspects of security operations and automated responses are covered,

The course aims to equip participants with the practices, methods, and tools to engage people across the organization involved in Observability by using real-life scenarios and case stories. Upon completion of the course, participants will have tangible takeaways to leverage situations such as implementing MELT models effectively, that fit their organizational context, building distributed tracing and resiliency by design.

The course is developed by leveraging key experts in the fields of telemetry, sources of knowledge and engaging with thought-leaders in the Observability space, and working with organizations who have crossed the chasm of modern Observability to extract real-life best practices.

This course positions learners to successfully complete the Observability Foundation certification exam.

Observability Foundation (OBSF)® is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

At the end of the course, the following learning objectives are expected to be achieved:

  • Practical view of how to successfully implement a flourishing Observability culture in your organization
  • The underlying principles of Observability and an understanding why monitoring on its own will not provide the required results in microservices based containerized environments
  • Understanding the three pillars of Observability
  • Adopting open Telemetry standards helps achieve innovation and distributed tracing in a seamless manner
  • Observability Maturity Model and the measurement of practical observability
  • Implementing full stack Observability and distributed tracing will enable a DevSecOps culture
  • Curating Observability using AI to move from reactive to proactive and predictive incident management. Also, how you use DataOps to build a clean data lineage of observable data.
  • Implementing Network, Container level Observability and why is security a first class citizen in building the Observability culture
  • What is Time based Topology, and how does it add value in Observability for a distributed environment
  • The Data paradox,and how we address data issues using a systematic approach (DataOps) to build a clean Observability pipeline
  • How do we feedforward DevSecOps wisdom into Observability
  • Observability practices for DevSecOps and SRE

Course Content

Course Introduction

Module 1: Exploring Observability

Module 2: Pillars of Observability

Module 3: Open Source Landscape for Observability

Module 4: Service Maps and Topology

Module 5: DataOps Helps Get Observability Right

Module 6: Building Observability with AIOps

Module 7: Security and Networking with Observability

Module 8: Observability Practices for DevOps and SRE

Course Overview

The DevSecOps Practitioner course is intended as a follow-on to the DevSecOps Foundation course. The course builds on previous understanding to dive into the technical implementation. Each section highlights useful metrics as well as integrating new techniques into differing practices. These modules offer suggestions on how to overcome people, process, and technological issues to develop better DevSecOps outcomes. Beginning with a deeper dive into the surrounding concepts, the course then considers either using existing metrics or developing unique expressions suitable to each DevOps experience. The middle section looks at architecture transitions, building an infrastructure, and tuning the CI/CD pipeline to best effect. Finally, the course offers ways to get the best from your experimentation practices and considers where the future of DevSecOps may lead.

The DevsecOps Practitioner course introduces more advanced ways to explore DevSecOps in your organization. Each section covers practical maturity guides, and then discusses how people, process and technology can be combined to improve outcomes.

The course aims to equip participants with the practices, methods, and tools to engage people across the organization involved in reliability through the use of real-life scenarios and case stories. Upon completion of the course, participants will have tangible takeaways to leverage when back in the office such as implementing DevSecOps practices to their organizational structure, building better pipelines in distributed systems, and having a common technological language.

The course is developed by leveraging key DevSecOps sources, engaging with thought-leaders in the space and working with organizations to extract real-life best practices and has been designed to teach the key principles & practices necessary for successful DevSecOps practices.

This course positions learners to successfully complete the DevSecOps Practitioner certification exam.

Please note: It is highly recommended that learners complete the DevOps Institute DevSecOps Foundation course and certification prior to taking the DevSecOps Practitioner course and exam.

DevSecOps Practitioner (DSOP)® is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

At the end of the course, the following learning objectives are expected to be achieved:

  • Comprehend the underlying principles of DevSecOps
  • Distinguish between the technical elements used across DevSecOps practices
  • Demonstrate how practical maturity concepts can be extended across multiple areas.
  • Implement metric-based assessments tied to your organization.
  • Recognize modern architectural concepts including microservice to monolith transitions.
  • Recognize the various languages and tools used to communicate architectural concepts.
  • Contrast the options used to build a DevSecOps infrastructure through Platform as a Service, Server-less construction, and event-driven mediums
  • Prepare hiring practices to recognize and understand the individual knowledge, skills, and abilities required for mature Dev.
  • Identify the various technical requirements tied to the DevSecOps pipelines and how those impact people and process choices.
  • Review various approaches to securing data repositories and pipelines.
  • Analyze how monitoring and observability practices contribute to valuable outcomes.
  • Comprehend how to implement monitoring at key points to contribute to actionable analysis.
  • Evaluate how different experimental structures contribute to the 3rd Way.
  • Identify future trends that may affect DevSecOps

Course Content

Course Introduction
Module 1: DevSecOps Advanced Basics
Module 2: Understanding Applied Metrics
Module 3: Architecting and Planning for DevSecOps
Module 4: Creating a DevSecOps Infrastructure
Module 5: Establishing a Pipeline
Module 6: Observing DevSecOps Outcomes
Module 7: Practical 3rd Way Applications
Module 8: The Future of DevOps

Course Overview

 Integrating security practices into DevOps, such as Security as Code, is a way for security practitioners to operate and contribute value with less friction. Security practices must adapt dynamically to ensure data security and privacy issues are not left behind in the fast-paced world of DevOps.


 DevSecOps Foundation℠ is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Content

Cyber Threat Landscape (CTL)

Tactics, techniques and procedures (TTPs) describe how  threat agents orchestrate and manage attacks. Threat Models  optimize security by identifying objectives and vulnerabilities  such as OWASP top ten, before defining counter-measures.  Continuous Delivery practices are engaged to realize continuous governance, risk management and compliance.

Responsive DevSecOps Model

Security is made continuously adaptive and auditable by  breaking security silos, cultivating a symbiotic relationship between security and other business units. Security specific practices and integrated toolsets as code (such as security scans) enable automated security KPIs and observable  security practices into the DevOps value stream.
 

DevSecOps Stakeholders

Gaps between traditional waterfall security cultures and fast-paced DevOps cultures, are removed by building collaboration and trust. Through improving credibility, reliability and empathy while reducing self-interest. Decisions are based on advice from everyone affected and people with expertise using systems thinking. Shared metrics assure adaptable governance using discipline, with automation, transparency and accountability.

Realizing DevSecOps Outcomes

Security is built into the value stream efficiently with empowered development teams implementing features securely, shift-left security testing, tools for automated feedback. Culture improvements instead of policy enforcements ensure security and software engineers are continuously cross-skilling and collaborating.
 

Pipelines & Continuous Compliance

Security test and scanning tools are integrated into the CI/CD pipeline to finding known vulnerabilities (published CVEs) and common software weaknesses (CWEs). Repetitive security tasks are automated such as configurations, Fuzz testing and long running security tasks. Compliance as Code helps in automating compliance requirements to foster collaboration, repeatability, and continuous compliance.

DevSecOps Practices

Security is integrated into people, process, technology and governance practices. Continuous security practices for DevSecOps are implemented in onboarding processes for stakeholders. Security practices and outcomes are monitored and improved using data-driven decision making and response patterns. Lean and value stream thinking ensure that security does not cause waste, delays or constraints for flow.
 

Getting Started

Value Stream Mapping establishes where security activities and bottlenecks currently happen. Collaborative design of a target value state map addresses security requirements, communication and automation improvements. Scope of the design includes practices for Artifact Management, Risk Management, Identity Access Management, Secrets Management, Encryption, Governance, Risk and Compliance, Monitoring and Logging, Incident response and learning
 

Learning Using Outcomes

Continuous DevSecOps learning programs are implemented to meet evolving security requirements for the organization and individuals using strategies such as lunch and learns, mentoring, professional education, employee learning plans, structured training classes, Dojos, retrospective learning, gamification, and DevOps Institute SKILup Days.

Course Overview

A DevOps Leader is a tactical or strategic individual who helps design, influence, implement or motivate the cultural transformation proven to be a critical success factor in DevOps adoption. This individual understands the human dynamics of cultural change and is equipped with practices, methods and tools to engage people across the DevOps spectrum.

DevOps Leader (DOL)®  is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Virtual Learning

This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins.

Course Content

Number of questions: 40 multiple choice questions

Pass mark: 65% (26 out of 40)

Open book/notes: no

Exam duration: 90 minutes (additional time if English is not a candidate’s native language)

Course Overview

This course is an introduction to DevOps. The course emphasizes communication, collaboration , integration, and automation to improve the workflow between developers and IT operations professionals. Improved workflows lead to more opportunities to design software and services in a more agile fashion which can only be good for customers.

This course (based on the DevOps Institute syllabus) is intended as a basis for discovering the most important DevOps concepts and to understand the principles and methods behind this. The course will leave you with the inspiration to be the advocate of change; The idea is that what you have learned about DevOps – and continue to learn – is shared with others so that you can guide them.

DevOps Foundation (DOFD)® is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved

Course Objectives

After completing the course, students will be familiar with the following aspects of DevOps :

  • Objectives and concepts
  • Company benefits
  • Performance criteria and results in the real world
  • DevOps principles
  • Concepts and methods (including the relationship between Agile, Lean and IT Service Management ( ITSM) )
  • Cultural and organizational considerations
  • Methods of communication and collaboration
  • Methods for automation and technology factors
  • Considerations when changing
  • Challenges, risks and critical success factors

Course Overview

DevOps is a complex maze that has many leaders frustrated. Many enterprises struggle with their DevOps journey, or even knowing where to start. There are many layers of people, process and technologies across each organization that are instrumental to engineering a successful DevOps solution. DevOps is not something you go get a quote for and simply buy. It’s an evolving journey. This course explains the many aspects of DevOps engineering that leaders and practitioners can execute upon. While DevOps Foundation provides an overview of DevOps, this course will provide a closer look at the implementation process from an engineering perspective. It is an in depth view of the major aspects of engineering DevOps. An engineering approach is critical to DevOps journeys. This course provides the foundations of knowledge, principles and practices from a technical perspective needed to engineer a successful DevOps solution. This course positions learners to successfully complete the DevOps Engineering Foundation exam.

DevOps Engineering Foundation (DOEF)® is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

The learning objectives for DevOps Engineering Foundation include an understanding of:

  • How to engineer DevOps solutions
  • DevOps Technologies
  • Applications Architectures
  • Continuous Integration
  • Continuous Testing
  • Ephemeral Elastic Infrastructures
  • Continuous Delivery and Deployment
  • Metrics, Monitoring, Observability and Governance
  • DevOps Humans
  • Future Trends

Course Content

Module 1: DevOps Engineering Introduction

Module 2: DevOps Technology

Module 3: Applications Architectures and Continuous Integration

Module 4: Continuous Testing

Module 5: Ephemeral Elastic Infrastructures

Module 6: Continuous Delivery and Deployment

Module 7: Metrics, Monitoring, Observability, Governance

Module 8: DevOps Engineering Humans

Course Overview

This comprehensive course addresses testing in a DevOps environment and covers concepts such as the active use of test automation, testing earlier in the development cycle, and instilling testing skills in developers, quality assurance, security, and operational teams.

The course is relevant for every modern IT professional involved in defining or deploying a DevOps testing strategy for their organization, as test engineering is the backbone of DevOps and the primary key for successful DevOps pipeline to support digital transformation.

Actionable and exciting exercises will be used to apply the concepts covered in the course and sample documents, templates, tools, and techniques will be provided to leverage after the class.

This certification positions learners to successfully complete the Continuous Testing Foundation exam.

Continuous Testing Foundation (CTF)® is a registered trademark of the PeopleCert group. Used under licence from PeopleCert. All rights reserved.

Course Objectives

After completing this course you should understand:

  • The purpose, benefits, concepts, and vocabulary of DevOps testing
  • How DevOps testing differs from other types of testing
  • DevOps testing strategies, test management, and results analysis
  • Strategies for selecting test tools and implementing test automation
  • Integration of DevOps testing into Continuous Integration and Continuous Delivery workflows
  • How DevOps testers fit with a DevOps culture, organization, and roles

Course Content

Module 1: DevOps Continuous Testing Concepts, Terminology, and Benefits

Module 2: DevOps Continuous Testing and Culture

Module 3: DevOps Continuous Testing Strategies

Module 4: DevOps Continuous Testing Frameworks and Tools

Module 5: DevOps Test Planning Best Practices

Module 6: DevOps Test Automation Best Practices

Module 7: DevOps Test Management and Analysis Best Practices

Module 8: Defining a DevOps Test Strategy