Build, deploy, secure and troubleshoot the cloud — 36 hands-on labs mapped to every CV0-004 exam objective.
This WSQ course takes you from cloud fundamentals to running production-grade cloud systems, and prepares you for the CompTIA Cloud+ (CV0-004) certification exam. You will build every concept yourself — virtual networks, containers, Kubernetes, Infrastructure as Code, observability stacks, IAM, WAFs and CI/CD pipelines — then break them and fix them.
It is designed for systems administrators, cloud engineers, DevOps practitioners and IT professionals with roughly 2–3 years of experience who want a vendor-neutral cloud credential. Every one of the 36 labs runs free — no cloud account and no credit card required. Each lab names the platform it runs on: the Killercoda Ubuntu Playground for the Linux labs, the Killercoda Kubernetes Playground for the Kubernetes labs, and optionally Docker Desktop for the container labs.
| # | On completion of this course you will be able to |
|---|---|
| LO1 | Explain cloud architecture, service models (IaaS/PaaS/SaaS/FaaS) and the shared responsibility model, and design highly-available, well-networked cloud solutions. |
| LO2 | Deploy cloud workloads using containers, virtualization, Infrastructure as Code and modern release strategies (blue-green, canary, rolling). |
| LO3 | Operate cloud systems with observability, logging, tracing, auto-scaling, backup/recovery and lifecycle management. |
| LO4 | Secure a cloud environment with vulnerability management, hardening, IAM/RBAC, secrets management, WAF and runtime threat detection. |
| LO5 | Apply DevOps fundamentals — source control, CI/CD, APIs and container orchestration. |
| LO6 | Troubleshoot common cloud deployment, network, security and container issues methodically. |
The course follows the six CV0-004 exam domains. Each lab lives in its own folder with a complete step-by-step guide.
Cloud concepts, service and deployment models, the shared responsibility model, high availability, networking (VPC), storage tiers, virtualization, databases and cloud-native / microservices design.
| Lab | Title | Headline tools |
|---|---|---|
| 1 | Cloud Service Models & Shared Responsibility | Docker, curl, jq |
| 2 | High Availability with HAProxy & Keepalived | HAProxy, Keepalived, Docker |
| 3 | Cloud Networking with VPC Namespaces | iproute2 (ip netns), iptables, sysctl |
| 4 | Storage Tiers (Block, Object, File) | fio, losetup/mkfs.ext4, MinIO + mc |
| 5 | Microservices & Service Discovery | HashiCorp Consul, Docker bridge network, curl |
| 6 | Containerization with Docker | Docker, Dockerfile, registry:2 |
| 7 | Virtualization with QEMU/KVM | QEMU, qemu-img, libvirt |
| 8 | Relational vs Non-Relational Databases | Docker, PostgreSQL 16 + psql, MongoDB + mongosh |
Provisioning and configuring cloud resources: deployment models, zero-downtime release strategies (blue-green, canary, rolling), Infrastructure as Code, Configuration as Code and scripting logic.
| Lab | Title | Headline tools |
|---|---|---|
| 9 | Public, Private & Hybrid Cloud Models | LocalStack, MinIO + mc, AWS CLI |
| 10 | Blue-Green Deployment with Nginx | Nginx, Docker (nginx:alpine), curl |
| 11 | Canary Deployment with HAProxy | HAProxy, Docker (nginx:alpine), curl |
| 12 | Rolling Deployment with Docker Compose | Docker Compose, HAProxy, curl |
| 13 | Infrastructure as Code with Terraform | Terraform, LocalStack, awslocal |
| 14 | Configuration as Code with Ansible | Ansible, ansible-galaxy, YAML |
| 15 | JSON & YAML Scripting Logic | jq, yq, diff |
Running cloud systems day-to-day: observability (metrics, logs, traces), alerting, auto-scaling, backup & disaster recovery, and patching / lifecycle management.
| Lab | Title | Headline tools |
|---|---|---|
| 16 | Observability with Prometheus & Grafana | Prometheus, Grafana, node-exporter |
| 17 | Centralized Logging with the ELK Stack | Elasticsearch, Logstash, Kibana |
| 18 | Distributed Tracing with Jaeger | Jaeger, OpenTelemetry Python SDK, Docker |
| 19 | Horizontal Auto-Scaling Simulation | Docker Compose, stress-ng, cron |
| 20 | Backup & Recovery with restic | restic, MinIO, Docker |
| 21 | Patching & Lifecycle Management | apt, unattended-upgrades, Docker |
Securing the cloud: vulnerability management, CIS hardening, IAM & RBAC, secure access (bastion + MFA), secrets management, web application firewalls and runtime threat detection.
| Lab | Title | Headline tools |
|---|---|---|
| 22 | Vulnerability Scanning with Trivy | Trivy, Docker, sample Terraform |
| 23 | CIS Benchmark Audit with Lynis | Lynis, chmod, sysctl |
| 24 | IAM & RBAC with Keycloak | Keycloak, Docker, curl |
| 25 | Bastion Host with SSH Key + MFA | OpenSSH, ssh-keygen, Google Authenticator (PAM) |
| 26 | Secrets Management with HashiCorp Vault | HashiCorp Vault, Docker, PostgreSQL |
| 27 | Web Application Firewall with ModSecurity | Docker (owasp/modsecurity-crs), Nginx, OWASP CRS |
| 28 | Detecting Suspicious Activity with Falco | Falco (eBPF), Docker, falcosidekick |
Source control and branching, CI/CD pipelines, web-service APIs (REST / GraphQL) and container orchestration with Kubernetes.
| Lab | Title | Headline tools |
|---|---|---|
| 29 | Git Source Control & Branching | git, Gitea (self-hosted), curl |
| 30 | CI/CD Pipeline with GitHub Actions (act) | act (nektos/act), Docker, git |
| 31 | REST & GraphQL APIs | curl, jq, GraphQL Yoga |
| 32 | Container Orchestration with Kubernetes (k3s) | k3s, kubectl, YAML manifests |
Methodically diagnosing and fixing deployment, network, security and container / resource issues using a repeatable triage workflow.
| Lab | Title | Headline tools |
|---|---|---|
| 33 | Troubleshoot Deployment Issues | Docker, curl, jq |
| 34 | Troubleshoot Cloud Network Issues | dig/nslookup, ip, iptables |
| 35 | Troubleshoot TLS, Cipher & Auth Issues | openssl, nmap, auditd |
| 36 | Troubleshoot Container & Resource Limits | docker (inspect/stats/logs), a triage.sh script, k9s/ctop |
Each lab states its platform in a Lab platform section at the top.
| Platform | Use it for | Labs |
|---|---|---|
| Killercoda Ubuntu Playground | Disposable root Ubuntu VM in the browser | The 32 Linux labs |
| Killercoda Kubernetes Playground | A real cluster with kubectl ready — the Ubuntu playground has none |
Lab 32 |
| Docker Desktop | Run the container labs locally on Windows, macOS or Linux (optional) | Labs 6, 12, 36 |
On Docker Desktop the engine is already running — skip any
apt install docker.ioandsystemctl start dockerstep. Everything else in the lab is identical.
| Tool | What you use it for |
|---|---|
| IP Calculator | Subnet/CIDR planning for the VPC and networking labs |
| PCAP Analyzer | Inspect packet captures from the network troubleshooting lab |
| Regex Generator | Build grok/regex patterns for the centralized logging lab |
| Cybersecurity Simulator | Practise attack/defence scenarios from the security labs |
Docker · Docker Compose · Kubernetes (k3s) · QEMU/KVM · Terraform · Ansible · HAProxy · Nginx · Keepalived · Prometheus · Grafana · ELK · Jaeger · restic · MinIO · Trivy · Lynis · Keycloak · HashiCorp Vault · ModSecurity + OWASP CRS · Falco · Git + Gitea · act · PostgreSQL · MongoDB · Redis · Consul
The complete free-tool reference, with install commands and links, is in labs/tools.md.
.
├── labs/ # 36 hands-on labs — one folder per lab
│ ├── lab-01-service-models/
│ │ └── README.md # step-by-step lab guide
│ ├── …
│ ├── README.md # lab index by exam domain
│ └── tools.md # complete free-tool reference
└── courseware/ # trainer & learner deliverables
├── CompTIA Cloud+ Slides - v2.1.pptx / .pdf
├── Learner Guide - CompTIA Cloud+ - v2.1.docx / .pdf
├── Lesson Plan - CompTIA Cloud+ - v2.1.docx / .pdf
└── archive/ # superseded versions
Note: the confidential
assessment/folder (question papers and answer keys) is not in this repository. Assessment materials are distributed to trainers via Google Drive and the LMS only.
| Course title | WSQ CompTIA Certified Cloud+ Training |
| WSQ course code | TGS-2024049214 |
| TSC | Cloud Computing (ICT-DIT-5020-1.1) |
| Duration | 2 days · 16 instructional hours (9:30 AM – 6:30 PM daily) |
| Level | Intermediate — 2–3 years systems/cloud administration recommended |
| Assessment | Written Assessment (WA) 1 hr + Practical Performance (PP) 1 hr |
| Mode | Classroom / synchronous e-learning · 100% hands-on |
| Certification target | CompTIA Cloud+ CV0-004 — maximum of 90 questions, 90 minutes, pass 750 (scale 100–900) |
| Training provider | Tertiary Infotech Academy Pte Ltd · UEN 201200696W |
This is a WSQ-funded course. Singapore Citizens, PRs and eligible companies can claim SkillsFuture / SSG funding subject to prevailing rates and eligibility. A minimum 75% attendance and a Competent (C) grade in both assessments are required. See the course page for current fees, funding tiers and dates.
All artifacts are generated from a single source of truth, so the deck, Learner Guide, Lesson Plan and labs can never drift apart:
SK=.claude/skills/cloudplus-courseware-build
python3 $SK/build_ppt.py # slide deck (PPTX + PDF)
python3 $SK/build_learner_guide.py # Learner Guide (DOCX + PDF + Markdown mirror)
python3 $SK/build_lesson_plan.py # Lesson Plan (DOCX + PDF)Course content lives in course_data.py and data_domain1.py … data_domain6.py; the labs are the Markdown files under labs/, embedded verbatim into the Learner Guide.
- Register / course page: www.tertiarycourses.com.sg/wsq-comptia-certified-cloud-training.html
- Email: enquiry@tertiaryinfotech.com
- Tel: +65 6100 0613
- LMS / TMS: https://lms-tms.tertiaryinfotech.com/
- Website: www.tertiarycourses.com.sg
📝 Register for WSQ CompTIA Certified Cloud+ Training →
© 2026 Tertiary Infotech Academy Pte Ltd · UEN 201200696W