{"id":1242,"date":"2024-06-28T13:26:36","date_gmt":"2024-06-28T13:26:36","guid":{"rendered":"https:\/\/blog.gustavomagella.com\/?p=1242"},"modified":"2025-03-28T14:51:16","modified_gmt":"2025-03-28T14:51:16","slug":"002-cczt-exam-is-it-worth-it","status":"publish","type":"post","link":"https:\/\/blog.gustavomagella.com\/index.php\/2024\/06\/28\/002-cczt-exam-is-it-worth-it\/","title":{"rendered":"#002 | CCZT Exam! Is it worth it?"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Introduction<\/h1>\n\n\n\n[en-gb] \u201cE a\u00ed seus trem bunitows\u201d, I hope this finds you safe and well! \ud83c\udf39\ud83d\ude80<\/p>\n\n\n\n<p>It\u2019s been a while since I started writing about my experiences with technology certification exams. This all started because I see so many people on LinkedIn and other social networks posting about their progress with various certifications. It\u2019s kind of become a habit for me. I have notes on most of the certification exams I\u2019ve taken, whether the results were positive or negative. This has made me reflect on the real importance of each exam and what the experience was like.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"500\" height=\"280\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1246\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy.webp 500w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy-300x168.webp 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p>My goal here on the blog is also to share some articles about these experiences. I think it\u2019s really important to share these stories, so we can plan better and understand the applicability of each exam in our careers.<\/p>\n\n\n\n<p>Often, we choose to take an exam believing it will be useful, but during the learning process and the consolidation of the knowledge needed to pass, it often becomes clear that a particular exam or certification won\u2019t contribute as much as we expected to our careers. Sometimes the certification has a <strong><em>catchy name<\/em><\/strong> and is well-promoted, but in terms of technical depth and content, it falls short.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"350\" height=\"263\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1248\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy.webp 350w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy-300x225.webp 300w\" sizes=\"(max-width: 350px) 100vw, 350px\" \/><\/figure>\n<\/div>\n\n\n<p>On the other hand, there might be a certification that isn\u2019t as well-known or talked about in our circles, but that brings significant learning and has extremely relevant technical depth for many people\u2019s careers.<\/p>\n\n\n\n<p>In today\u2019s post, I\u2019ll talk about my experience taking the CSA exam, the Cloud Security Alliance\u2019s CCZT (Certificate of Competence in Zero Trust).<\/p>\n\n\n\n<p><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">What is the CCZT Exam\u200a\u2014\u200aCertificate of Competence in Zero&nbsp;Trust?<\/h1>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"717\" height=\"327\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1249\" style=\"width:462px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image.png 717w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-300x137.png 300w\" sizes=\"(max-width: 717px) 100vw, 717px\" \/><\/figure>\n<\/div>\n\n\n<p>This exam provides an in-depth understanding of Zero Trust architecture, its drivers, benefits, and how to plan for its adoption. Earning the CCZT is crucial for security professionals looking to advance their careers and for organizations that need to maintain a strong security posture.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Topics Covered<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Fundamental Concepts of Zero Trust:<\/strong> General concepts, definitions, goals, and benefits of Zero Trust.<\/li>\n\n\n\n<li><strong>Software Defined Perimeter:<\/strong> The core tenets, underlying technologies, main architectural components, and technological and business benefits of SDP, a ZTA solution.<\/li>\n\n\n\n<li><strong>Industry Best Practices:<\/strong> Developing best practices in Zero Trust by examining authoritative sources, such as the CISA Zero Trust Maturity Model and the NIST Zero Trust Architecture (SP 800\u2013207), among others.<\/li>\n\n\n\n<li><strong>Zero Trust Architecture:<\/strong> Logical models, key components, workflows, and design of Zero Trust Architecture.<\/li>\n\n\n\n<li><strong>Zero Trust Planning:<\/strong> In-depth examination of the crucial facets of Zero Trust planning, from initial considerations like stakeholder identification and defining your protect surfaces, to organizational security policies and compliance.<\/li>\n\n\n\n<li><strong>Zero Trust Implementation:<\/strong> In-depth examination of the crucial facets of Zero Trust implementation, from creating project kick-off documents and disaster planning, to setting up the network environment, deploying agents to devices, and adding automation.<\/li>\n<\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">How to get prepared?<\/h1>\n\n\n\n<h3 class=\"wp-block-heading\">CSA CCZT Prep-Kit (100%&nbsp;Free)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"618\" height=\"297\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1250\" style=\"width:472px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1.png 618w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1-300x144.png 300w\" sizes=\"(max-width: 618px) 100vw, 618px\" \/><\/figure>\n<\/div>\n\n\n<p>The CSA offers a free prep-kit to help you prepare for the exam. This kit is super comprehensive and has all the resources you need to study effectively. It includes detailed materials covering all the important topics, ensuring you gain the necessary knowledge to excel in the exam.<\/p>\n\n\n\n<p>This is great for those who like to study on their own, allowing you to prepare with confidence and depth for the CCZT certification.<\/p>\n\n\n\n<p><strong>Link:<\/strong> Link: <a href=\"https:\/\/cloudsecurityalliance.org\/artifacts\/cczt-prep-kit\">https:\/\/cloudsecurityalliance.org\/artifacts\/cczt-prep-kit<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">CISA Zero Trust Maturity Model&nbsp;(v2.0)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"452\" height=\"357\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1251\" style=\"width:353px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2.png 452w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2-300x237.png 300w\" sizes=\"(max-width: 452px) 100vw, 452px\" \/><\/figure>\n<\/div>\n\n\n<p>Created by the Cybersecurity and Infrastructure Security Agency (CISA), the Zero Trust Maturity Model is an essential tool for CCZT students to reference while preparing for the exam.<\/p>\n\n\n\n<p><strong>Link:<\/strong> <a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/zero-trust-maturity-model\">https:\/\/www.cisa.gov\/resources-tools\/resources\/zero-trust-maturity-model<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">NIST Zero Trust Architecture (SP&nbsp;800\u2013207)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"704\" height=\"471\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1252\" style=\"width:478px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3.png 704w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3-300x201.png 300w\" sizes=\"(max-width: 704px) 100vw, 704px\" \/><\/figure>\n<\/div>\n\n\n<p>The NIST Zero Trust Architecture (ZTA) document from the U.S. National Institute of Standards and Technology (NIST) describes Zero Trust for enterprise security architects.<\/p>\n\n\n\n<p>It aims to aid in understanding ZTA and provide an enterprise implementation roadmap for Zero Trust security concepts. (I noticed that more than 60% of the exam questions were drawn from this material.)<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/\">https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">NSTAC Report: Zero Trust and Trusted Identity Management<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"408\" height=\"475\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1253\" style=\"width:318px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4.png 408w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4-258x300.png 258w\" sizes=\"(max-width: 408px) 100vw, 408px\" \/><\/figure>\n<\/div>\n\n\n<p>The U.S. President\u2019s National Security Telecommunications Advisory Committee (NSTAC) report focuses on Zero Trust and Trusted Identity Management.<\/p>\n\n\n\n<p>This report was mentioned several times during the exam and was used as a reference for some of the questions I answered.<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/\">https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Exam Structure<\/h2>\n\n\n\n<p><strong>Number of Questions:<\/strong> 60<br><strong>Duration:<\/strong> 2 hours<br><strong>Passing Score:<\/strong> 80% (approximately 48 to 50 questions)<br><strong>Type of Exam:<\/strong> Open Book (meaning you can refer to materials during the exam)<br><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>Important Tip<\/strong>!<\/p>\n<cite><em>It may be open-book, but don\u2019t underestimate the difficulty of this exam. The questions are randomly selected from the CCZT question pool, so having a solid understanding of each domain and the authoritative sources included in the recommended study materials is essential if you want to pass.<\/em><\/cite><\/blockquote>\n\n\n\n<p><br>According to the CSA, the questions are distributed as follows:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"555\" height=\"340\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1254\" style=\"width:507px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5.png 555w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5-300x184.png 300w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"has-text-align-center\"><em>Image: CCZT Knowledge Guide (by&nbsp;CSA)<\/em><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Exam Evaluation (My Tech Two&nbsp;Cents)<\/h1>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"480\" height=\"262\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1255\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy.webp 480w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy-300x164.webp 300w\" sizes=\"(max-width: 480px) 100vw, 480px\" \/><\/figure>\n<\/div>\n\n\n<p>To deepen my analysis and organize my ideas and opinions about this exam in a logical, acceptable, and understandable way for all of you, I decided to create an evaluation matrix based on 5 pillars: technical density, course content vs. exam, relevance and applicability of the content in real life, exam experience, and cost vs. benefit.<\/p>\n\n\n\n<p>Thus, I intend to give a score from 0 to 10, according to my opinion, for each of these 5 pillars.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1) Technical Density&nbsp;(0\u201310)<\/h3>\n\n\n\n<p><strong>Score: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/strong><\/p>\n\n\n\n<p>This exam has excellent technical density and is very well-founded. Firstly, the CSA took into account the CISA Zero Trust Maturity Model (v2.0), the NIST Zero Trust Architecture (SP 800\u2013207), and the NSTAC Report: Zero Trust and Trusted Identity Management. Based on these three documents (which they call Authoritative Sources), the CSA built a VERY detailed and technically rich exam.<\/p>\n\n\n\n<p>Unlike many exams in the technology market, this one is not product-based, meaning it is not a test to verify your proficiency in a specific product or technology from a manufacturer.<\/p>\n\n\n\n<p>It was very clear during the exam and throughout my preparation that the CSA\u2019s commitment is, in fact, to build a solid knowledge base on Zero Trust, completely agnostic. \ud83c\udf39\u2764\ufe0f<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2) Course Content vs. Exam&nbsp;(0\u201310)<\/h3>\n\n\n\n<p><strong>Score: 8\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u274c\u274c<\/strong><\/p>\n\n\n\n<p>Firstly, I recommend that you buy the official course offered by the CSA to prepare for this exam.<\/p>\n\n\n\n<p><strong>Link:<\/strong> <a href=\"https:\/\/knowledge.cloudsecurityalliance.org\/certificate-of-competence-in-zero-trust-cczt\">CSA Official Course<\/a><\/p>\n\n\n\n<p>The official material and course are very well written, presented, and structured, covering all the topics and information needed for the exam. In my experience with other exams, like those from ISC2, some of the questions asked in the exam are different from what was covered in the course.<\/p>\n\n\n\n<p>However, the CSA course was well-structured to cover all the exam questions. If you take the official course, you are well-prepared for the exam. It\u2019s worth noting that during the course, the instructor sometimes mentioned concepts that were not as well described in the PPT material. Therefore, I suggest you pay close attention to the course, note down the concepts explained by the instructor, and cross-reference this information with the content in the PPT.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3) Relevance and Applicability of the Content in Real Life&nbsp;(0\u201310)<\/h3>\n\n\n\n<p><strong>Score: 7\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u274c\u274c\u274c<\/strong><\/p>\n\n\n\n<p>During the learning process and after taking the exam, I realized that the exam has a lot of relevance, and the content covered by the course can be well used in daily life. However, a large part of the course focuses on the SDP architecture approach and not so much on other approaches.<\/p>\n\n\n\n<p>Zero Trust is an approach that is not tied to a specific technology, so I missed CSA explaining more detailed other options and approaches available for applying the Zero Trust concept.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4) Exam Experience (0\u201310)<\/h3>\n\n\n\n<p><strong>Score: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/strong><\/p>\n\n\n\n<p>My experience on the platform where the exam is taken was very positive and pleasant. There is no need to install anything on your computer, no need to enter a monitored session, as it is an open book exam, allowing consultations during the test. You have 2 hours to complete 60 questions.<\/p>\n\n\n\n<p>However, be careful, as being an open book exam can lead some people to neglect preparation, believing they can consult at any time. The questions are complex and dense, with many tricky ones. Be prepared, attend the course, take your notes, because the chance of not passing is high. I didn\u2019t pass on my first attempt, but on the second, after reviewing and studying again, I managed to pass with 88%.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5) Cost vs. Benefit&nbsp;(0\u201310)<\/h3>\n\n\n\n<p><strong>Score: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/strong><\/p>\n\n\n\n<p>CSA offers a product called the CSA Bundle, which includes the official course necessary for the exam and two attempts to take the test, for <strong>455 USD<\/strong>.<\/p>\n\n\n\n<p>In my opinion, this is a very reasonable price, considering that Microsoft certifications cost around 100 to 150 USD just for the exam, and other certifications like CompTIA can cost around 375 USD <strong>without the course.<\/strong><\/p>\n\n\n\n<p>The CSA bundle, which includes the official course and two exam attempts, is extremely reasonable. If you prefer to study on your own, CSA offers a fantastic and complete preparatory kit for the exam for free, and you can buy just the exam token for 175 USD, which also includes two attempts.<br><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Wrapping-up<\/h3>\n\n\n\n<p>IMHO (My Tech Two Cents), the CCZT exam is indeed a crucial exam for those looking to build a career in cloud security. It\u2019s a well-thought-out and well-constructed exam that provided me with a wealth of knowledge and a solid technical foundation. My first contact with Zero Trust was through ZScaler and Illumio training sessions, but honestly, those were more \u201cproduct-centric\u201d than \u201cagnostic\u201d and \u201carchitectural.\u201d<\/p>\n\n\n\n<p>The CSA exam gave me a broader landscape of possibilities and solidified my understanding of architectural components, project considerations and constraints, planning, design, and more. It\u2019s a career milestone for anyone aiming to establish and deepen their cloud security concepts and architectural strategy. Thanks, CSA!<\/p>\n\n\n\n<p>I hope this article helps you to reflect! See you in the next post! \ud83c\udf39\u2764\ufe0f<\/p>\n\n\n\n<p>Cheers,<br>Gustavo Magella<br><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Introdu\u00e7\u00e3o<\/h1>\n\n\n\n[pt-br] E a\u00ed seus trem bunitows, tudo bem com voc\u00eas!? \ud83c\udf39\u2764\ufe0f\ud83d\ude80<\/p>\n\n\n\n<p>J\u00e1 faz algum tempo que comecei a escrever sobre minhas experi\u00eancias com exames de certifica\u00e7\u00e3o em tecnologia. Isso porque vejo muitas pessoas no LinkedIn e em outras redes sociais postando sobre seu progresso em diversas certifica\u00e7\u00f5es. Isso meio que se tornou um h\u00e1bito para mim. Eu tenho anota\u00e7\u00f5es sobre grande parte dos exames de certifica\u00e7\u00e3o que j\u00e1 fiz, sejam os resultados positivos ou negativos. Isso me faz refletir sobre a real import\u00e2ncia de cada exame e como foi a experi\u00eancia de passar por else.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"500\" height=\"280\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1246\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy.webp 500w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/001-giphy-300x168.webp 300w\" sizes=\"(max-width: 500px) 100vw, 500px\" \/><\/figure>\n<\/div>\n\n\n<p>O meu objetivo aqui no blog \u00e9 tamb\u00e9m compartilhar alguns artigos sobre essas experi\u00eancias. Eu acho muito importante compartilharmos essas viv\u00eancias, at\u00e9 mesmo para que possamos nos planejar e entender a aplicabilidade de determinado exame em nossas carreiras.<\/p>\n\n\n\n<p>Muitas vezes, optamos por fazer um exame acreditando que ele ser\u00e1 \u00fatil, mas durante o processo de aprendizado e sedimenta\u00e7\u00e3o do conhecimento necess\u00e1rio para passar, muitas vezes fica claro que um determinado exame ou certifica\u00e7\u00e3o n\u00e3o ir\u00e1 contribuir o quanto esper\u00e1vamos para nossa carreira. \u00c0s vezes, a certifica\u00e7\u00e3o possui um nome sugestivo e \u00e9 bem divulgada, mas em termos de densidade t\u00e9cnica e conte\u00fado, deixa a desejar.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"350\" height=\"263\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1248\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy.webp 350w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/002-giphy-300x225.webp 300w\" sizes=\"(max-width: 350px) 100vw, 350px\" \/><\/figure>\n<\/div>\n\n\n<p>Ou, ao contr\u00e1rio, pode ser uma certifica\u00e7\u00e3o que n\u00e3o \u00e9 t\u00e3o difundida e falada na nossa bolha, mas que traz um grande aprendizado e possui uma densidade t\u00e9cnica extremamente relevante para a carreira de v\u00e1rias pessoas.<\/p>\n\n\n\n<p>No post de hoje, vou falar sobre a minha experi\u00eancia ao fazer o exame da CSA, a Cloud Security Alliance, chamado CCZT (Certificate of Competence in Zero Trust).<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">O que \u00e9 o Exame CCZT\u200a\u2014\u200aCertificate of Competence in Zero&nbsp;Trust?<\/h1>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img decoding=\"async\" width=\"717\" height=\"327\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1249\" style=\"width:462px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image.png 717w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-300x137.png 300w\" sizes=\"(max-width: 717px) 100vw, 717px\" \/><\/figure>\n<\/div>\n\n\n<p>Esse exame fornece uma compreens\u00e3o profunda da arquitetura Zero Trust, seus impulsionadores, benef\u00edcios e como planejar sua ado\u00e7\u00e3o. Obter a CCZT \u00e9 fundamental para profissionais de seguran\u00e7a que buscam avan\u00e7ar em suas carreiras e para organiza\u00e7\u00f5es que precisam manter uma postura de seguran\u00e7a s\u00f3lida.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">T\u00f3picos Abordados<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Conceitos Fundamentais do Zero Trust:<\/strong> Conceitos gerais, defini\u00e7\u00f5es, objetivos e benef\u00edcios do Zero Trust.<\/li>\n\n\n\n<li><strong>Per\u00edmetro Definido por Software:<\/strong> Os princ\u00edpios fundamentais, tecnologias subjacentes, principais componentes arquitet\u00f4nicos, e benef\u00edcios tecnol\u00f3gicos e empresariais do SDP, uma solu\u00e7\u00e3o de ZTA.<\/li>\n\n\n\n<li><strong>Melhores Pr\u00e1ticas da Ind\u00fastria:<\/strong> Desenvolvimento de melhores pr\u00e1ticas em Zero Trust ao examinar fontes autorizadas, como o Modelo de Maturidade do Zero Trust da CISA e a Arquitetura Zero Trust do NIST (SP 800\u2013207), entre outras.<\/li>\n\n\n\n<li><strong>Arquitetura Zero Trust:<\/strong> Modelos l\u00f3gicos, componentes chave, fluxos de trabalho e design da Arquitetura Zero Trust.<\/li>\n\n\n\n<li><strong>Planejamento do Zero Trust:<\/strong> Exame aprofundado dos aspectos cruciais do planejamento do Zero Trust, desde considera\u00e7\u00f5es iniciais, como identifica\u00e7\u00e3o de stakeholders e defini\u00e7\u00e3o de suas superf\u00edcies de prote\u00e7\u00e3o, at\u00e9 pol\u00edticas de seguran\u00e7a organizacional e conformidade.<\/li>\n\n\n\n<li><strong>Implementa\u00e7\u00e3o do Zero Trust:<\/strong> Exame aprofundado dos aspectos cruciais da implementa\u00e7\u00e3o do Zero Trust, desde a cria\u00e7\u00e3o de documentos de in\u00edcio de projeto e planejamento de desastres, at\u00e9 a configura\u00e7\u00e3o do ambiente de rede, implanta\u00e7\u00e3o de agentes em dispositivos e adi\u00e7\u00e3o de automa\u00e7\u00e3o.<\/li>\n<\/ul>\n\n\n\n<h1 class=\"wp-block-heading\">Como se Preparar?<\/h1>\n\n\n\n<h3 class=\"wp-block-heading\">CSA CCZT Prep-Kit (100% Gratuito)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"618\" height=\"297\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1250\" style=\"width:472px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1.png 618w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-1-300x144.png 300w\" sizes=\"(max-width: 618px) 100vw, 618px\" \/><\/figure>\n<\/div>\n\n\n<p>A CSA oferece um <strong>prep-kit gratuito<\/strong> para te ajudar a se preparar para o exame. Esse kit \u00e9 super completo e tem todos os recursos que voc\u00ea precisa para estudar de forma eficaz. Ele inclui materiais detalhados que cobrem todos os t\u00f3picos importantes, garantindo que voc\u00ea adquira o conhecimento necess\u00e1rio para mandar bem na prova. Isso \u00e9 \u00f3timo para quem gosta de estudar por conta pr\u00f3pria, permitindo que voc\u00ea se prepare com confian\u00e7a e profundidade para a certifica\u00e7\u00e3o CCZT.<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/cloudsecurityalliance.org\/artifacts\/cczt-prep-kit\">https:\/\/cloudsecurityalliance.org\/artifacts\/cczt-prep-kit<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><br>Modelo de Maturidade Zero Trust da CISA&nbsp;(v2.0)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"452\" height=\"357\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1251\" style=\"width:353px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2.png 452w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-2-300x237.png 300w\" sizes=\"(max-width: 452px) 100vw, 452px\" \/><\/figure>\n<\/div>\n\n\n<p>Criado pela Ag\u00eancia de Seguran\u00e7a Cibern\u00e9tica e Infraestrutura (CISA), o Modelo de Maturidade Zero Trust \u00e9 uma ferramenta essencial que os estudantes do CCZT devem consultar ao se prepararem para o exame.<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/zero-trust-maturity-model\">https:\/\/www.cisa.gov\/resources-tools\/resources\/zero-trust-maturity-model<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Arquitetura Zero Trust do NIST (SP&nbsp;800\u2013207)<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"704\" height=\"471\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1252\" style=\"width:478px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3.png 704w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-3-300x201.png 300w\" sizes=\"(max-width: 704px) 100vw, 704px\" \/><\/figure>\n<\/div>\n\n\n<p>O documento de Arquitetura Zero Trust (ZTA) do Instituto Nacional de Padr\u00f5es e Tecnologia dos EUA (NIST) descreve o Zero Trust para arquitetos de seguran\u00e7a empresarial. Ele visa auxiliar a compreens\u00e3o da ZTA e fornecer um roteiro de implementa\u00e7\u00e3o empresarial para conceitos de seguran\u00e7a Zero Trust. (Eu tive a percep\u00e7\u00e3o que, +60% do exame foi retirado desse material.)<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/cloudsecurityalliance.org\/zt\/resources\/zero-trust-architecture-sp-800-207\/\">https:\/\/cloudsecurityalliance.org\/zt\/resources\/zero-trust-architecture-sp-800-207\/<\/a><\/p>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Relat\u00f3rio NSTAC: Zero Trust e Gerenciamento de Identidade Confi\u00e1vel<\/h3>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"408\" height=\"475\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1253\" style=\"width:318px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4.png 408w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-4-258x300.png 258w\" sizes=\"(max-width: 408px) 100vw, 408px\" \/><\/figure>\n<\/div>\n\n\n<p>O relat\u00f3rio do Comit\u00ea Consultivo de Telecomunica\u00e7\u00f5es de Seguran\u00e7a Nacional do Presidente dos EUA (NSTAC) foca em Zero Trust e Gerenciamento de Identidade Confi\u00e1vel.<\/p>\n\n\n\n<p>Esse relat\u00f3rio foi mencionado V\u00c1RIAS VEZES durante o exame, e foi usado como refer\u00eancia para algumas das quest\u00f5es que respondi<\/p>\n\n\n\n<p>Link: <a href=\"https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/\">https:\/\/cloudsecurityalliance.org\/zt\/resources\/report-to-the-president-on-zero-trust-and-trusted-identity-management\/<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Estrutura do&nbsp;Exame<\/h3>\n\n\n\n<p><strong>N\u00famero de Quest\u00f5es:<\/strong> 60<br><strong>Dura\u00e7\u00e3o do Exame:<\/strong> 2 Horas<br><strong>Pontua\u00e7\u00e3o para Aprova\u00e7\u00e3o:<\/strong> 80% (aproximadamente 48 a 50 quest\u00f5es)<br><strong>Tipo de Exame:<\/strong> Open Book (Ou seja, consultas s\u00e3o permitidas durante o exame)<br><\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><strong>Dica Importante!<\/strong><\/p>\n<cite><em>Pode ser open-book, mas n\u00e3o subestime a dificuldade deste exame. As perguntas s\u00e3o selecionadas aleatoriamente do banco de quest\u00f5es do CCZT, ent\u00e3o \u00e9 essencial ter uma compreens\u00e3o s\u00f3lida de cada dom\u00ednio e das fontes autorizadas inclu\u00eddas nos materiais de estudo recomendados se voc\u00ea quiser passar.<\/em><\/cite><\/blockquote>\n\n\n\n<p>De acordo com a CSA, as quest\u00f5es s\u00e3o distribu\u00eddas da seguinte forma:<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"555\" height=\"340\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5.png\" loading=\"lazy\" alt=\"\" class=\"wp-image-1254\" style=\"width:507px;height:auto\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5.png 555w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/image-5-300x184.png 300w\" sizes=\"(max-width: 555px) 100vw, 555px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"has-text-align-center\"><em>Image: CCZT Knowledge Guide (by&nbsp;CSA)<\/em><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Avalia\u00e7\u00e3o do Exame (My Tech Two&nbsp;Cents)<\/h1>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"480\" height=\"262\" src=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy.webp\" loading=\"lazy\" alt=\"\" class=\"wp-image-1255\" srcset=\"https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy.webp 480w, https:\/\/blog.gustavomagella.com\/wp-content\/uploads\/2024\/06\/003-giphy-300x164.webp 300w\" sizes=\"(max-width: 480px) 100vw, 480px\" \/><\/figure>\n<\/div>\n\n\n<p>Com o intuito de aprofundar a minha an\u00e1lise e organizar as minhas ideias e opini\u00f5es sobre este exame de forma l\u00f3gica, aceit\u00e1vel e compreens\u00edvel para todos voc\u00eas, decidi criar uma matriz de avalia\u00e7\u00e3o baseada em 5 pilares: densidade t\u00e9cnica, conte\u00fado do curso versus o exame, relev\u00e2ncia e aplicabilidade do conte\u00fado na vida real, experi\u00eancia do exame e custo versus benef\u00edcio.<\/p>\n\n\n\n<p class=\"has-small-font-size\">Dessa forma, pretendo atribuir uma nota de 0 a 10, de acordo com a minha opini\u00e3o, para cada um desses 5 pilares.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1) Densidade T\u00e9cnica&nbsp;(0\u201310)<\/h3>\n\n\n\n<p>Nota: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/p>\n\n\n\n<p>Este exame possui uma excelente densidade t\u00e9cnica e \u00e9 muito bem fundamentado. Primeiramente, a CSA levou em considera\u00e7\u00e3o o CISA Zero Trust Maturity Model (v2.0), o NIST Zero Trust Architecture (SP 800\u2013207), e o NSTAC Report: Zero Trust and Trusted Identity Management. Baseando-se nesses tr\u00eas documentos (que eles chamam de Authoritative Sources), a CSA construiu um exame MUITO rico em detalhes e embasamento t\u00e9cnico.<\/p>\n\n\n\n<p>Diferente de muitos exames no mercado da tecnologia, este n\u00e3o \u00e9 baseado em produtos espec\u00edficos, ou seja, n\u00e3o \u00e9 um teste para verificar sua profici\u00eancia em um produto ou tecnologia de um fabricante.<\/p>\n\n\n\n<p>Ficou muito claro durante o exame e durante todo o preparo que o compromisso da CSA \u00e9, de fato, construir uma base s\u00f3lida de conhecimento sobre Zero Trust, totalmente agn\u00f3stica. \ud83c\udf39\u2764\ufe0f<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2) Conte\u00fado do Curso vs. Exame&nbsp;(0\u201310)<\/h3>\n\n\n\n<p>Nota: 8\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u274c\u274c<\/p>\n\n\n\n<p>Primeiramente, recomendo que voc\u00ea compre o curso oficial oferecido pela CSA para se preparar para este exame.<\/p>\n\n\n\n<p><strong>Link:<\/strong> <a href=\"https:\/\/knowledge.cloudsecurityalliance.org\/certificate-of-competence-in-zero-trust-cczt\">https:\/\/knowledge.cloudsecurityalliance.org\/certificate-of-competence-in-zero-trust-cczt<\/a><\/p>\n\n\n\n<p>O material e o curso oficiais s\u00e3o muito bem escritos, apresentados e estruturados, cobrindo todos os t\u00f3picos e informa\u00e7\u00f5es necess\u00e1rias para o exame. Em minha experi\u00eancia com outros exames, como os do ISC2, algumas quest\u00f5es solicitadas no exame s\u00e3o diferentes do que foi coberto no curso.<\/p>\n\n\n\n<p>No entanto, o curso da CSA foi bem estruturado para cobrir todas as quest\u00f5es do exame. Se voc\u00ea fez o curso oficial, est\u00e1 apto a fazer o exame. Vale ressaltar que, durante o curso, o instrutor \u00e0s vezes mencionava conceitos que n\u00e3o estavam t\u00e3o bem descritos no material escrito no PPT. Portanto, sugiro que voc\u00ea preste muita aten\u00e7\u00e3o no curso, anote os conceitos explicados pelo instrutor e cruze essas informa\u00e7\u00f5es com o conte\u00fado do PPT.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3) Relev\u00e2ncia e Aplicabilidade do Conte\u00fado na Vida Real&nbsp;(0\u201310)<\/h3>\n\n\n\n<p>Nota: 7\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u274c\u274c\u274c<\/p>\n\n\n\n<p>Durante o processo de aprendizado e ap\u00f3s ter feito o exame, consegui perceber que o exame possui muita relev\u00e2ncia e o conte\u00fado coberto pelo curso pode ser bem utilizado no dia a dia. No entanto, grande parte do curso foca na abordagem de arquitetura chamada SDP e n\u00e3o tanto em outras abordagens.<\/p>\n\n\n\n<p>Zero Trust \u00e9 uma abordagem que n\u00e3o est\u00e1 amarrada a uma tecnologia espec\u00edfica, por isso senti falta de a CSA explicar mais detalhadamente outras op\u00e7\u00f5es e abordagens dispon\u00edveis para a aplica\u00e7\u00e3o do conceito de Zero Trust.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4) Experi\u00eancia do Exame&nbsp;(0\u201310)<\/h3>\n\n\n\n<p>Nota: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/p>\n\n\n\n<p>Minha experi\u00eancia na plataforma onde o exame \u00e9 realizado foi muito positiva e agrad\u00e1vel. N\u00e3o \u00e9 necess\u00e1rio instalar nada no computador, n\u00e3o h\u00e1 necessidade de entrar em uma sess\u00e3o monitorada, pois \u00e9 um exame open book, permitindo consultas durante a prova. Voc\u00ea tem 2 horas para concluir 60 quest\u00f5es.<\/p>\n\n\n\n<p>Contudo, tome cuidado, pois ser um exame open book pode levar algumas pessoas a negligenciarem a prepara\u00e7\u00e3o, acreditando que poder\u00e3o consultar a qualquer momento. As quest\u00f5es s\u00e3o complexas e densas, com muitas pegadinhas. V\u00e1 preparado, assista ao curso, fa\u00e7a suas anota\u00e7\u00f5es, pois a chance de n\u00e3o ser aprovado \u00e9 alta. <strong>Eu mesmo n\u00e3o passei na primeira tentativa<\/strong>, mas na segunda, ap\u00f3s revisar e estudar novamente, consegui passar com <strong>88%.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5) Custo vs. Benef\u00edcio (0\u201310)<\/h3>\n\n\n\n<p>Nota: 10\u201310 \u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50\u2b50<\/p>\n\n\n\n<p>A CSA oferece um produto chamado CSA Bundle, que inclui o curso oficial necess\u00e1rio para a prova e duas tentativas de fazer o exame, pelo valor de <strong>455 USD<\/strong>.<\/p>\n\n\n\n<p>Na minha opini\u00e3o, \u00e9 um valor muito razo\u00e1vel, considerando que certifica\u00e7\u00f5es da Microsoft custam cerca de 100 a 150 USD apenas pelo exame, e outras certifica\u00e7\u00f5es como CompTIA podem custar cerca de 375 USD <strong>sem o curso.<\/strong><\/p>\n\n\n\n<p>O bundle da CSA, que inclui o curso oficial e duas tentativas de exame, \u00e9 extremamente razo\u00e1vel. Caso voc\u00ea prefira estudar por conta pr\u00f3pria, a CSA oferece um kit preparat\u00f3rio fant\u00e1stico e completo para o exame gratuitamente, e voc\u00ea pode comprar apenas o token do exame por 175 USD, que tamb\u00e9m inclui duas tentativas.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Finalizando (Wrapping-up)<\/h3>\n\n\n\n<p>IMHO (My Tech Two Cents), o exame CCZT \u00e9, de fato, um exame muito importante para quem est\u00e1 optando por seguir uma carreira em seguran\u00e7a na nuvem. Foi um exame muito bem pensado e constru\u00eddo que me trouxe muito conhecimento e uma base t\u00e9cnica s\u00f3lida. Meu primeiro contato com Zero Trust foi atrav\u00e9s de sess\u00f5es de treinamento da ZScaler e Illumio, mas, para ser honesto, foi uma abordagem mais \u201ccentrada em produtos\u201d do que \u201cagn\u00f3stica\u201d e \u201carquitetural\u201d.<\/p>\n\n\n\n<p>O exame da CSA me proporcionou um panorama de possibilidades e solidificou meu conhecimento sobre componentes arquitet\u00f4nicos, considera\u00e7\u00f5es e restri\u00e7\u00f5es de projetos, planejamento e design, entre outros. \u00c9 um marco na carreira de qualquer pessoa que busca construir e sedimentar conceitos de seguran\u00e7a na nuvem e estrat\u00e9gia arquitet\u00f4nica. Obrigado, CSA!<\/p>\n\n\n\n<p>No vemos no pr\u00f3ximo post! \ud83d\ude42<\/p>\n\n\n\n<p>Um bjo no cora\u00e7\u00e3o e se cuidem!\ud83c\udf39\u2764\ufe0f<br>Gustavo Magella<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Considering the CCZT exam? Gustavo Magella shares his experience and evaluates technical density, real-life scenarios, and cost-benefit. Check out his evaluation matrix to decide. This article discusses the importance of technology certification exams for career advancement. Don&#8217;t miss this fascinating read!<\/p>\n","protected":false},"author":2,"featured_media":1281,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,20],"tags":[24,23],"class_list":["post-1242","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-01-my-tech-two-cents","category-02-tech-certifications","tag-en-gb","tag-pt-br"],"menu_order":0,"_links":{"self":[{"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/posts\/1242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/comments?post=1242"}],"version-history":[{"count":18,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/posts\/1242\/revisions"}],"predecessor-version":[{"id":1271,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/posts\/1242\/revisions\/1271"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/media\/1281"}],"wp:attachment":[{"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/media?parent=1242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/categories?post=1242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.gustavomagella.com\/index.php\/wp-json\/wp\/v2\/tags?post=1242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}