1. Describe Cloud Concept: Unit 4: Describe the Shared Responsibility Model Flashcards
In a traditional data center, what are the responsibility of the company itself?
ALL. The company is responsible for maintaining the physical space, ensuring security, and maintaining or replacing the servers if anything happens. The IT department is responsible for maintaining all the infrastructure and software needed to keep the datacenter up and running. They’re also likely to be responsible for keeping all systems patched and on the correct version.
What is shared responsibility in cloud computing?
Shared responsibility in cloud computing refers to the model where certain responsibilities are divided between the cloud provider and the consumer.
What are the cloud provider’s responsibilities in the shared responsibility model?
The cloud provider manages infrastructure-related tasks, while the consumer is responsible for securing their data and access to it.
The cloud provider is responsible for physical security, power, cooling, and network connectivity.
Why is the consumer not responsible for physical security, power, cooling, and network connectivity in the shared responsibility model?
Because the consumer isn’t collocated with the datacenter, so it wouldn’t make sense for them to handle those responsibilities.
What is the consumer responsible for in the shared responsibility model?
The consumer is responsible for the data and information stored in the cloud and access security.
Why is the consumer responsible for access security in the shared responsibility model?
The consumer is responsible for ensuring that only authorized users have access to the data, as they should control who can read their information.
How does the shared responsibility differ when using a cloud SQL database versus a virtual machine with an installed SQL database?
With a cloud SQL database, the cloud provider is responsible for maintaining the actual database, but the consumer is responsible for the data ingested into the database. If using a virtual machine with an installed SQL database, the consumer is responsible for database patches, updates, and maintaining the data.
What is the consumer’s responsibility in an on-premises datacenter?
In an on-premises datacenter, the consumer is responsible for everything, including infrastructure, security, and data.
How does the shared responsibility model differ across cloud service types?
The shared responsibility model varies based on the cloud service type:
IaaS places the most responsibility on the consumer.
PaaS evenly distributes responsibility between the cloud provider and the consumer.
SaaS places most of the responsibility on the cloud provider.
Which cloud service model places the most responsibility on the consumer?
Infrastructure as a Service (IaaS) places the most responsibility on the consumer, with the cloud provider being responsible only for the basics like physical security, power, and connectivity.
Which cloud service model places most of the responsibility on the cloud provider?
Software as a Service (SaaS) places most of the responsibility on the cloud provider.
How does the Shared Responsibility Model inform who is responsible for what, depending on the cloud service type?
(Answer: Once you have memorized the diagram in your gallery, this will outline the division of responsibilities between the cloud provider and the consumer across different cloud service types.)
When using a cloud provider, what will you always be responsible for?
You’ll always be responsible for:
The information and data stored in the cloud
Devices allowed to connect to your cloud (e.g., cell phones, computers)
Accounts and identities of people, services, and devices within your organization
What is the cloud provider always responsible for?
The cloud provider is always responsible for:
The physical datacenter
The physical network
The physical hosts
How does the service model affect responsibility in the shared responsibility model?
Your service model (IaaS, PaaS, SaaS) will determine responsibility for things like:
Operating systems
Network controls
Applications
Identity and infrastructure
