10: Cloud & Virtualization Security Flashcards
What are the three major cloud service models?
Infrastructure-as-a-service (IaaS), Software-as-a-service (SaaS), Platform-as-a-service (PaaS)
These models represent different levels of service and management in cloud computing.
What does Infrastructure-as-a-service (IaaS) provide?
Basic building blocks of a technology infrastructure
Customers can purchase and interact with virtualized computing resources over the internet.
What is the primary function of Software-as-a-service (SaaS)?
Access to a fully managed application running in the cloud
Users do not need to manage or control the underlying infrastructure.
What does Platform-as-a-service (PaaS) offer customers?
A platform to run applications developed by the customers themselves
It provides a framework for developers to create applications without worrying about the infrastructure.
Describe the public cloud deployment model.
Infrastructure accessible to any customers in a multitenant model
Public cloud services are provided over the internet and shared among multiple users.
What is a private cloud?
Cloud infrastructure provisioned for use by a single customer
Offers greater control and security for sensitive data.
What characterizes a community cloud service?
Shares characteristics of both public and private models; multitenant environment limited to a specific community
Designed for organizations with shared concerns.
Define hybrid cloud.
Cloud deployments that blend public, private, and/or community cloud services
Allows data and applications to be shared between them.
What is the shared responsibility model of cloud security?
Division of responsibilities between service providers and customers’ cybersecurity teams
Ensures both parties understand their security obligations.
In an IaaS environment, what is the provider responsible for?
Security for everything below the operating system layer
The customer is responsible for everything above that layer.
What additional responsibility does a cloud provider take on in a PaaS environment?
Security of the operating system itself
This includes managing the underlying infrastructure and platform.
In a SaaS environment, what is the cloud provider responsible for?
Security of the entire environment except for access control configuration and data choice
Customers must manage how they access and use the application.
What should cloud customers understand to implement appropriate security controls?
Controls offered by providers and third parties
This includes how to maintain resource policies and ensure high availability.
From a storage perspective, what should cloud customers consider?
Permissions, encryption, replication, high availability
Ensures data security and reliability.
What network design considerations should cloud customers keep in mind?
Design of virtual networks with public and private subnets for appropriate segmentation
Helps in managing access and security.
What should customers do from a compute perspective in cloud security?
Design security groups to restrict network traffic and maintain instance security
Protects against unauthorized access and threats.
