3-Cloud computer

Question 1

Software-as-a Service

Answer 1

Application provider hosts application on its own infrastructure and users access it.

Question 2

Infrastructure-as-a-Service (IaaS)

Answer 2

A cloud provider is providing only virtual machines

Question 3

Platform-as-a-Service

Answer 3

A cloud provider is providing an application based or data based platform on which customers can develop and or/ integrate their application.

Question 4

Proof of concept

Answer 4

The organization infrastructure vendor, value-added reseller, or consultant to set up components in the organization’s environment and perform some simple integrations with existing systems.

Question 5

Change Management or change control

Answer 5

a formal process whereby every proposed change to an environment is required to be formally requested, reviewed, and approved before it is made.

Question 6

How to prevent unauthorized changes to application

Answer 6

1-Segregation of duties

2-Application code review - independent review to make sure that only approved changes are being made.

3-Least privilege access -granted access according to privilege.

4- File integrity checking : software to detect and report changes to files on a system.