3.6 cards

Question 1

What is an Availability Zone (AZ)

Answer 1

Isolated locations with a cloud region

Each AZ has independent power, HVAC, and networking

Question 2

Name the two encryption types and name some attributes associated with them

Answer 2

Server-side encryption
- Encrypt data in the cloud
- Data is encrypted when stored on disk
Client-side encryption
- Data is already encrypted when it's sent to the cloud
- performed by the application

Question 3

What is Identity and Access Management (IAM)

Answer 3

Used to define who gets access and who gets access to what

Question 4

What connects cloud compoents, allows users communication with the cloud, and allows cloud devices communicate between each other

Answer 4

Cloud Networks

Question 5

What are some differences between the private and public cloud

Answer 5

private cloud
- All internal IP addresses
- Connects to the private cloud over a VPN
- No access from the internet
public cloud
- External IP addresses
- Connects to the cloud from anywhere

Question 6

Virtualized security technologies

Answer 6

Web application Firewall (WAF)
Next-Generation Firewall (NGFW)
- Intrusion Prevention System (IPS)

Question 7

microservice architecture is the underlying application which is a security concern

Answer 7

API monitoring should include the following:

• View specific API queries
• Monitor incoming and outgoing data

Question 8

The IaaS component for the cloud computing environment. Also manages computing resources

Answer 8

Compute cloud Instances

Question 9

List security groups for Securing Compute Clouds

Answer 9

A firewall for compute instances
Layer 4 port number
Layer 3 address

Question 10

What is Dynamic Resource Allocation

Answer 10

Provision resources when they are needed
Scale up and down
Ongoing monitoring

Question 11

What is instance awareness

Answer 11

Granular security control

Ability to define and set policies

Question 12

This cloud security solution is great for determining visibility, compliance, threat prevention, and data security

Answer 12

CASB

- Cloud access security broker

Question 13

What are 4 factors associated with CASB

Answer 13

Visibility
Compliance
Threat prevention
Data security

Question 14

What does a Next-Gen Secure Web Gateway (SWG) do?

Answer 14

• Protects users and devices
• Go beyond URLs and GET requests
• Examine JSON strings and API requests
• Instance-aware security

Question 15

True or False, can a cloud have a firewall? If true, name some properties?

Answer 15

Control traffic flows in the cloud
Cost
Segmentation
OSI layers