CH13 Cloud Security Flashcards
What is Hyperconvergence?
Hyperconvergence allows providers to fully integrate the storage, network, and servers
What is VDI?
VDI = Virtual Desktop Infrastructure
VDI allows a cloud provider to offer a full desktop operating system to an end user from a centralized server
What is Secure Enclaves ?
Secure Enclaves is a technique that utilizes two distinct areas that the data may be stored and accessed from. Each enclave can be accessed by the proper processor
What is Secure Volumes ?
a method of keeping data at rest, secure from prying eyes. When data on the volume is needed, a secure volume is mounted and it’s properly decrypted to allow that access. Once the volume is no longer needed, it’s encrypted again and unmounted from the virtual server
What are 4 types of Cloud?
Public,
Private,
Hybrid,
Community
What is a public cloud?
A service provider makes resources available to the end users over the internet.
What is a private cloud?
A company creates its own cloud environment that only it can utilize as an internal enterprise resource.
Private cloud should be chosen when security is more important than cost.
What is a Hybrid cloud?
Some resources are developed and operated by the organization itself like a private cloud would be, but the organization can also utilize the publicly-available resources or outsource services to another service provider like a public cloud does
What is Community Cloud?
Resources and costs are shared among several different organizations who have common service needs. Similar to taking several private clouds and connecting them together.
What are 4 types of cloud services?
Infrastructure as a Service (Iaas),
Platform as a Service (PaaS),
Software as a service (SaaS),
and Security as a Service (SECaaS).
What is Iaas?
IaaS = Infrastructure as a Service
Provides all the hardware, operating system, and backend software needed in order to develop your own software or service
What is PaaS?
PaaS = Platform as a Service
Provides your organization with the hardware and software needed for a specific service to operate
What is SaaS
SaaS = Software as a Service
Provides all the hardware, operating system, software, and applications needed for a complete service to be delivered
What is SECaaS?
SECaaS = Security as a Service
Provides your organization with various types of security services without the need to maintain a cybersecurity staff
What is Sandboxing in terms of Cloud computing?
utilizes separate virtual networks to allow security professionals to test suspicious or malicious files
What are some of the Cloud Security vulnerabilities?
- If physical sever crashes due to something one organization does, it can affect all of the organizations hosted on that same physical server.
- Collocated data can become a security risk. You need to configure, manage, and audit user access to virtualized servers.
- Utilizing the cloud securely requires good security policies.
- Data remnants may be left behind after deprovisioning. Data should always be encrypted when placed in the cloud server.
How would you defend file servers?
use proper data encryption, should have monitoring and logging on it, should have a good host-based intrusion detection system. May want data loss prevention applications to ensure the data isn’t stolen
How would you defend Email Servers ?
use hardening techniques. Spam filtering installed, antivirus, scan and quarantine all the attachments being sent or received by the users
How would you defend Web servers ?
Should be placed in DMZ. Firewalled, monitored, logged, audited, and patched
How would you defend FTP server?
always enforce encrypted connection using transport layer security or TLS
How would you defend Domain Controller (Active Directory or LDAP)?
this server acts as the central repository of all of your user accounts, your computer accounts, and their associated passwords for the network.
Make sure that Active Directory controller is up to date on its patches, its configurations are hardened, and that It’s secure and in place in your network.
What is Golden ticket attack?
uses a program known as Mimikatz to exploit a vulnerability in the Kerberos ticket-granting system, to generate a ticket that acts as a skeleton key for all of the devices in the domain
What is VPC?
VPC = Virtual Private Cloud
A private network segment made available to a single cloud consumer within a public cloud
VPC is typically used to provision internet-accessible applications that need to be accessed from geographically remote sites
what is CASB?
CASB = Cloud Access Security Broker
Enterprise management software designed to mediate access to cloud services by users across all types of devices. It is a middle man that helps you with your authentication and ensure that people are using the services they’re supposed to use
CASB provide visibility into how clients and other network nodes use cloud services.
