Chapter 10: Cloud and Virtualization Security Flashcards
Name of the term that is a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.
Cloud Computing
The fact that many different users share resources in the same cloud infrastructure is known as _______.
Multitenancy
Cloud resources are available when and where you need them?
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
a. On-demand self-service computing
As the demand for a cloud-based service increases, customers can manually or automatically increase capacity of their operations.
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
b. Scalability
______ increases the capacity of existing servers. For example, you might change the number of CPU cores or the amount of memory assigned to a server.
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
c. Vertical Scaling
________ adds more servers to a pool of clustered servers.
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
d. Horizontal Scaling
Providers use this to track the number of seconds of processing you consume, the amount of storage you occupy, the number of log entries that you generate, and many other measures. They use this usage to determine the charge.
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
f. Measured Service
The speed of provision cloud resources and the ability to use them for short periods of time.
a. On-demand self-service computing
b. Scalability
c. Vertical Scaling
d. Horizontal Scaling
e. Elasticity
f. Measured Service
g. Agility and Flexibility
g. Agility and Flexibility
________ are the firms that offer cloud computing services to their customers.
Cloud service providers
_____ are the organizations and individuals who purchase cloud services from cloud service providers.
Cloud Consumers
______ are organizations that offer ancillary products or services that support or integrate with the offerings of a cloud service provider.
Cloud Partners
_________ are independent organizations that provide third party assessments of cloud services and operations.
Cloud Auditors
______ serve as the intermediaries that provide the connectivity that allows the delivery of cloud services from providers to consumers.
Cloud Carriers
________ offerings allow customers to manage and configure computing, storage and networks. The customer does not need to worry about the underlying hardware.
Infrastructure as a service
_________ offerings provide customers with access to a fully managed application running in the cloud. The provider is responsible for everything from the operation of the physical datacenters to the performance management of the application itself.
Software as a Service (SaaS)
_______ offerings provide the customer with managing their own server where they may run applications. Infrastructure is managed by the provider.
Platform as a service
________ platforms are an example of PaaS computing. This approach allows the customers to upload their own code functions to the provider and then the provider will execute those functions on a scheduled basis.
Function as a Service
Serverless computing environments are an example of ________.
Function as a Service
________ are service organizations that provide information technology as a service to their customers. They may handle an organization’s IT needs completely, or they may offer focused services such as network design and implementation, application monitoring, or cloud cost management.
Managed Service Providers
________ allocates large volumes of storage for use by virtual server instances. These volumes are then formatted as virtual disks by the operating system on those server instances and used as they would a physical drive.
Block Storage
________ provides customers with the ability to place files in buckets and treat each file as an independent entity that may be accessed over the web or through the provider’s API.
Object Storage
AWS simple storage service is an example of _________.
object storage
EBS is an example of __________.
Block Storage
Name 3 security considerations mentioned from the book to keep in mind when working with cloud storage.
- Set Permissions Properly
- Consider high availability and durability options.
- Use encryption to protect sensitive data.
Cloud networks supports ____________.
Software Defined Networking
VPC
Virtual Private Cloud
______ allows network engineers to place systems of differing security levels and functions on different network subnets.
Segmentation
Using ____, teams can group systems into subnets and designate those subnets as public or private, depending on whether access to them is permitted from the internet.
VPC
What do VPC endpoints offer?
They allow the connection of VPCs to each other using the cloud provider’s secure network backbone.
Cloud _______ extend VPC endpoints by allowing the direct interconnection of cloud VPCs with on-premises VLANs for hybrid cloud operations.
Transit Gateways
A principle that states that data is subject to the legal restrictions of any jurisdiction where it is collected, stored, or processed.
Data Sovereignty
VM sprawl
IaaS users create a virtual service instances then abandons them.
_________ are software tools that serve as intermediaries between cloud service users and cloud service providers.
Cloud access security brokers (CASBs)
______ CASB solutions physically or logically reside in the connection path between the user and the service. They may do this through a hardware appliance or an endpoint agent that routes requests through the CASB.
Inline CASB
______ CASB solutions do not interact directly with the user but rather interact directly with the cloud provider through the provider’s API.
API-based CASB
Which CASB solution blocks requests that violate the policy.
Inline CASB solution. API-based CASB solution does not allow that.
Cloud providers offer ______ that customers use to limit the actions that users of their accounts may take.
Resource policies
