Chapter 4 Virtualization and Cloud Concepts Flashcards
In a cloud environment, what is elasticity?
Elasticity allows you to increase and decrease cloud resources as you need them.
In which cloud environment would you install the software and then have to update the patches?
Infrastructure as a Service (IaaS) requires you to install the operating systems and patch the machines. The CSP provides bare-metal computers.
What cloud model would you not be allowed to migrate to?
SaaS is a custom application written by a vendor, and you cannot migrate to it.
What is the major benefit of using a public cloud?
The major benefit of a public cloud is that there is no capital expenditure.
What is a cloud single-tenant model?
A private cloud is a single-tenant setup in which you either own the hardware or the CSP puts you on hardware that’s isolated from its other customers.
What is a cloud multi-tenant model?
A public cloud is multi-tenant.
Describe how a community cloud operates
With a community cloud, people from the same industry (such as a group of lawyers) design and share the cost of a bespoke application and its hosting, making it cost-effective.
Who is responsible for the disaster recovery of hardware in a cloud environment?
The CSP is responsible for hardware failure.
What is a Cloud Access Security Broker (CASB)?
The CASB enforces security, updates clients, and ensures that the policies between the on-premises situation and the cloud are enforced.
What model is it if you own the premises and the entire IT infrastructure resides there?
On-premises means you own the building and work solely from there.
What is a hybrid cloud model?
A hybrid cloud is where a company is using a mixture of on-premises and the cloud.
What type of cloud service deals with identity management?
Security as a Service (SECaaS) provides secure identity management.
Where will a diskless virtual host access its storage?
A diskless virtual host will get its disk space from an SAN
If you have a virtual switch that resides on a SAN, what connector will you use for a VLAN?
A VLAN on a SAN will use an iSCSI connector.
What type of disks does a SAN use?
An SAN will use fast disks, such as SSDs
What is the machine that holds several VMs called?
A host (Hypervisor) holds a number of virtual machines; it needs fast disks, memory, and CPU cores.
What is a guest, and what can you use as a rollback option?
A guest is a virtual machine-for example, a Windows 10 virtual machine. A snapshot can be used to roll back to a previous configuration.
In a virtual environment, what is sandboxing?
Sandboxing is a cybersecurity practice in which you isolate an application for patching or testing or because it is dangerous.
Which is faster for data recovery: a snapshot or a backup tape?
A snapshot is faster at recovering than any other backup solution. You can restore a snapshot in seconds.
What is a Type 1 hypervisor?
A Type 1 hypervisor is a bare-metal hypervisor. Some examples are Hyper-V, ESX, and Xen
What is a Type 2 hypervisor?
A Type 2 hypervisor is a hypervisor that sits on top of an operating system, for example, VirtualBox, which could be installed on a Windows 10 desktop.
Why does HVAC produce availability for a data center?
HVAC keeps the servers cool by importing cold air and exporting hot air. If a server’s CPU overheats, it will cause the server to crash
What do you call the cloud model where people from the same industry share resources and the cost of the cloud model?
A community cloud is where people from the same industry share resources.
What is an example of cloud storage for a personal user?
Cloud storage for personal users could be iCloud, Google Drive, Microsoft OneDrive, or Dropbox.
Explain the functionality of fog computing.
Fog computing is an intermediary between the device and the cloud. It allows the data to be processed closer to the device. It reduces latency and cost.
What is edge computing?
Edge computing allows data storage to be closer to the sensors rather than miles away in a data center.
What are containers?
A container allows the isolation of the applications and their files and libraries so that the application is independent. Docker is a good example.
What is infrastructure as code?
Infrastructure as code allows you to automate your infrastructure-for example, using PowerShell DSC.
Describe services integration.
This is the combination of business and IT functions into a single business solution.
What are cloud resource policies?
These are policies that state the actions and access levels someone has in relation to a particular resource.
What is system sprawl, and what is a way to prevent it?
This is where a virtual machine or host has run out of resources. The best way to avoid this is to use thin provisioning.
What is the best way to protect against VM escape?
n VM escape, an attacker will use a vulnerable virtual machine to attack the host of another virtual machine. The best protection against this attack is to ensure that the hypervisor and all virtual machines are fully patched.
What is a cloud region, and how can it provide redundancy?
A cloud region consists of multiple physical locations called zones; data can be spread across multiple zones for redundancy.
What is secret management, and what encryption levels protect the secret management key?
Secrets management uses a vault to store keys, passwords, tokens, and SSH keys used for privileged accounts. It uses RSA 2048-bit keys to protect the secret management access key.
Explain the main difference between LRS and ZRS. Which one is the cheapest?
LRS replicates three copies of your data to a single physical location. This is the cheapest option. ZRS is where three copies of the data are replicated to three separate zones within your region.
Why would a VPC use private and public subnets?
They would be used as a form of network segmentation.
What type of resources would be held on a public subnet?
Resources that need access to the internet, for example, company web servers. A NAT gateway and an internet gateway would also be on these subnets.
What type of resources would be held on a private subnet?
Resources that should not have direct internet access, such as database servers, domain controllers, and email servers.
How would someone connect to a VPC?
A VPN connection using L2TP/IPSec should be used to connect to a VPC.
Where should a default route be pointing for a device within a private subnet, and what is its purpose?
The default route of 0.0.0.0 should be pointing to either the NAT gateway or the internet gateway. When network traffic does not know where to go, it will be sent to the default route as a last resort.
Why might a third-party cloud solution be better than a cloud-native solution?
The third-party tools will offer more flexibility.
