Cloud concepts Flashcards

1
Q

Scalability

A

It’s possible to adjust resources per demand, e.g. if there’s an increase in traffic and the systems get overloaded, more resources can be added to manage this. The same goes if there’s a decrease in traffic and resources can be cut down.

Scalability can be
- Vertical: add/remove processing power and RAM to a VM, needs downtime to update
- Horizontal: Add/remove resources, like VMs, either automatically or manually

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Reliability

A

The ability for a system to recover from failures and continue to function. A decentralized cloud allows for deployment in multiple regions and enable applications to automatically shift to another server or data center if the one in use goes down.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Predictability

A

Performance and costs are highly predictable, thanks to autoscaling and load balancing, and the ability to track and monitor resource use in real time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Governance

A

The ability for deployed resources to meet corporate standards and government regulatory requirements. Mainly used for IaaS and SaaS, and is ensured through set templates. Depending on operating model, software patches and updates can be automatically applied.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Security

A

Managing security for OSs and software, like patches and maintenance. Manually for IaaS, and automatically for PaaS and SaaS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Manageability

A

There are two types of manageability:
- Management OF the cloud: managing resources like automatic scaling, preconfigured templates, monitor health of resource deployment, receive automatic alerts.
- Management IN the cloud: manage cloud environments and resources through a web portal, CLI, APIs or PowerShell.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Infrastructure as a Service (IaaS)

A

A cloud service model that only provides hardware, network connectivity, and physical security - it’s like renting space in a datacenter. Everything else, like OS installation, configuration, maintenance, network configuration, database, and storage configuration, software updates and patches, is up to the user.

Useful for:
- Lift-and-shift migration (create cloud resources similar to an on-premises datacenter)
- Testing and development (establish replicated configurations for development and test environments)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Platform as a Service (PaaS)

A

A cloud service model that provides everything in an IaaS (hardware, network, physical security), but also OSs, middleware, development tools, and BI services.

Useful for:
- Development frameworks (cloud-based applications)
- Analytics or BI (thanks to the included tools for analyzing and mining data)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Software as a Service (SaaS)

A

Complete cloud service model with a fully developed application (like e-mail, financial software, messaging applications, e.g. Office 365).

It’s the least flexible model, but the easiest to get up and running, since it requires the least amount of technical knowledge.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Shared Responsibility Model

A

Applies to all service models, and divides the responsibility between provider and user.

The provider is always responsibly for the physical aspects like datacenter, network, and hosts, and the user for information and data, devices allowed to connect, and accounts and identities.

Depending on which service model is used the responsibility shifts:
- IaaS: places most on consumer (besides the physical), like software, networks etc.
- PaaS: shared evenly
- SaaS: most on provider (except information, devices, and accounts or identities)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Cloud models

A

There are different cloud models:
- Private cloud: either on-premises or an offsite datacenter, used by a single entity (company or organization). Provides greater control, but costs more (hardware, networks etc) and lacks some benefits that are provided in a public cloud.
- Public cloud: built, controlled, and maintained by a third-party cloud provider (like Microsoft, Amazon, or Google), whose services anyone can use.
- Hybrid cloud: an interconnected environment that uses both private and public clouds. Can be used to provide increased and temporary resources to a private cloud, an extra layer of security, or just share a flexible infrastructure with mixes resources.
- Multi-cloud: Using multiple cloud providers (like Azure, AWS, and GCP), where resources and security in more than one environment can be managed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Consumption-based model

A

There are two types of expenses to consider when comparing IT infrastructures:
- Capital expenditure (CapEx): one-time, up-front costs to purchase or secure tangible resources (hardware, property etc)
- Operational expenditure (OpEx): spending money on services or products over time. This is the type of expenditure cloud computing falls under, since you only pay for the resources you use (no tangible assets).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Resource

A

The basic building block in clouds and is anything you create, provision, or deploy: VMs, VNs, DBs, services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Resource groups

A

A group of resources. Can contain multiple resources, but a resource can only belong to one group. Can’t be nestled (i.e. can’t put a group in another group). It’s possible to apply actions, which will be applied to all resources in that resource group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Subscription

A

A unit of management, billing, and scale. Logically similar to resource groups (in which you logically organize resources), since you can organize resource groups.

A subscription is needed to use Azure, and is linked to an Azure account, which provides authenticated and authorized access to products and services.

An account can have multiple subscriptions, with different billing models, access-management policies, defined boundaries.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Management groups

A

Used to manage access, policies, and compliance for multiple subscriptions, and provide a level of scope above these. Can be nestled.

17
Q

Zero Trust Model

A

A model that assumes the worst case scenario, that here is a breach at the outset, and protects resources with that expectation by verifying each request as though it originated from an uncontrolled network.

Based on three guiding principles:
- Verify explicitly: always authenticate and authorize based on all available data points
- Use least privilege access: limit access with Just-In-Time and Just-Enough-Access, risk-based adaptive policies, and data protection
- Assume breach: minimize blast radius and segment access, verify end-to.-end encryption, use analytics to get visibility, drive threat detection, and improve defenses

18
Q

Defence-in-depth

A

A concept of protecting information, that uses a series of mechanisms that Azure provides tools for. Can be visualized as a set of layers:
1. Physical layer - protects hardware in a datacenter
2. Identity and access - controls access to infrastructure and change control
3. Perimeter - DDoS protection to filter large-scale attacks
4. Network - limits communication between resources through segmentation and access controls
5. Compute - secures access to VMs
6. Application - ensures that apps are secure and free of security vulnerabilities
7. Data - controls access to business and customer data that need protection