Cloud Models & Roles Flashcards

1
Q

Cloud Application

A

An application that is accessed via the internet rather that installed and accessed locally

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Cloud Data Portability

A

The ability to easily move data from one cloud provider to another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Cloud Deployment Model

A

The way in which cloud services are made available through specific configurations that control the sharing of cloud resources with cloud users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

List Cloud Deployment Models

A

Public
Private
Community
Hybrid

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Cloud Resources

A

Compute, storage, and networking capabilities that a cloud provider shares with a cloud user including physical equipment located in the data centers and virtual resource like OS and apps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Cloud Services

A

Capabilities made available to a cloud user by a cloud provider through a published interface (e.g. mgmt console or CLI, etc.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Cloud Service Category

AKA

A

A collection of cloud services that share a common set of features or qualities

Cloud service categories are labelled XaaS (X as a Service)

AKA - Cloud Service Models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Cloud service customer data

A

Any data objects under the control of the cloud service customer and that were input to the cloud service by the cloud customer or generated by the cloud service on behalf of the cloud customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Cloud Service Derived Data

A

Any data objects under the control of the cloud service provider and that were derived by interaction of the cloud customer with the cloud service. Derived data may include access logs, utilization information and other forms of metadata

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Cloud Service Provider Data

A

Any data objects related to the operations of the cloud service and that are fully under the control of the cloud service provider. Provider data may include cloud service operational data, information generated by the cloud service provider to provide services, and similar data not owned or related to any specific cloud customer.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Private Cloud

A

Cloud deployment model where cloud services are provided to a single cloud service customer who controls their own cloud resources

can be hosted or on-prem; if compute, storage and network is reserved for just one customer it is a private cloud

Often used for legal or compliance or security purposes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Community Cloud

A

Cloud deployment model where cloud services are provided exclusively to a group of cloud service customers with similar requirements. It is common for at least one member of the community to control the cloud resources for the group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Hybrid Cloud

A

Cloud Deployment model that uses a combination of at least two different cloud deployment models (public, private or community)

Models are bound together by technology that enables data and application portability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Infrastructure as a Service

A

Cloud service category/model that provides infrastructure capabilities to the cloud service customer

Infrastructure service capability: The cloud customer can provision and maintain granular control over compute, storage, and network resources.

CSP retains ownership and maintains the underlying infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Platform as a Service

A

Cloud service category/model that provides platform capabilities to the cloud service customer

Platform service capability: The cloud customer can run code, develop, and test applications using programming libraries that are managed and controlled by the cloud service provider.

Operating systems and DBs provided.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Software as a service

A

Cloud service category that provides software/application capabilities to the cloud service customer

Software service capability: The cloud customer can use applications that are fully developed and managed by the cloud service provider.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

List key roles of the cloud service customer and activities they are responsible for?

ISO standard that defines the roles and responsibilities of CSC?

A

Cloud architect: Evaluates cloud technologies and services and designs the overall architecture of the cloud deployment to meet organizational requirements.

Cloud service user: Uses services provided by the CSP.

Cloud service administrator: Configures, manages, and monitors the use of cloud services.

1SO17789 CSC Role

18
Q

Key roles and activities performed by the cloud service partner?

A

Cloud auditor: Performs audits of cloud environments and provides audit reports.

Cloud service broker: Provides a marketplace for approved services, manages contracting, and securely integrates cloud services with on-prem applications.

19
Q

IaaS Key Benefits

A

Cost Efficiency - Trade CapEx (capital expenditure) for OpEx (Operational Expenditure); cloud provider pays for managing physical security and energy of data center; reduction of maintenance support and ownership costs

Availability and Reliability - customers can load balance and have redundancy across infrastructure spanning regions

Scalability -additional resources can be procured, provisioned, and expanded quickly and with ease to support growing demand

Metered pay per use

20
Q

PaaS Key Benefits

A

Cost efficiency: Devs pay only for cloud resources they use

Flexibility: Devs can switch between OS and software versions

Simplicity: Infrastructure and OS managed by CSP, so devs don’t have to patch and upgrade OS or libs

Ease of access: Access dev environments from anywhere in the world and makes it easy to collaborate and share information

21
Q

SaaS Key Benefits

A

Cost Efficiency: Eliminates the need for Sys Admins and dedicated HW/SW.

Licensing: Effectively lease or borrow license as software is used, eliminating the need to purchase a full set of licenses. Use discounts realized by CSP, because the CSP has larger scale.

Standardization: Consistent experience for users because cloud provides standardized application, with the latest and greatest versions of software, with little to no action take by customer

22
Q

Public Cloud

A

A set of cloud computing services that can be accessed by anyone willing and able to pay for them; May be owned by business, academic or government organization

23
Q

Public Cloud Benefits

A

Easy to set up and manage
Highly scalable resources
Resource efficiency and cost effective

24
Q

Benefits of Private Cloud

A

Increased Ownership and Governance

High level of system and data control

25
Q

Community Cloud Benefits

A

Mirror public cloud (Easy to set up and and manage, Highly scalable, resource efficiency and cost Effective)

Common set of requirements ensures the cloud meets these requirements

26
Q

Hybrid Cloud Benefits

A

Reuse of existing infrastructure and technology: already have infrastructure from private or community cloud, but want the benefits of public cloud or may have to maintain some private/community cloud for compliance/legal/business reasons

Control over critical or sensitive systems: keep sensitive data in private/community cloud while allowing less sensitive data in public cloud

Disaster recovery support: Benefit from redundancy and reliability assurance of public cloud, for customers that already have private cloud

27
Q

Cloud (service) provider (CSP)

A

An entity making cloud services available for use.

The vendor offering cloud services.

28
Q

Cloud (service) customer

A

A person or group that is in a business relationship to provision and use cloud services from a cloud service provider.
The entity purchasing the cloud services e.g. paying the bill

1SO17789 primary role

29
Q

Cloud (service) user

A

A person or entity (which may be a device, for example) that uses cloud services on behalf of the cloud service customer.

1SO17789 primary Role

30
Q

Cloud service partner (CSN)

A

A person or group that supports the provision, use, or other activities of the cloud service provider, the cloud service customer, or both.

Includes all roles that are not CSC or CSP.

1SO17789 primary Role

31
Q

Cloud Auditor Desc?

What standard and subrole?

A

A cloud service partner who is responsible for conducting an audit of the use of cloud services. An audit may be for general security hygiene, but is often for legal or compliance purposes

Performs an independent examination of the cloud service provider with the intent to verify conformance to standards and/or compliance.

independent = third party

1SO17789 CSN Role

32
Q

CASB

Standard and Type of subrole?

A

Cloud Access Security Broker (CASB) A third-party entity offering independent identity and access management (IAM) services to CSPs and cloud customers, often as an intermediary. This can take the form of a variety of services, including single sign-on, certificate management, and cryptographic key escrow.

1SO17789 CSN Role

33
Q

Cloud (service) broker

Standard and Type of subrole?

A

A cloud service partner who negotiates relationships between cloud service providers and cloud service customers.

An individual or company that purchases services from a cloud provider, who adds value then resells them to its own customers.

1SO17789 CSN Role

34
Q

What does a CSB likely prevent?

A

Vendor Lock In because they should abstract proprietary implementation and provide standards based implementation or provides more favorable contract agreements to customer.

35
Q

What does a CSB provide to cloud customer?

A

Service Intermediation - improves specific capability and providing value-added services to cloud customers
Service Aggregation - combines and integrates multiple services into one or more new services
Service Arbitrage - broker has the flexibility to choose services from multiple cloud services providers

36
Q

Cloud Carrier

Is this role part of a security standard? If so which one?

A

Intermediary that provides the connectivity and transport of the cloud services between the cloud customer and cloud provide (ex. ISP)

1SO17789 Role

37
Q

SaaS Delivery Models

A
  1. Hosted Application Management - hosts application for cloud customers and makes it available over the internet. Can be either custom or COTs.
  2. Software on-demand - The applications is hosted by a CSP. Pay as you go (e.g. Gmail, O365)
38
Q

IaaS Components and Characteristics

A

Scalability - support significant demand

Converged network and IT capacity pool - resource pool appears seamless and endless

Self service and on-demand capacity - customer can manage cloud resources without interacting with CSP

High Reliability and Resilience - infrastructure should be reliable and resilient while uphold the SLA

39
Q

PaaS Components and Characteristics

A

Flexibility - plugins can be added to the platform

Support Multiple languages and frameworks

Multiple hosting environments - can migrate from public to private or choose type 1 vs type 2 hypervisor

Ability to autoscale - per requirement (e.g. location)

Allow choice and reduce vendor lock-in

40
Q

What is Anything as a Service (XaaS) according to ISO 17788?

A

any service model that doesn’t fit into IaaS, PaaS, SaaS, may overlap or combine 2 or more models

41
Q

Information Security Officer

A

Responsible for monitoring and enforcing of the business’ governance associated with the protection of all the business information assets from disclosure, alteration, destruction (unavailability)

42
Q

Cloud Carrier

A

An intermediary that provides connectivity and transport of cloud services between cloud consumer and cloud provider