Domain 6 - Management Plane and Business Continuity

Question 1

The ________ is the single most significant security difference between traditional infrastructure and cloud computing. This isn’t all of the metastructure (defined in Domain 1) but is the interface to connect with the metastructure and configure much of the cloud. It is part of the metastructure and is responsible for managing the assets of the resource pool, while the cloud user is responsible for how they configure those assets, and for the assets they deploy into the cloud

Answer 1

Management Plane

Question 2

True/False: The cloud user is responsible for ensuring the management plane is secure and necessary
security features are exposed to the cloud user, such as granular entitlements to control what
someone can do even if they have management plane access.

Answer 2

False. The Cloud provider is responsible for management plane security.

The cloud user is responsible for properly configuring their use of the management plane, as well as for securing and managing their credentials.

Question 3

What are the 3 main aspects of BC/DR in the cloud?

Answer 3

• Ensuring continuity and recovery within a given cloud provider.
• Preparing for and managing cloud provider outages.
• Considering options for portability, in case you need to migrate providers or platforms.

Question 4

True/False: “lift and shift” wholesale migration of existing applications without architectural changes
can reduce resiliency.

Answer 4

True

Question 5

True/False: The management plane is a key tool for enabling and enforcing separation and isolation in
multitenancy.

Answer 5

True

Question 6

Five major facets to building and managing secure management plane

Answer 6

• Perimeter Security
• Customer Authentication
• Internal Authentication and credential passing
• Authorisation and Entitlement
• Logging, monitoring and alerting

Question 7

True/False: BC/DR is cloud provider responsibility

Answer 7

False. It is a shared responsibility

Question 8

_______ allows you to create an infrastructure template to configure all
or some aspects of a cloud deployment. These templates are then translated natively by the
cloud platform or into API calls that orchestrate the configuration.

Answer 8

Software-Defined Infrastructure

Question 9

True/False: Downtime is always an option. You don’t always need perfect availability, but if you do plan
to accept an outage you should at least ensure you fail gracefully, with emergency downtime
notification pages and responses (e.g. DNS Redirection)

Answer 9

True

Question 10

True/False: SaaS may often be the biggest provider outage concern, due to total reliance on the provider.

Answer 10

True

Question 11

True/False: For Private cloud and privders, BC is completely on the provider’s shoulders, and BC/DR includes everything down to the physical
facilities. RTOs and RPOs will be stringent, since if the cloud goes down, everything goes down.

Answer 11

True