Infosec Key Terms Domain 1

Question 1

• Capital Expenditure
• Operational Expenditure
• Elasticity
• Mobility
• Scalability

Answer 1

• Capital Expenditure - this is lowered when moving to cloud; i.e. Hardware, buildings, equipment
• Operational Expenditure - this is also lowered when moving to cloud; i.e. utility costs, maintenance
• Elasticity - ability to grow or shrink IT assets (i.e. # of users) without excess
• Mobility - being able to access cloud from anywhere
• Scalability - ability to increase of decreases services

Question 2

NIST 5 Basic Characteristics of Cloud Computing (BRO-ME) +1 from ISO

Answer 2

1. Broad network access - ability to access cloud via any platform (i.e. mobile, web browser) regardless of user’s location
2. on-demand services - cloud is always on and accessible; able to +- storage with little to no intervention with CSP
3. resources pooling - cloud provider able to scale resources to each customer as needed
4. measured service - only pay for what you use
5. rapid elasticity - cloud increase or decrease resources on its own
6. Mult-tenancy - several customers on one device but are seperated by design

Question 3

Concerns moving to cloud (5)

Answer 3

1. Security
2. Privacy
3. Compliance
4. Interoperability
5. Lock-ins

Question 4

IPS Elements

Answer 4

1. IaaS - Block storage, compute, network
2. PaaS - Database, Object Storage, Identity, Software Testing, Runtime, Queue
3. Application - Monitoring, Content, Collaboration, Communication, Finance

Question 5

1. Cloud Customer vs Cloud User
2. Cloud Service Broker
3. Cloud Service Provider
4. Managed Service Provider

Answer 5

2. Cloud Service Broker - liasion between customer and provider; looks to extend or enhance value to customers who are looking to move to cloud
3. CSP - the vendor offering the services; the provider DICTATES the technology and operational procedures
4. Managed Service Provider - CONSUMER dictates the techonlogy and operating procedure (usually has a NOC)

Question 6

IaaS

Answer 6

1. Most basic cloud service offering; customer has ability to install all software including OS
2. Customer has most control

Benefits
1. Pay for what you use
2. scalability
3. reduced cost of ownership
4. Reduced Energy and cooling costs with GREEN IT

Question 7

PaaS

Answer 7

Question 8

SaaS

Answer 8

Question 9

Building blocks of cloud computing

Answer 9

Question 10

• Containers
• Mutable infrastructure
• Immutable

Answer 10

Question 11

Public Cloud and benefits

Answer 11

Question 12

Private Cloud and benefits

Answer 12

Question 13

Community Cloud and benefits

Answer 13

Question 14

Hybrid Cloud and benefits

Answer 14

Question 15

Hypervisor Type 1 and Type 2 Overview

Answer 15

Question 16

Hypervisor Type 2 Risks

Answer 16

Question 17

Define Virtualization and the primary drivers

Answer 17

Question 18

Security Controls in Virtual Environment
1. Trusted Zones
2. Snapshot
3. Customer retain responsiblity to implement:

Answer 18

Question 19

Management Plane

Answer 19

Question 20

Scalability vs Elasticity

Answer 20

Scalability vertical and scale up - moving application to a bigger VM to handle load

Scale horizontal and scale out - placing application on multiple VMs and distribute the load

Question 21

IAM
1. Identification
2. Authentication
3. Authorization

Answer 21

Question 22

Provisioning
* Type 1 authentication
* Type 2
* Type 3

Answer 22

Question 23

Authorization

Answer 23

Question 24

IAM Lifecycle

Answer 24

Question 25

• Most widely used directory service is
• Briefly go over OSI Model
• TCP / IP model

Answer 25

Question 26

Deprovisioning

Answer 26

Question 27

1. Privileged Accounts
2. CASB

Answer 27

Question 28

Federated Identity Management

Answer 28

Question 29

SSO vs RSO

Answer 29

Question 30

Functional vs Nonfunctional Requirement

Answer 30

Question 31

BIA has 3 primary goals

Answer 31

Question 32

Risk Assessment

Answer 32

Question 33

Define Threat

Answer 33

Question 34

Define Vulnerability

Answer 34

Question 35

How is Risk Determined

Answer 35

Question 36

Quantitative vs Qualitative

Answer 36

Question 37

Tangible Assets vs Intangible Assets

Answer 37

Question 38

Asset Valuation
* absolute value
* relative value
* fair market value

Answer 38

Question 39

Determining Criticality

Answer 39

Question 40

SPOFs

Answer 40

Question 41

Risk Appetite

Answer 41

Question 42

Cloud Computing Service Models

Answer 42

Question 43

Cloud Service Model Boundaries

Answer 43

Question 44

IaaS boundaries

Answer 44

Question 45

PaaS Boundaries

Answer 45

Question 46

SaaS Boundaries

Answer 46

Question 47

Protecting Sensitive Data

Answer 47

Question 48

What are the types of blockchain

Answer 48