Lesson 6 - Secure Cloud Network Architecture

Question 1

CSPs

Answer 1

Cloud Service Providers
- Organization providing infrastructure, application, and/or storage services via an “as a service” subscription-based, cloud-centric offering.

Question 2

SaaS

Answer 2

Software as a Service
- A cloud service model that provisions fully developed application services to users.

Question 3

PaaS

Answer 3

Platform as a Service
- A cloud service model that provisions application and database services as a platform for development of apps.

Question 4

IaaS

Answer 4

Infrastructure as a Service
- A cloud service model that provisions virtual machines and network infrastructure.

Question 5

PII

Answer 5

Personally Identifiable Information
- Information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual.

Question 6

CDN

Answer 6

Content Delivery Network
- a network of servers linked together with the goal of delivering content as quickly, cheaply, reliably, and securely as possible

Question 7

HA

Answer 7

High Availability
- A metric that defines how closely systems approach the goal of providing data availability 100% of the time while maintaining a high level of system performance.

Question 8

GRS

Answer 8

Geo-Redundant Storage
- replicating data across multiple, geographically diverse locations to enhance data availability and durability, protecting against regional outages, disasters, and cyberattacks that could compromise a single location

Question 9

VPC

Answer 9

Virtual Private Cloud
- A private network segment made available to a single cloud consumer on a public cloud.

Question 10

IaC

Answer 10

Infrastructure as Code
- Provisioning architecture in which deployment of resources is performed by scripted automation and orchestration.

Question 11

SDN

Answer 11

Software-Defined Networking
- APIs and compatible hardware/virtual appliances allowing for programmable network appliances and systems.

Question 12

NFV

Answer 12

Network Functions Virtualization
- Provisioning virtual network appliances, such as switches, routers, and firewalls, via VMs and containers.

Question 13

SLA

Answer 13

Service Level Agreement
- define expected service levels, including performance, availability, and support commitments between cloud service providers and organizations

Question 14

ISA

Answer 14

Interconnection Security Agreements
- establish the security requirements and responsibilities between the organization and the cloud service provider to safeguard sensitive data and ensure compliance with industry regulations to help ensure the confidentiality, integrity, and availability of data and systems within the cloud environment

Question 15

GDPR

Answer 15

General Data Protection Regulation
- mandates that organizations processing personal data of EU citizens implement robust security measures to protect that data from breaches and unauthorized access, ensuring compliance with data protection laws

Question 16

HIPAA

Answer 16

Health Insurance Portability and Accountability Act
- a set of rules designed to protect the privacy and security of patient health information, especially when stored or transmitted electronically, ensuring confidentiality, integrity, and availability

Question 17

PCI DSS

Answer 17

Payment Card Industry Data Security Standard
- The information security standard for organizations that process credit or bank card payments.

Question 18

SD-WAN

Answer 18

Software-Defined Wide Area Network
- Services that use software-defined mechanisms and routing policies to implement virtual tunnels and overlay networks over multiple types of transport network.

Question 19

SASE

Answer 19

Secure Access Service Edge
- A networking and security architecture that provides secure access to cloud applications and services while reducing complexity. It combines security services like firewalls, identity and access management, and secure web gateway with networking services such as SD-WAN.

Question 20

RTOS

Answer 20

Real-Time Operating System
- A type of OS that prioritizes deterministic execution of operations to ensure consistent response for time-critical tasks.

Question 21

ICS

Answer 21

Industrial Control System
- Network managing embedded devices (computer systems that are designed to perform a specific, dedicated function).

Question 22

DCS

Answer 22

Distributed Control System
- a digital control system used in industrial settings to automate and manage processes, often distributed across a plant or facility

Question 23

OT

Answer 23

Operational Technology
- A communications network designed to implement an industrial control system rather than data networking.

Question 24

SCADA

Answer 24

Supervisory Control and Data Acquisition
- A type of industrial control system that manages large-scale, multiple-site devices and equipment spread over geographically large areas from a host computer.

Question 25

IoT

Answer 25

Internet of Things - Devices that can report state and configuration data and be remotely managed over IP networks.

Question 26

ZTA

Answer 26

Zero Trust Architecture - a cybersecurity approach that assumes no user, device, or application is inherently trustworthy, requiring continuous verification and authorization for every access request, regardless of location.