Security Architecture 1

Question 1

What is a Hybrid Cloud?

Answer 1

• Mixture of Public, private and community cloud

Question 2

Advantages / Disadvantages of hybrid Cloud

Answer 2

Pro

Question 3

Pros and Cons of Hybrid Cloud

Answer 3

Pro
* Dezentralised

Contra
* Complexity
* Configuration mismatches
* Different Security Monitoring
* Data Leakage

Question 4

Things to consider with third party cloud vendors

Answer 4

• Ongoing vendor risk assessment
• Include third party impact in incident response
• Constantly monitor changes and unusual activities

Question 5

What is IaC

Answer 5

Infrastructure as Code
*Process of automating the provisioning, management and deprovisioning of infrastructure services through scripted code rather then human intervention
*Define server, network and applications as code
*Can be used for other application instances

Question 5

What is a serverless arcitecture?

Answer 5

• System arcitecture that does not expose the user / developer to the server.
• Instead it is highly event driven and changes can be implemented almost in real time within the system

Faas
* Function as a service
* Platforms that allows customers to upload own code functions to provider and provider will upload those functions as scheduled basis in response to events and/or demand
* Not dependend on OS
* OS security concerns are on thrid party

Question 6

What is an API?

Answer 6

• Application Programm Interface
• “Glue” for Microservices

Question 7

What are Microservices?

Answer 7

• They Work together as seperate instances in the cloud and handling different functions

Advantages
* Very Scalable
* Resilient: If you loose one microservice, rest still works
* Security and Compliance: Adjust security to microservice that is running