Security II

Question 1

CSPs build clouds not only on a technical level but also on a level of trust and security (T/F)

Answer 1

True

Question 2

CSPs have to build trust by providing a reliable and secure environment (T/F)

Answer 2

True

Question 3

What is the user’s role in security?

Answer 3

You own the data thus it is your responsibility to protect your data and yourself from noisy neighbors and threat vectors.

Question 4

Trust the vendor to do everything (T/F)

Answer 4

False

Question 5

Rely on vendor security measures as your be-all end-all (T/F)

Answer 5

Flase

Question 6

Don’t discount your on-prem infrastructure (T/F)

Answer 6

True

Question 7

Why is securing on-prem important?

Answer 7

It has direct links to the cloud and is often forgotten. Addressing internal threats might require additional personnel.

Question 8

What are some common pillars of trust between CSP and customer?

Answer 8

Security
Privacy
Control
Compliance
Transparency

Question 9

What is Security and what are some examples?

Answer 9

The ability to safeguard data and access. Examples are: Encryption, Data Retention, Internal Policies, Antivirus, Identity Management, Access Management, Logging.

Question 10

What is Privacy?

Answer 10

Ensuring your data is only used for the purposes defined in policies and preventing unauthorized use and access.

Question 11

What is Control?

Answer 11

Controlling the exchange, flow, and retention of data as well as authorization and auditing.

Question 12

What is Compliance?

Answer 12

Ensuring compliance with industry standards.

Question 13

What is Transparency?

Answer 13

Considered the most important pillar, it is the honesty, openness, and accountability of the provider. Examples: describe data safeguards, security measures, policies on data, security and access.

Question 14

What are security standards for SaaS?

Answer 14

CSP: Secure infrastructure, secure OS, application layer, secure data between CSP and customer.
Customer: Control data, control access.

Question 15

What are security standards for PaaS?

Answer 15

CSP: Secure infrastructure, secure OS, application layer, secure data between CSP and customer.
Customer: Control data, control access, control all code and development environment settings.

Question 16

What are security standards for IaaS?

Answer 16

CSP: Secure infrastructure
Customer: control OS/virtualized infrastructure, control data, control access.

Question 17

Internal threats are higher than external threats (T/F)

Answer 17

True