Virtualization and Cloud Computing concepts Flashcards

1
Q

Cloud models

A

Classifying the ownership and management of a cloud as public, private, community, or hybrid.

Infrastructure as a service (IaaS)
Platform as a service (PaaS)
Software as a service (SaaS)
Anything as a service (XaaS)
Public
Community
Private
Hybrid
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Infrastructure as a service (IaaS)

A

A computing method that uses the cloud to provide any or all infrastructure needs.

A means of provisioning IT resources such as servers, load balancers, and storage area network (SAN) components quickly. Rather than purchase these components and the Internet links they require, you rent them on an as-needed basis from the service provider’s data center.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Platform as a service (PaaS)

A

A computing method that uses the cloud to provide any platform-type services.

Provides resources somewhere between SaaS and IaaS. A typical PaaS solution would provide servers and storage network infrastructure (as per IaaS) but also provide a multi-tier web application/database platform on top.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Software as a service (SaaS)

A

A computing method that uses the cloud to provide application services to users.

A different model of provisioning software applications. Rather than purchasing software licenses for a given number of seats, a business would access software hosted on a supplier’s servers on a pay-as-you-go or lease arrangement (on-demand). Virtual infrastructure allows developers to provision on-demand applications much more quickly than previously.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Anything as a service (XaaS)

A

Expressing the concept that most types of IT requirements can be deployed as a cloud service model.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Public

A

A cloud that is deployed for shared use by multiple independent tenants.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Community

A

A cloud that is deployed for shared use by cooperating tenants.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Private

A

A cloud that is deployed for use by a single entity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Hybrid

A

public/private/community/hosted/onsite/offsite solution. For example, a travel organization may run a sales website for most of the year using a private cloud but break out the solution to a public cloud at times when much higher utilization is forecast.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Managed service provider (MSP)/managed security service provider (MSSP)

A

Third-party provision of security configuration and monitoring as an outsourced service.

A means of fully outsourcing responsibility for information assurance to a third party. This type of solution is expensive but can be a good fit for an SME that has experienced rapid growth and has no in-house security capability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

On-premises vs. off-premises cloud computing

A

An onsite link can obviously deliver better performance and is less likely to be subject to outages (loss of an Internet link, for instance). On the other hand, a dedicated offsite facility may provide better shared access for multiple users in different locations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Fog computing

A

Provisioning processing resource between the network edge of IoT devices and the data center to reduce latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Edge computing

A

Provisioning processing resource close to the network edge of IoT devices to reduce latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Thin client

A

A thin client is a computer that runs from resources stored on a central server instead of a localized hard drive. Thin clients work by connecting remotely to a server-based computing environment where most applications, sensitive data, and memory, are stored.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Containers

A

Each cell or container is allocated CPU and memory resources, but the processes all run through the native OS kernel. These containers may run slightly different OS distributions but cannot run guest OSes of different types (you could not run Windows or Ubuntu in a RedHat Linux container, for instance). Alternatively, the containers might run separate application processes, in which case the variables and libraries required by the application process are added to the container.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Microservices/API

A

A software architecture where components of the solution are conceived as highly decoupled services not dependent on a single platform type or technology.

Application programming interfaces (APIs). The service API is the means by which external entities interact with the service, calling it with expected parameters and receiving the expected output.

17
Q

Infrastructure as code

A

Software-defined networking (SDN)
Software-defined visibility (SDV)

A provisioning architecture in which deployment of resources is performed by scripted automation and orchestration.

18
Q

Software-defined networking (SDN)

A

APIs and compatible hardware/virtual appliances allowing for programmable network appliances and systems.

19
Q

Software-defined visibility (SDV)

A

APIs for reporting configuration and state data for automated monitoring and alerting.

20
Q

Serverless architecture

A

A software architecture that runs functions within virtualized runtime containers in a cloud rather than on dedicated server instances.

21
Q

Services integration

A

Services integration refers to ways of making these decoupled service or microservice components work together to perform a workflow. Where SOA used the concept of a enterprise service bus, microservices integration and cloud services/virtualization/automation integration generally is very often implemented using orchestration tools.

22
Q

Resource policies

A

As with on-premises systems, cloud storage resources must be configured to allow reads and/or writes only from authorized endpoints. In the cloud, a resource policy acts as the ACL(Access Control List) for an object. In a resource policy, permissions statements are typically written as a JavaScript Object Notation (JSON) strings. Misconfiguration of these resource policies is a widely exploited attack vector. For example, the following policy uses the “any” wildcard (*) to assign both actions (read and write) and principals (accounts) to a storage object. The type of policy breaks the principle of least privilege and is highly unsecure:

“Statement”:[ {

“Action”: [

“*”

],

“Effect”: “Allow”,

“Principal”: “*”,

“Resource”: “arn:aws:s3:::515support-courses-data/*”

}]

23
Q

Transit gateway

A

In cloud computing, a virtual router deployed to facilitate connections between VPC subnets and VPN gateways.

24
Q

Virtualization

A
Virtual machine (VM) sprawl avoidance
VM escape protection

The process of creating a simulation of a computing environment, where the virtualized system can simulate the hardware, operating system, and applications of a typical computer without being a separate physical computer.

25
Q

Virtual machine (VM) sprawl avoidance

A

A guest operating system installed on a host computer using virtualization software (a hypervisor), such as Microsoft Hyper-V or VMware.

26
Q

VM escape protection

A

An attack where malware running in a VM is able to interact directly with the hypervisor or host kernel.