WK4 Network security in the cloud

Question 1

Server baseline image

Answer 1

One distinction between cloud network hardening and traditional network hardening is the use of a server baseline image for all server instances stored in the cloud. This allows you to compare data in the cloud servers to the baseline image to make sure there haven’t been any unverified changes. An unverified change could come from an intrusion in the cloud network.

Question 2

Keeping data and applications on a cloud network separate

Answer 2

Similar to OS hardening, data and applications on a cloud network are kept separate depending on their service category. For example, older applications should be kept separate from newer applications, and software that deals with internal functions should be kept separate from front-end applications seen by users.