1.7

Question 1

SaaS

Answer 1

Software as a Service
On demand software
Data and apps on the cloud
Google Mail

Question 2

IaaS

Answer 2

Infrastructure as a Service (Haas Hardware)
Outsource equipment
You are still in control of applications and data

Question 3

PaaS

Answer 3

Platform as a Service
no servers, no software
You don’t have direct control of the data, people, or infrastructure
Different from SaaS as PaaS is a sandbox for development

Question 4

Private Cloud

Answer 4

Your own local data center

Question 5

Public Cloud

Answer 5

Available to everyone over internet

Question 6

Hybrid Cloud

Answer 6

mix of public and private

Question 7

Relationship between local and cloud resources

Answer 7

On-premise: apps on local hardware, servers in your building
Hosted: servers at 3rd party location, local hardware may be provided by 3rd party
Cloud: entire app instances can be created and torn down on demand, resources available as needed

Question 8

Connectivity Methods

Answer 8

If browser based, SSL or TLS encryption
If whole network needs access, VPN. may require additional hardware on both sides
If security is concern, direct connection. High speed 10 gigabit

Question 9

Security Implications

Answer 9

CASB (Cloud Access Security Broker)

software, appliance, or cloud-based

Question 10

CASB

Answer 10

Visibility - what apps are in use, are they authorized
Compliance - HIPAA, PCI
Threat Prevention - only authorized users, prevent attacks
Data Security - all data encrypted, protect transfer of PII with DLP