Cloud Security Flashcards
What is a public cloud?
Service provider controls all aspect of the network and resources. You just get access to it.
Service provider owns:
Hardware
Software
Supporting infrastructure
Your interaction:
Web browser access
What is the biggest risk when using public cloud?
You are sharing everything but everything is virtually isolated from each other. So one traffic does not cross connect.
What is a private cloud?
Exclusive to a business or organization.
You can set up onsite or by a service provider. You do not SHARE ANYTHING with anyone else. It is more secure and public.
What is Hybrid cloud?
Best of both:
Cloud-base resources
onsite resources
What is community cloud?
Shared cloud infrastructure for multiple organization.
Easy to collaborate with other organizations.
What is a SaaS?
Is a cloud computer model - Ready to use application with least management support on organization
Provider’s responsible for:
Infrastructure
Host and manage end user application
Application / Security / Database/ OS/ Networking
Organization’s responsible for
Security of the data (regulations, compliance)
User access
Understand how data is stored.
What is PaaS?
Platform as a Service. - Pay as you go or on demand
Provider controls:
Host infrastructure, manages OS
Organization controls
the actual applications running or being created and the security aspect of controlling user access and how data is secure.
Responsible for security patches.
What is IaaS?
Infrastructure as a service - service model -
Provider controls
Host the infrastructure
Organization
Application running on the OS and security
Security (patching and user access)
Database
Operating system running now
What is XaaS?
Is a generic all-encompassing term for a variety of cloud services like:
Desktop as a service - DaaS
Database as a service - DBaaS
Disaster Recovery - DRaaS
Monitoring - MaaS
What is Edge and Fog computing?
They help improve performance when dealing with cloud base solutions.
Helps with Latency.
We are moving the processes closer to the end user.
Enhance realtime processing
Alleviate network congestions.
Edge: servers closer to edge devices
Fog - IOT devices that need low latency. Fog is closer than edge to the IOT.
What is a MSP?
Managed Service Providers - remotely manages a customer’s IT infrastructure
Typically follow a subscription model
May manage on premises or off premises resources
Can reduce cost for organization
What is a MSSP?
Managed Sevice Security Providers are MSPs that focus on security.
May provide soft services such as training, risk assessments, and auditng
Often provides and manage technical solutions such as firewalls, IPS, anti-malware, VPNs, ACLs
What is a virtual machine?
Software base emulation of a computer that runs on physical hardware. It is an isolated environment that you can run different applications.
Essentially you are virtualizing physical servers now.
What is a container?
Virtualizes 1 OS so now you can put each app in its own “container”. You can then move containers along just as long as there is a supported container engine running.
What is a VM escape?
Potential security breach where the attack has access to the host operating system. You can now leave isolated environment.
Patch the hypervisor at all times and have ACLs
