GCGA Ch. 5 Summarizing Cloud Concepts (ST)

Question 1

Cloud computing

Answer 1

provides an organization with additional resources. Most cloud services are provided via the Internet or a hosting provider. On-premise clouds are owned and maintained by an organization.

Question 2

SaaS

Answer 2

Software as a Service (SaaS) includes web-based applications such as web-based email.

Question 3

PaaS

Answer 3

Platform as a Service (PaaS) provides an easy-to-configure operating system and on-demand computing for customers. The vendor keeps systems up to date with current patches.

Question 4

IaaS

Answer 4

Infrastructure as a Service (IaaS) provides hardware resources via the cloud. It can help an organization limit the size of its hardware footprint and reduce personnel costs.

Question 5

MSP

Answer 5

A managed service provider (MSP) is a third-party vendor that provides any IT services needed by an organization, including security services. A managed security service provider (MSSP) focuses on providing security services for an organization.

Question 6

CASB

Answer 6

A cloud access security broker (CASB) is a software tool or service deployed between an organization’s network and the cloud provider. It monitors all network traffic and can enforce security policies.

Question 7

Private clouds

Answer 7

designed for use by a single organization.

Question 8

Third-party cloud vendors

Answer 8

sell access to public cloud services to anyone who wants them.

Question 9

Community clouds

Answer 9

Two or more organizations with shared concerns can share a community cloud.

Question 10

Hybrid cloud

Answer 10

A hybrid cloud is a combination of two or more cloud deployment models. Multi-cloud systems combine the resources from two or more cloud service providers. Cloud-based DLP systems can enforce security policies for any data stored in the cloud.

Question 11

Next-generation secure web gateway

Answer 11

provides proxy services for traffic from clients to Internet sites. It can filter URLs and scan for malware.

Question 12

Common cloud security considerations

Answer 12

include availability, resilience, cost, responsiveness, scalability, and segmentation.

Question 13

On-premises vs off-premises deployments

Answer 13

may be created using a centralized approach, with a small number of physical locations, or a decentralized approach, with many physical locations. Off-premises solutions make use of cloud service providers.

Question 14

IaC

Answer 14

Infrastructure as code (IaC) refers to managing and provisioning data centers with code to define VMs and virtual networks.

Question 15

SDN

Answer 15

Software-defined networks (SDN) use virtualization technologies to route traffic instead of using hardware routers and switches.