Lecture 1 b Flashcards

(29 cards)

1
Q

What is cloud computing?

A

A model that allows on-demand access to shared computing resources (like servers and storage) over a network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are the key benefits of cloud computing?

A

Elasticity, scalability, pay-per-use, on-demand access, and resiliency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a thin client?

A

A computer that relies on a cloud server for processing and storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a transit gateway (AWS)?

A

A tool to connect VPCs, data centers, and offices into one network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is serverless infrastructure?

A

Cloud provider handles setup, scaling, and management behind the scenes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Q: What is SaaS?

A

Software as a Service – users access vendor apps on the cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Q: What is PaaS?

A

A: Platform as a Service – users build and run their own apps on the cloud platform

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Q: What is IaaS?

A

A: Infrastructure as a Service – users manage OS and software on cloud-hosted infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Q: What is XaaS?

A

A: Anything as a Service – a broad category of subscription-based services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Q: What are common cloud security issues?

A

A: Unauthorized data access, lack of visibility

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Q: What is a vulnerable API?

A

A: An API that can be exploited to bypass security or access data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Q: What is secrets management?

A

A: Secure handling of sensitive data (e.g. passwords

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Q: What is a cloud audit?

A

A: An independent check of cloud security controls.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Q: What are functional area controls in the cloud?

A

A: Specific security practices for storage network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Q: What is virtualization?

A

Creating virtual versions of computing resources ignoring physical location.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Q: What is a virtual machine (VM)?

A

A: A software-emulated computer running on a host system.

17
Q

Q: What is a hypervisor?

A

A: A program managing VMs (Type I = direct on hardware Type II = runs on OS).

18
Q

Q: What is a container?

A

A: A lightweight virtual unit with only the essential OS parts for one app.

19
Q

Q: What are the benefits of virtualization?

A

A: Cost savings scalability

19
Q

Q: What is virtual machine sprawl?

A

A: Uncontrolled growth of VMs without proper management.

20
Q

Q: What is VM escape?

A

A: When a VM breaks out and interacts directly with the host OS.

21
Q

Q: How to prevent VM sprawl?

A

A: Use a virtual machine manager and establish policies.

22
Q

Q: What is Software-Defined Networking (SDN)?

A

A: Separates the control and data planes to easily manage traffic flows.

23
Q

Q: What is Software-Defined Visibility (SDV)?

A

A: Automates network functions and threat response.

24
Q: What does SNMP do?
A: Manages and monitors network devices. Version 3 adds security.
25
Q: What is DNSSEC?
A: Protects DNS with cryptographic signatures to verify data integrity.
26
Q: What’s the difference between FTPS and SFTP?
A: FTPS uses SSL/TLS while SFTP encrypts everything using a single port.
27
Q: What does LDAP do?
A: Accesses directory info about users/devices. Watch for LDAP injection attacks.
28
Q: What are IPv6’s security benefits?
A: Better encryption address space