S13-Cloud & Datacenter Flashcards

1
Q

What are some Benefits of Cloud Computing?

A
  • High Availability
  • Scalability
  • Elasticity
  • Metered Utilization
  • shared Resources
  • File Sync
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

High Availability

A

Service experience very little downtime

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Scalability

A

Ability to expand a system at a linear rate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Elasticity

A

Ability to quickly scale up or down in response to fluctuating demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Metered Utilization

A

Being Charged for a service on a Pay per use Basis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Shared Resources

A

Ability to minimize the costs by putting VMs on other servers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

File Sync

A

Ability to store data which can then spread to other places depending on config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

in terms of Scalability What are 2 ways you can scale?

A
  • Vertical Scaling (Scaling up)
  • Horizontal Scaling (Scale out)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Vertical Scaling

A

Increasing the power of existing resources in the working environment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Horizontal Scaling

A

Adding additional resources to help handle the extra load

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

what is the Difference between a metered and Measured service?

A

Metered
- you are paying based on actual usage

Measured
- Paying for a certain amount of quantity upfront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

On - Premise Solution

A

All necessary components to run an Organization’s cloud need to be acquired, installed and configured.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Hosted Solution

A

Third Party service provider, provides all the resources needed to maintain a cloud solution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Multitenancy?

A

Hosted Solution provides service to several different orgs using the same hardware, but logically separates each.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are some things to consider when choosing a Hosted Solution?

A
  • Authentication Mechanisms
  • Redundancy & Fault tolerance
  • Storage location and region legality
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the 3 main cloud service models?

A
  • Software as a Service (SaaS)
  • Platform as a Service (PaaS)
  • Infrastructure as a Service (IaaS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is SaaS?

A

“Software as a Service”

a cloud-based software delivery model where a provider hosts and manages applications, and users access them over the internet

  • Full solution w/ Hosted Application Software
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are some SaaS examples?

A

Microsoft Office 365, Goggle Drive, Turbo Tax, Dropbox, Netflix etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is PaaS?

A

“Platform as a Service”

provides a ready-to-use platform for developing, deploying, and managing applications.

  • Hardware Infrastructure solution
  • Infrastructure Software Solution (Middleware, Runtime, OS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

PaaS Examples

A

AWS, Azure App Service, Google Cloud Platform (GCP)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

what is IaaS?

A

“Infrastructure as a Service”

a cloud computing model where a third-party provides on-demand access to virtualized infrastructure, including compute, storage, and networking resources

  • Hardware focused Infrastructure solution
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

IaaS Examples

A

Microsoft Azure Machines, Google Compute Engine, AWS EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are the 6 types of Cloud Deployment Models?

A
  • Public
  • Private
  • Hybrid
  • Community
  • Multi-Tenancy
  • Single-Tenancy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Public

A

Service Provider makes resources available to end users over the internet
Eg. Google Drive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Private
a cloud computing environment exclusively used by a single organization Eg. AWS GovCloud (US)
26
Hybrid
Combination of private and Public clouds
27
Single-Tenancy
Assigns a particular resource to a single Organization
27
Community
Collaborative infrastructure shared between several organizations with common service needs
28
Multi-Tenancy
Allows Customers to share computing resources in a public or private cloud
29
Virtual Private Network (VPN)
an encrypted connection over the internet from a device to a network
30
What is a Private-Direct Connection?
establishes a dedicated, secure link between a user's network and a cloud service provider's data center, bypassing the public internet
31
Why a Private direct Connection over a VPN?
Private direct offers faster speeds & better performance - Multiple VPCs - Better Redundancy - Higher cost
32
What Components make up cloud security?
33
What is a VPC?
"Virtual Private Cloud" A private cloud environment built on top of a public cloud infrastructure.
34
What is IAC?
"Infrastructure as Code" the practice of managing and provisioning IT infrastructure by using computer code instead of manual configuration or manual steps.
35
What are some features and core components of VPC?
- Subnets - Route Tables - Internet Gateways - Network Address Translation Gateways - Network access Control lists - Security Groups - VPC Peering - VPC Endpoints - VPN connections
36
Subnet (Vpc)
logical network segment that divides the VPC into smaller, isolated networks. can have Public and Private subnets
37
Route Table
Contains a set of rules (routes), that determine where network traffic is directed within the VPC network
38
Internet Gateway
a horizontally scaled, redundant, and highly available VPC component that allows communication between your Virtual Private Cloud (VPC) and the public internet
39
Network Address Translation (NAT) Gateway
a managed service that enables instances in private subnets to connect to the internet by translating the private IP addresses of these instances to a public IP address,
40
Network Access Control List (ACL)
VPC Feature that acts as a firewall, controlling traffic in and out of one or more subnets
41
How does a Network ACL behave?
Like a stateless firewall: examines each network packet independently, without maintaining a record of previous connections.
42
Security Groups
an instance level, virtual stateful firewall that controls inbound and outbound traffic for resources within a VPC
43
How does a Security Group behave?
Like a Stateful Firewall: monitors and tracks the state of ongoing network connections to make decisions about which packets to allow through
44
VPC Peering
A networking connection between 2 VPCs that enables routing traffic between them privately
45
VPC Endpoints
virtual devices that provide secure, private connectivity between resources within a Virtual Private Cloud (VPC) and specific AWS services, without requiring public IP addresses or traversing the internet.
46
What are some VPC advantages?
- Mixing Products from different Vendor - Faster network development - Automation and Policy Management
47
Network Function Virtualization (NFV)
a networking approach that virtualizes network functions (like firewalls or load balancers) instead of relying on dedicated hardware appliances
48
What 3 main components are needed for NFV?
- NFV Infrastructure - Management and Network Orchestration - Virtual Network Functions
49
NFV Infrastructure
All the hardware and virtual resources needed for deploying, managing, and executing VNFs
50
Management and network Orchestration (MANO)
Oversees the lifecycle management of the VNFs, and orchestrates the resources across the NFVI
51
Virtual Network Functions (VNFs)
Software implementations of network functions previously bound to hardware devices.
52
What are the advantages of NFV?
- Flexibility and Rapid deployments - Cost efficiency
53
NFV drawbacks
- Need for security - Complex - Installation
54
Software Defined Network (SDN)
Networking that uses software-based controllers or APIs to communicate with underlying hardware infrastructure and direct traffic on a network
55
What are the 3 parts of a typical network architecture?
- Control Plane - Data Plane - Management Plane
56
Control Plane
Carries the traffic that provides the signals to an from a router. Decides traffic priority and how its secured - Decides where data goes
57
Data Plane
(Forwarding plane) Carries user traffic on the network - Moves the Data
58
Management Plane
Administers the routers and switches inside the network and monitors traffic conditions and the status of the network
59
Advantages of an SDN
- Flexibility - Speed and Agility - Automation - Security
60
SDN Drawbacks
- Single Point of failure - High Vulnerability
61
What are the 3 main types of SDNs?
- Open SDN - Hybrid SDN - SDN Overlay
62
Open SDN
SDN that relies on open-source technology
63
Hybrid SDN
Network that employs traditional SN protocols to operate itself
64
SDN Overlay
a virtual network built on top of an existing physical network infrastructure,
65
Software-Defined Wide Area Network (SD-WAN)
Virtually optimizing WAN connections to efficiently route traffic between remote sites, data centers, and cloud environments - Software based WAN architecture
66
Virtual Extensible Local Area Network (VXLAN)
Network Virtualization technology that addresses the limitations posed by traditional network infrastructures
67
How does a VXLAN work
Encapsulates L2 Ethernet frames within Layer 3 UDP packets
68
What is included in a VXLAN packet?
- 24-bit VXLAN Network Identifier (VNI)
69
How many Identifiers can VXLAN support?
- 16 million +
70
What are the 2 primary VXLAN components?
- VXLAN Tunnel End Points - VXLAN Segments
71
VXLAN Tunnel End Points (VTEPs)
Encapsulates and de-encapsulates Ethernet frames into VXLAN packets
72
VXLAN segments
Layer 2 network overlaid onto a Layer 3 network that is then identified by a unique 24-bit VNI
73
VXLAN Benefits
- Scalability (supports 16 mil V-networks) - Flexibility (extend L2 networks across different data centers and clouds) - Improved Utilization (Optimizes traffic flows)
74
VXLAN Drawbacks
- Complex - Latency - Configuration
75
Secure Access Secure Edge (SASE)
a cloud-based framework that combines network and security functions into a single service.
76
Security Service Edge (SSE)
Subset of SASE that focuses on Security services to protect access between users, devices, and the cloud
77
Secure Web Gateway (SWG)
Used to inspect and filter unwanted Software and Malware from user-initiated web and internet traffic.
78
Cloud Access Security Broker (CASB)
Border device between cloud service consumers and providers to monitor activity and enforce security Policies
79
Zero Trust Network Access (ZTNA)
Designed on the principle that trust is not a default for any user or device, inside or outside the organization's network
80