Week 11 - "Mastering Cloud Fundamentals: Security, SLAs

Poll

How confident do you feel about your understanding of cloud computing concepts, such as cloud security, SLAs, and disaster recovery?

• A) Very confident

• B) Somewhat confident

• C) Neutral

• D) Somewhat unsure

• E) Very unsure

Draw

"Draw a padlock next to a cloud to represent data being securely stored in the cloud."

Cloud Security Breaches and Risk Management

Cloud security breaches have become increasingly common, highlighting the importance of robust security measures. In this session, we explore some of the most infamous cloud security breaches, examining what went wrong and how risk management could have mitigated these incidents. Understanding the risk management life cycle—identifying, analysing, treating, and monitoring risks—is crucial for maintaining cloud security and ensuring business continuity.

Poll

If you could choose your cloud provider for your dream job, which one would you pick?

• A) Amazon Web Services (AWS)

• B) Microsoft Azure

• C) Google Cloud Platform (GCP)

• D) IBM Cloud

• E) Oracle Cloud

Multiple Choice

What are the three main levels of responsibility in securing a cloud system?

• A) Platform, Infrastructure, Application
  

• B) Authorization, Authentication, Compliance
  

• C) Identity, Access, Data
  

• D) Security, Management, Monitoring

Multiple Choice

Which of the following actions is primarily managed by Google Cloud in the shared responsibility model?

• A) Implementing access controls
  

• B) Securing the platform, including physical data centres
  

• C) Changing load balancer settings
  

• D) Logging and monitoring system activity

Multiple Choice

What is the primary focus of forensic actions in cloud security?

• A) Preventing breaches
  

• B) Securing the platform
  

• C) Tracking down breaches and stopping them quickly
  

• D) Managing identity and access controls

Word Cloud

"When you hear the term 'cloud security,' what is the first word that comes to mind? Write it down."

Service Level Agreements (SLAs)

Service Level Agreements (SLAs) are contracts between cloud service providers and customers that define the expected level of service, including availability, performance, and support. These agreements are critical in setting clear expectations and responsibilities. In cloud computing, SLAs often operate under a shared responsibility model, where both the provider and the customer have specific roles to play. Understanding the components of an SLA helps organisations choose the right cloud provider and ensures they are prepared for any service disruptions.

Poll

Which cloud-related innovation do you think has had the most impact on our everyday lives?

• A) Streaming services (like Netflix)

• B) Cloud storage (like Google Drive)

• C) Smart home devices (like Alexa)

• D) Social media platforms

• E) Video conferencing tools (like Zoom)

Multiple Choice

What is the primary purpose of the Cloud Identity-Aware Proxy (IAP) in Google Cloud?

• A) To encrypt all network traffic by default
  

• B) To enforce authentication and authorization at the network layer with minimal application code changes
  

• C) To manage endpoint devices used by employees
  

• D) To provide two-factor authentication using a Titan Security Key

Multiple Choice

Which of the following methods is used by Google Cloud to make phishing attacks less effective?

• A) Encrypted traffic and load balancers
  

• B) Man-in-the-middle attack prevention
  

• C) Use of Universal Two-Factor (U2F) authentication with Titan Security Keys
  

• D) Endpoint management to secure personal devices

Match

Look at the image of the smart home. Match each threat with its corresponding countermeasure as shown in the image.

• Device Hijacking

• Privacy, Data & Identity Theft

• Man-in-the-middle

Device Identification and Access Control

Authentication, Encryption, and Access C

Authentication, Encryption, Security Lif

• Device Identification and Access Control

• Authentication, Encryption, and Access C

• Authentication, Encryption, Security Lif

Disaster Recovery Planning

Disaster recovery (DR) planning is essential for any organisation relying on cloud services. It involves preparing strategies to quickly restore operations after a disaster, minimising downtime and data loss. Key concepts in DR include Recovery Time Objective (RTO) and Recovery Point Objective (RPO), which define the acceptable limits for downtime and data loss, respectively. Effective DR plans also incorporate various backup strategies and may involve setting up hot, warm, or cold recovery sites depending on the organisation's needs and resources.

Poll

Which movie best represents what happens when disaster recovery plans fail?

• A) "Jurassic Park" (IT systems crash leading to chaos)

• B) "The Terminator" (AI goes rogue)

• C) "The Matrix" (A world within a world)

• D) "I, Robot" (Machines take over)

• E) "Independence Day" (Alien attack disables systems)

Multiple Choice

What is one of the primary benefits of using Cloud IAM (Identity and Access Management) in Google Cloud?

• A) It automatically encrypts all data stored in the cloud.
  

• B) It allows granular access control to specific resources, preventing unnecessary access.
  

• C) It monitors network traffic for suspicious activity.
  

• D) It ensures that all data is automatically backed up in multiple locations.

Google Cloud Platform (GCP) Exploration

Google Cloud Platform (GCP) offers a comprehensive suite of cloud services, including computing, storage, and networking solutions. In this session, we explore GCP’s features and compare them with other major providers like AWS and Azure. Understanding GCP's resource hierarchy, Identity and Access Management (IAM), and cost management tools allows organisations to effectively utilise cloud resources and optimise costs. Hands-on labs and practical exercises further deepen your understanding of how to navigate and use GCP for various cloud computing needs.

Multiple Choice

Who is responsible for securing the physical data centres in a cloud environment under the shared responsibility model?

• A) The cloud provider

• B) The customer

• C) Both the cloud provider and the customer

• D) Neither, it is managed by a third party

Open Ended

Explain the concept of the shared responsibility model in cloud computing and why it is important.

Poll

How do you primarily use cloud storage in your personal life?

• A) Storing photos and videos

• B) Backing up important documents

• C) Sharing files with friends/family

• D) Keeping my devices synced

• E) I don’t really use cloud storage

Cloud Automation and DevOps Integration

Cloud automation and DevOps practices are revolutionising the way applications are developed and deployed. Automation tools like Infrastructure as Code (IaC) allow for consistent and repeatable deployment of cloud resources, reducing human error and speeding up processes. DevOps integrates development and operations teams, fostering collaboration and enabling continuous delivery of software updates. By adopting cloud automation and DevOps, organisations can improve efficiency, accelerate time-to-market, and maintain high-quality standards in their software products.

Multiple Choice

In the shared responsibility model, who is responsible for managing user access and permissions?

• A) The cloud provider

• B) The customer

• C) A third-party security firm

• D) The internet service provider

Cloud Compliance and Legal Considerations

Compliance with legal and regulatory requirements is essential in cloud computing, especially when dealing with sensitive data such as personal information or financial records. Organisations must ensure that their cloud providers comply with relevant regulations like GDPR, HIPAA, or PCI DSS. Additionally, understanding data sovereignty—where data is physically stored—is critical, as different countries have varying laws governing data protection. By selecting the right cloud provider and configuring services to meet compliance requirements, organisations can mitigate legal risks and protect their reputation.

Poll

What do you think will be the next big thing in cloud computing?

• A) Quantum computing in the cloud

• B) AI and machine learning advancements

• C) More personalised cloud services

• D) Further integration with IoT (Internet of Things)

• E) Enhanced virtual reality experiences

Cloud Shared Responsibility Model

In cloud computing, the shared responsibility model is a fundamental concept that defines the division of security and operational responsibilities between the cloud provider and the customer. While the provider is typically responsible for securing the underlying infrastructure, such as hardware, networking, and physical data centres, the customer is responsible for securing their data, managing user access, and configuring security settings within the cloud environment. Understanding this model is crucial to ensure that both parties fulfil their roles effectively, thereby reducing the risk of security breaches or operational failures.

Multiple Choice

Which of the following is a method to optimise cloud costs?

• A) Over-provisioning resources

• B) Using auto-scaling

• C) Ignoring cost reports

• D) Paying for unused reserved instances

Open Ended

Why is it important for organisations to understand data sovereignty when using cloud services?

Cloud Computing Cost Management

Effective cost management is a critical skill for any organisation using cloud services. Cloud providers like AWS, Azure, and GCP offer various pricing models and tools to help manage costs, including on-demand pricing, reserved instances, and cost calculators. It’s important for users to regularly monitor their cloud usage and optimise resources by rightsizing instances, using auto-scaling, and selecting the appropriate storage options. By proactively managing costs, organisations can avoid unexpected expenses and ensure that their cloud investments deliver maximum value.

Poll

If you could have one superpower to secure cloud data, what would it be?

• A) Invisibility Cloak (Hide all data from hackers)

• B) Teleportation (Instantly transfer data to secure locations)

• C) Time Travel (Undo any security breaches)

• D) Force Field (Create impenetrable data barriers)

• E) Mind Control (Convince hackers to abandon their plans)

Multi-Cloud and Hybrid Cloud Strategies

As organisations seek to balance performance, cost, and reliability, many are adopting multi-cloud and hybrid cloud strategies. A multi-cloud approach involves using services from multiple cloud providers, allowing organisations to avoid vendor lock-in and choose the best tools for specific tasks. Hybrid cloud combines on-premises infrastructure with cloud services, providing flexibility and enabling businesses to run workloads in the most appropriate environment. Understanding these strategies helps organisations design more resilient and cost-effective cloud architectures.

Open Ended

Give one example of a situation where a hybrid cloud strategy would be beneficial.

Summary and Reflection

This week, we delved into crucial aspects of cloud computing, including security, SLAs, disaster recovery, and the Google Cloud Platform. Each topic not only builds technical knowledge but also emphasises the importance of strategic planning in cloud environments. As we move forward, reflect on how these concepts apply to real-world scenarios and consider how they can be integrated into your current or future roles. This foundational knowledge sets the stage for deeper exploration and hands-on practice in the upcoming sessions.

Poll

Where would you rather work if your job is in cloud computing?

• A) A high-tech office with all the latest gadgets

• B) Remotely from a beach with reliable Wi-Fi

• C) In a bustling city full of networking opportunities

• D) From a quiet countryside cabin with a stable internet connection

• E) In a collaborative coworking space

Poll

After completing this quiz, how has your understanding of cloud computing concepts improved?

• A) Significantly improved

• B) Moderately improved

• C) Slightly improved

• D) No change

• E) Still unclear