Securing the cloud involves

• Only physical security

• Only encryption

• Only firewalls

• Technologies, policies, and practices

What does authentication verify?

• User's access level

• User's identity

• User's password strength

• User's location

Encryption protects data

• Only during login

• Only when stored

• At rest and in transit

• Only in cloud storage

Protocol for secure transmission

• HTTP

• FTP

• TLS

• SMTP

IAM stands for

• Internet Access Management

• Identity Access Management

• Internal Authorization Mechanism

• Infrastructure Audit Module

RBAC ensures

• All users have admin rights

• Random access to data

• Role-based access control

• Read-only access for all

GDPR relates to

• Payment security

• European data privacy

• Cloud infrastructure

• Network speed

Customer responsibility in cloud

• Physical servers

• Network hardware

• Data and access settings

• Cooling systems

Cloud security best practice

• Using default passwords

• Ignoring updates

• Applying regular patches

• Disabling firewalls

Disaster Recovery focuses on

• Preventing disasters

• Avoiding cloud usage

• Restoring systems

• Encrypting backups