1.4 Recovery Objectives: Answer with the correct Acronym for the definition:

Specifies a quantity of time between the most recent backup of data and the disaster. It is an understanding of how much data the organization can acceptably lose.

(a)  

1.4 Recovery Objectives: Answer with the correct Acronym for the definition:

How quickly recovery needs to occur to maintain business continuity. In other words, how long can the business continue to function in the event of a disaster. 

(a)  

1.2: (a)   is a distributed, hierarchical database that relates these easy-to-remember names with difficult-to-remember IP addresses.

1.2: A (a)   filters traffic, making decisions to forward the traffic or drop it.

1.2: (a)   permits administrators to manage networking in a more dynamic and flexible manner than traditional hardware-based networking.

2.4: The (a)   approach means that a user must only authenticate once to the system and then is granted whatever levels of access are defined.

2.4:

What you know (passwords)

What you have (smart card or other token)

Who you are (biometrics such as fingerprints)

(a)   combines two or more of the above authentication types.

2.4: (a)   allows users to log in once (single sign-on) and have access to multiple services that may be provided by different organizations. The organizations choose to participate and trust the authentication credentials, even if a given site does not directly manage those credentials. 

2.4: Cloud-native applications are made up of (a)   .

2.4: (a)   is virtualization at the operating-system level such that a single operating system is partitioned and used by multiple applications.

2.4: _____ and _____ may be used in fields such as customer support, fraud detection, business intelligence, image recognition, etc.

(a)  

2.4: (a)   is the name given to hosting immense quantities of data as well as analyzing that data for information useful for the business.

2.4: (a)   have a very positive return on investment (ROI) and permit a great deal of personalization. Advertising and customer communication may be tailored to the target audience.

2.4: (a)   provides businesses with another marketing channel to communicate with their customers.

2.4: n cloud services, the term (a)   refers to the elimination of the human role in management tasks.

2.4: (a)   can do many things from Alexa to home alarms to agriculture.

2.4: What service can your customers use to sign up for services. They also manage their own accounts and preferences in a self-service manner.

(a)  

2.4: Organizations may find a greater opportunity for (a)   due to the high degree of accessibility inherent in cloud solutions.

2.4: Traditional (a)   solutions are hosted on-premise. Your organization owns and manages the hardware solutions required to serve desktop environments to client devices. This is an alternative to locally installing an operating system and applications on each individual workstation.

2.4: (a)   allows organizations to make decisions for expenditures based on current neeeds.

2.5: (a)   means the application will be entirely rearchitected to be cloud-ready.

2.5: (a)   means no modification; application is cloud-ready.

2.5: (a)   is a mix of any of the Migration Types.

2.5: (a)   migration means your organization’s cloud deployment will probably be divided into several distinct phases.

3.1: (a)   allows businesses to move data to where it can be utilized most effectively.

3.1: (a)   means that CPU processing power is brought to the data, rather than the other way around.

3.1: Some organizations will (a)   data directly to cloud storage instead of backing up to a tape drive or hard disk drive.

3.1: Cloud service providers divide the world into regions. Each region is independent of the others. The regions are divided into _____. The _____ have independent data centers that possess their own power, cooling, and network connectivity.

(a)  

3.1: (a)   replicates data or services between two regions.

3.1: The servers your company utilizes are only virtual, and they may be created or destroyed at any time. Servers are treated as (a)   .

3.1: _____ may be configured to notify administrators and business process owners of exceptional utilization or of downtime. _____ may be configured for thresholds to notify administrators before costs become unexpectedly high.

(a)  

3.1: In the case of Infrastructure as a Service, _____ might include information about virtual machine or service availability. Platform as a Service _____ might include update or upgrade information for the development platform. Application as a Service _____ might track application utilization, licensing, availability, etc.

(a)  

3.1: (a)   manages the number of active servers in a deployment based on the workload.

3.1: The process of fine-tuning a virtual machine to better match its actual workload is called (a)   .

3.2: DevOps emphasizes the use of automation for quicker and more consistent deployments. (a)   provides this capability. In older deployment models, servers were configured manually, and all settings were manipulated at the server.

3.2: Infrastructure as Code templates may be created to simplify deployments. Developers can call these (a)   to generate their own test server instances.

3.2: (a)   is a set of development practices that emphasizes integration and collaboration, with frequent synchronizations to help detect issues.

3.2: (a)   means applications are tested in an isolated environment that is not connected to the production environment in any way. Such a design keeps any unintended effects from impacting production.

3.2: (a)   means applications are tested with a simulated demand to confirm that the application performs acceptably.

3.2: Revisions to an application must not break existing application functionality. (a)   is used to ensure that the update does not have an unintended impact on existing functionality after an update. Since the application was presumably tested before the update, the previous tests are run again and are expected to be successful even after the change. 

3.2: The (a)   process is made up of a series of automated events. The goal is to have little or no human involvement in the deployment process other than to call for a virtual machine to be built (which may be automated through auto-scaling too).

3.2: (a)   means a virtual machine is configurating it.

3.2: What term relates to: Operating systems and applications may need to be patched for security weaknesses, to expose new functionality, or to correct programming mistakes. Continuous delivery automates this process, making it both simpler and more consistent than a manual process.

(a)  

3.2: Developers utilize _____ to permit portions of an application to communicate with each other or for communication between two applications. _____ provide connectivity for monitoring software, for access to data, and for software component interactions.

(a)  

4.1: What Inventory is described here: It may seem odd to maintain an inventory of cloud resources, but it is very necessary.

(a)  

4.1: (a)   makes it easier for an organization to address the risks. Some risks might be considered to be a low priority if they are very unlikely or would have a small impact. Others might be considered to be a high priority if they are very likely or would have a significant impact.

4.1: There is the risk of loss of (a)   or control of data to the cloud service provider. For example, social media sites may own data posted to them. Photos, personal information, communications, etc., may potentially be deleted or shared by the site, depending on the end-user agreement.

4.1: Risk (a)   means to take reasonable precautions to prevent a particular risk.

4.1: Risk (a)   means to take no action to mitigate a risk.

4.1: Risk (a)   seeks to keep the business out of position to be affected by a given risk.

4.1: The common example of risk _____ is insurance. Your organization may insure the data center against fire, _____ring the risk to the insurance company. The insurance company may cause you to take some mitigation steps before _____ring the risk.

(a)  

4.1: What term relates to this: Risks identified in the risk assessment should be documented. There should also be documentation that displays the impact analysis and associated costs for mitigating the risk. Risk documentation may also outline who is responsible for the project, why risk management is being undertaken, and plans for reviewing the documentation regularly.

(a)  

4.1: The risk assessment will result in a (a)   , which is used to track identified risks and mitigation efforts. This document, similar to the following table, is used early on to help map the risk mitigation process. It is shared at a high level in the organization among key stakeholders. New items may be added to it when necessary.

4.1: (a)   means that the organization is dependent on the cloud service provider and its proprietary service. In addition, the organization cannot easily migrate to a different cloud platform.

4.1: (a)   is the transfer of data between two cloud providers.

4.2: (a)   are specific step-by-step procedural documents for standard tasks.

4.2: For example, a developer team at your organization may be accustomed to working as individuals, with very little collaboration or project synchronization. It may be decided to migrate the developer team to a PaaS solution and a version control tool such as GitHub. Developers will be migrated from local, self-administered development environments to a consistent cloud-based development environment. They will no longer be responsible for administrative tasks in the environment. They will also be expected to synchronize projects via GitHub. In this scenario, (a)   would educate the developers about the change, offer support during the migration, and then provide service desk support after the migration is complete.

4.2: (a)   addresses the utilization of tangible resources (money, supplies, etc.) and intangible resources (time, skill, people, etc.).

4.2: An (a)   is a step-by-step process for managing a specific security incident.

4.2: (a)   are implemented to manage the interaction between users and data. User account management, including on-boarding and off-boarding of employees, account creation and modification, and group memberships are all specified.

4.2: (a)   govern the use of all communications media, including email, instant messaging, texting, phone calls, blogging, and any other social media outlets.

4.3: Data is subject to the regulations, laws, and requirements of the country where it is stored. This concept is called (a)   .

4.3: Cloud deployments still fall under (a)   concerns, even if the data is being stored at another organization’s data center. Any necessary auditing and documentation that pertains to your industry must include cloud services and resources.

4.3: (a)   are defined by the International Organization for Standards (abbreviated as ISO in the United States). The two cloud standards define specific vocabulary and cloud service models. The goal is to ensure CSPs, consumers, governments, and regulatory bodies operate from a consistent set of terms.

4.3: Cloud service providers allow their infrastructures to be independently audited. Such _____ indicates they are compliant with various industry or government requirements. The _____ assure consumers that an independent agency has verified the security claims of the service provider.

(a)  

4.4: A _____ is an activity you are trying to protect your systems or data from. _____s have the potential to disrupt services. There are three primary types of _____s: natural, unintentional, and intentional.

(a)  

4.4: A (a)   is a known weakness in a system, service, application, or even a user that may be exploited by a threat actor.

4.4: One form of cloud security assessment is (a)   . This is an authorized attack conducted by a third-party security firm to assess and report the security level of your organization. It is important to note that this attack is conducted with the knowledge and approval of the organization.

4.4: _____ software checks applications and services for security issues. These issues might include misconfigurations, missing security patches, known vulnerabilities, etc. _____ may be conducted with administrative credentials from inside the network or without credentials using the same approach as an external attacker would use.

(a)  

4.4: Web (a)   software connects to the web application site the same way a customer or an attacker would and then searches the site for vulnerabilities. The software will construct a model of the entire site after discovering all of the pages and web services.

4.4: (a)   —Content is confirmed by the legal department and is available to the general public.

4.4: (a)   —Content is secured using permissions and is only available to regular employees.

4.4: (a)   —Content is secured by permissions and encryption and is only available to members of certain business units.

4.4: (a)   —ensuring only authorized users can access data, for example, keeping an organization’s intellectual property secret.

4.4: (a)   —validating that data has not changed, for example, during a download process.

4.4: (a)   —ensuring access to data or services, for example, by using backup and restore procedures.

4.4: A data _____ may still occur, even if your organization has taken steps to mitigate it. A data _____ is the accidental or deliberate exposure of data to unauthorized users. An incident response policy is used to govern reactions to data _____es.

(a)  

4.4: (a)   ing—log files and other record-keeping that is used to track who took what actions.

4.4: (a)   —permissions that are used to control your access to data based on your authenticated identity.

4.4: (a)   attempts to reduce vulnerabilities and their associated risks by applying best practices, configurations, and tools to systems.