Font size
WorksheetsReviewer for Cloud Computing
Total questions: 93
Worksheet time: 7hrs 4mins
is a technology paradigm that enables on-demand access to
a shared pool of computing resources, such as servers, storage, databases, networking, and
software applications, over the internet.
It allows organizations and individuals to scale
resources up or down as needed, reducing the need for upfront infrastructure investments.
Cloud computing has evolved from traditional on-premises
data centers and computing models.
Historical Context and Evolution
Key historical developments include the advent of
virtualization, which allowed multiple virtual machines (VMs) to run on a single physical server
through the use of hypervisors. Additionally, the emergence of cloud service providers like
Amazon Web Services (AWS) in the mid-2000s revolutionized the cloud computing landscape.
Historical Context and Evolution
provides virtualized computing resources over the
internet, allowing users to rent virtual machines, storage, and networking infrastructure.
Infrastructure as a Service (IaaS)
Users
are responsible for managing the operating system and applications. Pros include flexibility and
control, but cons may include increased administrative burden.
Infrastructure as a Service (IaaS)
offers a development and deployment environment that
abstracts infrastructure management.
Developers can focus on writing and deploying code,
while the platform handles scaling and maintenance. Pros include developer productivity, but
cons may include limitations on infrastructure customization.
Platform as a Service (PaaS)
delivers software applications over the internet on a
subscription basis.
Users access applications through web browsers, eliminating the need for
local installation and maintenance. Pros include accessibility and cost savings, but cons may
include data privacy concerns.
Software as a Service (SaaS)
is owned and operated by a cloud service provider and offers
computing resources to the general public over the internet.
public cloud
It is a shared infrastructure used by
multiple organizations.
public cloud
is dedicated to a single organization.
private cloud
It can be hosted on-premises
or by a third-party provider and offers greater control, security, and customization.
combines both public and private cloud environments, allowing
data and applications to move seamlessly between them.
It offers flexibility, scalability, and the
ability to meet specific requirements.
hybrid cloud
is shared by multiple organizations with similar
requirements, such as regulatory compliance or industry-specific needs.
community cloud
It provides a tailored
cloud solution for a specific community of users.
is when an organization uses cloud computing services from at least two cloud
providers to run their applications.
Instead of using a single-cloud stack, multicloud
environments typically include a combination of two or more public clouds, two or more private
clouds, or some combination of both.
Multi-cloud
is a leading cloud service provider known for its extensive
global infrastructure and comprehensive suite of cloud services.
It offers services for computing,
storage, databases, analytics, machine learning, and more.
Amazon Web Services (AWS)
is Microsoft's cloud platform, providing a wide range of cloud services
and integrated solutions.
It offers seamless integration with Microsoft products and services.
Azure
is Google's cloud offering, focusing on data analytics,
machine learning, and artificial intelligence.
It provides advanced services for data processing,
AI, and container orchestration.
Google Cloud Platform (GCP)
is a technology that allows multiple virtual instances, such as virtual
machines (VMs), to run on a single physical server.
It abstracts hardware resources, enabling
efficient utilization and isolation between VMs. Each VM operates independently, with its own
operating system and applications.
Virtualization
also known as a virtual machine monitor (VMM), is a software or hardware
component that enables the creation and management of virtual machines (VMs) on a physical
server.
It acts as an intermediary layer between the physical hardware and the virtualized
operating systems and applications running on the VMs.
are commonly used in
virtualization technologies to maximize the utilization of hardware resources and provide
isolation between multiple virtualized environments.
run directly on the
physical hardware without the need for a host operating system.
Type 1 Hypervisor (Bare-Metal Hypervisor)
They are highly
efficient and offer better performance because they have direct access to the hardware
resources.
Type 1 Hypervisor (Bare-Metal Hypervisor)
run on top of a host
operating system. They are often used for development, testing, or scenarios where
performance is not the primary concern.
Type 2 Hypervisor (Hosted Hypervisor)
are easier to set up but may
have some performance overhead.
Type 2 Hypervisor (Hosted Hypervisor)
Hypervisors allow multiple virtual machines to run on a single physical
server, sharing its computing resources like CPU, memory, storage, and networking.
Virtualization:
Each virtual machine operates independently, providing strong isolation
between VMs. This ______ ensures that issues in one VM do not affect others.
Isolation
Hypervisors manage the allocation of physical resources to VMs,
ensuring fair distribution and efficient utilization.
Resource Allocation:
Hypervisors often offer _____ functionality, allowing you to capture the
current state of a virtual machine.
Snapshotting
Some advanced hypervisors support live migration, allowing VMs to be
moved from one physical host to another with minimal downtime.
Live migration
are lightweight, portable, and isolated environments for running
applications. They package an application along with its dependencies, libraries, and runtime
into a single container image.
share the host operating system kernel, making them
more resource-efficient than VMs. They provide consistency in development and deployment
environments.
are isolated, customizable, and logically segmented
network environments within cloud service providers.
They provide a private network space
where cloud resources can communicate securely.
are subdivisions of virtual networks, enabling further organization and control
over IP address ranges.
are used to group resources and apply security and routing
rules.
are virtual firewalls that control inbound and outbound traffic
to cloud resources.
Security groups
They use rule-based access control to define which traffic is allowed and
denied, enhancing the security of cloud resources.
Security groups
is a data storage architecture that stores data as objects, each
with its unique identifier and metadata.
It is highly scalable, durable, and ideal for storing
unstructured data like images, videos, and documents.
object storage
provides raw storage volumes that can be attached to virtual
machines.
It offers high-performance storage suitable for applications, databases, and file
systems. ________ volumes are typically managed as individual blocks.
offers network-attached storage with shared file systems accessible by
multiple virtual machines.
File storage
It's suitable for scenarios where multiple instances need to access the
same files and collaborate.
File storage
are virtualized servers that emulate physical
computers.
They allow running multiple operating systems on a single physical server, providing
flexibility, isolation, and compatibility with various software and operating systems.
Virtual Machines (VMs)
is a cloud computing model were cloud providers
automatically manage infrastructure, allowing developers to focus solely on writing code for
their applications.
Serverless Computing
It's event-driven and scales automatically in response to triggers, without the
need for manual provisioning or server management.
is a practice of defining and managing
infrastructure elements, such as servers, networks, and databases, using code and automation.
IaC tools and scripts enable the provisioning, configuration, and management of cloud resources
through code, enhancing repeatability, consistency, and collaboration in infrastructure
management.
Infrastructure as Code (IaC)
These are the various difficulties and threats that organizations face
when using cloud services.
Cloud Security Challenges
Challenges include data breaches, compliance issues, identity and
access management, and ensuring the security of cloud infrastructure.
Cloud Security Challenges
This model defines the division of responsibilities between cloud
service providers (CSPs) and customers. CSPs are responsible for the security "of" the cloud
(physical infrastructure), while customers are responsible for the security "in" the cloud (their
data, applications, and configurations).
Shared Responsibility Model
is the practice of managing user identities, roles,
and permissions in a digital environment.
In the context of cloud computing, ___ involves
controlling access to cloud resources, ensuring that only authorized individuals or systems can
use them.
Identity and Access Management (IAM)
is the process of converting data into a secure, unreadable format
to protect it from unauthorized access.
Data Encryption
secures data while it's being
transmitted between systems,
In-transit encryption
protects data when it's stored on disks,
databases, or other storage mediums.
at-rest encryption
relies on protocols like SSL/TLS and VPNs to protect data during transfer.
In-transit encryption
involves techniques like disk-level encryption and database encryption to
safeguard data stored on servers or in databases.
At-rest encryption
is a security practice that requires users to provide
multiple forms of authentication (such as a password and a one-time code sent to their phone)
to access a system or application.
This principle dictates that individuals or systems should have only the
minimum permissions necessary to perform their tasks.
Least Access privilege
It reduces the risk of unauthorized
access and limits potential damage in case of a security breach.
Least Access Privilege
is a European Union (EU) regulation that focuses on data protection and
privacy for individuals.
It applies to organizations that process personal data of EU residents,
regardless of where the organization is located.
Obtaining clear and explicit consent for data processing.
Consent
Allowing individuals to access, correct, or delete their data.
Appointing DPOs responsible for data protection.
Data Protection Officers (DPOs)
Reporting data breaches within 72 hours.
Data Breach Notification
GDPR violations can result in fines of up to €20 million or 4% of
the company's global annual turnover, whichever is higher.
Penalties for Non-Compliance
is a U.S. federal law that focuses on safeguarding protected health information
(PHI) and ensuring its confidentiality, integrity, and availability. It primarily applies to healthcare
organizations and their partners.
Safeguarding PHI through access controls and encryption.
PHI Protection
Ensuring patient privacy and consent.
Privacy Rule:
Implementing security measures to protect PHI.
Security Rule
Breach Notification
HIPAA violations can result in civil and criminal penalties, with
fines ranging from $100 to $1.5 million per violation.
Penalties for Non-Compliance
is an auditing standard developed by the American Institute of CPAs (AICPA). It
evaluates the controls relevant to security, availability, processing integrity, confidentiality, and
privacy of customer data in service organizations.
Ensures data and systems are protected against unauthorized access and
breaches.
security
Ensures systems are available for operation and service as agreed upon.
Availability
Ensures data processing is complete, accurate, and timely.
Processing Integrity
Protects sensitive data from unauthorized access.
Confidentiality
Addresses the collection and use of personal information.
Privacy
Organizations undergo independent audits to demonstrate compliance
with SOC 2 criteria.
Compliance Assessment
