C838 Managing Cloud Security Best Study Guide 2023, Exams of Computer Security

Download C838 Managing Cloud Security Best Study Guide 2023 and more Exams Computer Security in PDF only on Docsity! C838 Managing Cloud Security Best Study Guide 2023 Broad network access - ✔ There should never be network bandwidth bottlenecks. On-demand services - ✔ Refers to the model that allows customers to scale their compute and/or storage needs with little or no intervention from or prior communication with the provider. Resource pooling - ✔ Characteristic that allows the cloud provider to meet various demands from customers while remaining financially viable. measured/metered service - ✔ The customer is charged for only what they use and nothing more. Business Impact Analysis (BIA) - ✔ An assessment of the priorities given to each asset and process within the organization personally identifiable information (PII) - ✔ Under current laws, no cloud customer can transfer risk or liability associated with the inadvertent or malicious disclosure of <blank>. Elasticity - ✔ This is the flexibility of allocating resources as needed for immediate usage, instead of purchasing resources according to other variables. Simplicity - ✔ Usage and administration of cloud services ought to be transparent to cloud customers and users; from their perspective, a digital data service is paid for and can be used, with very little additional input other than what is necessary to perform their duties. Scalability - ✔ The organization's computing needs won't remain static: there will be new (and hopefully more) users, customers, and data as the organization continually matures. Infrastructure as a Service (IaaS) - ✔ The most basic of cloud service offerings, <blank> allows the customer to install all software, including operating systems (OSs) on hardware housed and connected by the cloud vendor. Platform as a Service (PaaS) - ✔ <Blank> contains everything included in IaaS, with the addition of OSs. Software as a Service (SaaS) - ✔ The cloud vendor becomes responsible for administering, patching, and updating software as well. Private cloud - ✔ Owned by a single organization and is implemented on a cloud-based secure environment protected by a firewall. Hybrid cloud - ✔ Integrated arrangement of two or more cloud servers. Community cloud - ✔ Multi-tenant setup shared between organizations that belong to a specific group. Public cloud - ✔ Delivers cloud services over a network that is open for free usage. Regulators - ✔ The entities that ensure organizations are in compliance with the regulatory framework for which they're responsible. Cloud Service Provider (CSP) - ✔ The <BLANK> will own the datacenter, employ the staff, own and manage the resources (hardware and software), monitor service provision and security, and provide administrative assistance for the customer and the customer's data and processing needs. Cloud Customer - ✔ The organization purchasing, leasing, or renting cloud services. Cloud Access Security Broker (CASB) - ✔ A third-party entity offering independent identity and access management (IAM) services to CSPs and cloud customers, often as an intermediary. Apache Cloud Stack - ✔ An open source cloud computing and IaaS platform developed to help make creating, deploying, and managing cloud services easier by providing a complete "stack" of features and components for cloud environments. Business Requirement - ✔ An operational driver for decision making and input for risk management. Cloud App (Cloud Application) - ✔ The phrase used to describe a software application accessed via the Internet; may include an agent or applet installed locally on the user's device. Cloud Architecture - ✔ Subject matter expert for cloud computing infrastructure and deployment. Cloud Backup - ✔ Backing up data to a remote, cloud-based server. Cloud Computing - ✔ A type of computing, compared to grid computing, that relies on ensuring computing resources rather than having local server or personal devices to handle applications. Cloud Computing Reseller - ✔ A company that purchases hosting services from a cloud server hosting or computing provider and then resells them to its own customers.