Cloud and the Datacenter Flashcards by Kelvin Castillo

Services experience very little downtime when using the cloud

High Availability

How well did you know this?

Not at all

Perfectly

Ability to increase the number of items in a system at a linear rate or less than a linear rate

Scalability

How well did you know this?

Not at all

Perfectly

Increasing the power of the existing resources in the working environment

Vertical Scaling (Scaling Up)

How well did you know this?

Not at all

Perfectly

Adding additional resources to help handle the extra load being experienced

Horizontal Scaling (Scaling Out)

How well did you know this?

Not at all

Perfectly

Ability to quickly scale up or down

Rapid Elasticity

How well did you know this?

Not at all

Perfectly

Being charged for a service on a pay-per-use basis

Metered utilization

How well did you know this?

Not at all

Perfectly

Measure Service - Paying for a certain amount of quantity upfront

Metered Service - Paying for the exact amount used

Measure Service - Paying for a certain amount of quantity upfront

Metered Service - Paying for the exact amount used

How well did you know this?

Not at all

Perfectly

Ability to minimize the costs by putting VMs on other servers

Shared Resources

How well did you know this?

Not at all

Perfectly

Ability to store data which can then spread to other places depending on configuration

File Synchronization

How well did you know this?

Not at all

Perfectly

Needs to procure hardware, software, and personnel necessary to run the organization’s cloud

On-Premise Solution

How well did you know this?

Not at all

Perfectly

Third-party service provider that provides all the hardware and facilities needed to maintain a cloud solution

Hosted Solution

How well did you know this?

Not at all

Perfectly

Things to consider for choosing a hosted provider?

Authentication and authorization mechanisms, redundancy and fault tolerance measures, storage location and location-based laws

How well did you know this?

Not at all

Perfectly

IaaS - provides everything needed to run a server

With PaaS - the os and infrastructure software are included as part of the service. Apache web server, mysql database and programming languages

SaaS - Is much closer to the end user than either PaaS or IaaS

IaaS - provides everything needed to run a server

With PaaS - the os and infrastructure software are included as part of the service. Apache web server, mysql database and programming languages

SaaS - Is much closer to the end user than either PaaS or IaaS

How well did you know this?

Not at all

Perfectly

Systems and users interact with devices on public networks, such as the Internet and other clouds

Public Clouds

How well did you know this?

Not at all

Perfectly

Systems and users only have access with other devices inside the same private clouds or system

Private Cloud

How well did you know this?

Not at all

Perfectly

Combination of private and public clouds

Hybrid Cloud

How well did you know this?

Not at all

Perfectly

Collaborative effort where infrastructure is shared between several different organizations with common service needs

Community Cloud

How well did you know this?

Not at all

Perfectly

Allows customers to share computing resources in a public or private cloud

Multi-Tenancy

How well did you know this?

Not at all

Perfectly

Assigns a particular resource to a single organization | less efficient and more expensive than multi-tenancy solutions

Single-Tenancy

How well did you know this?

Not at all

Perfectly

Establishes a secure connection between an on-premise network, remote offices, client devices and provider’s global network

Virtual Private Network (VPN)

How well did you know this?

Not at all

Perfectly

Extends preexisting, on-premise data center into the provider’s network to directly connect to the virtual private cloud network | faster speeds and better performance than vpn

Private-Direct Connection

How well did you know this?

Not at all

Perfectly

Used to provision a logically isolated section of a cloud provider’s infrastructure

Virtual Private Cloud (VPC)

How well did you know this?

Not at all

Perfectly

Includes the provisioning of architecture where the deployment of resources is performed by scripted automation and orchestration

Infrastructure as Code (IAC)

How well did you know this?

Not at all

Perfectly

A range within the virtual private cloud that can bee allocated to the instance to be launched |public subnets & private subnets

Subnet

How well did you know this?

Not at all

Perfectly

Contains a set of rules, called routes, that determine where network traffic is directed by switches and routers within the virtual private cloud

Route Table

Each subnet in the vpc must be associated with a route table

A horizontally scalable, redundant, and highly available Virtual Private Cloud component that allows communication between instances in the VPC and the Internet

Internet Gateway

Used to enable instance in a private subnet to connect to the Internet or other cloud service provider resources or services, but prevents the Internet from initiating a connecting with those instances

Network Address Translation (NAT) Gateway

Similar to traditional network firewalls and operates at the subnet level within the vpc

Network (ACL) Access Control List

Inbound rules - Control the traffic that's allowed to enter the subnet Outbound rules - Govern the traffic that's allowed to leave the subnet

Designed to function at the instance level within the VPC | considered to act a stateful firewall

Security Groups

It is critically important that the network ACLs and security groups are correctly configured

A networking connection between two VPCs that enables routing traffic between them privately

Virtual Private Cloud (VPC) Peering

Allows private connectivity to services hosted in AWS from within the VPC without using an Internet Gateway, VPN, or AWS Direct Connect

Virtual Private Cloud (VPC) Endpoints

Can be created between the VPC and the remote network or between two VPCs

VPN Connections

VPC benefits?

- Allows mixing products from different vendors - Increases the speed of network development - Adds layers of automation and policy management

VPC drawbacks?

- Risk of being a single point of failure - Need for being properly secure

Transformative concept that is reshaping the telecommunications industry by introducing agility and flexibility to hardware- dependent networks

Network Function Virtualization (NFV)

NFV provides network flexibility and the ability to respond to the needs of cloud services and virtualization technologies

Network function virtualization relies on three main functions to work:

- NFV Infrastructure - Management and Network Orchestration - Virtual Network Function

Includes the hardware and virtual resources necessary for deploying, managing, and executing VNFs

NFV Infrastructure

Oversees the lifecycle management of the VNFs, and orchestrates the resources across the NFVI

Management and Network Orchestration (MANO)

Software implementations of network functions that were traditionally bound to hardware appliances

Virtual Network Functions (VNFs)

Benefits of using network functions virtualization:

- Flexibility and rapid deployments - Cost efficiency

Challenges of network functions virtualization:

Security, complexity, installation

Network function virtualization relies on three main components to work:

- NFV infrastructure - Management and Network Orchestration - Virtual Network Functions

Approach to networking that uses software-based controllers or APIs to communicate with underlying hardware infrastructure and direct traffic on a network | Control plane, data plane, management plane

Software Defined Network (SDN)

Includes the provisioning of architecture in which deployment of resources is performed by scripted automation and orchestration

Infrastructure as Code (IAC)

Carries the traffic that provides the signals to and from a router

Control Plane

Carries user traffic on the network

Data Plane

Control plane - decides where data goes Data plane - Moves the data

Administers the routers and switches inside the network and monitors traffic conditions and the status of the network

Management Plane

Benefits of SDN?

Flexibility Speed and agility Automation Security

SDN drawbacks?

Single point of failure High vulnerability

Network that employs traditional SDN protocol to operate itself

Hybrid SDN

Open-source variant of SDN that relies on open-source technology

Open SDN

Method of using software to create layers of network abstraction that can be used to run multiple virtualized network layers on top of a physical network

SDN Overlay

Virtualized approach to managing and optimizing WAN connections to efficiently route traffic between remote sites, data centers, and cloud environments | allows enterprises to leverage any combination of transport services to securely connect users to applications

Software-Defined Wide Area Network (SD-WAN)

To create an SD-WAN, use a centralized control function to securely and intelligently redirect the traffic across the WAN

Network virtualization technology that addresses the limitations posed by traditional network infrastructures | is a network overlay technology designed to encapsulate Ethernet frames within a UDP packet

Virtual Extensible Local Area Network (VXLAN)

VXLANs operate by encapsulating Layer 2 ethernet frames within Later 3 UDP packets

Performs the encapsulation and de-encapsulation of Ethernet frames into VXLAN packets

VXLAN Tunnel End Points (VTEPs)

Layer 2 network overlaid onto a Layer 3 network that is then identified by a unique 24-bit VNI

VXLAN Segment

Benefits of VXLANs?

Scalability - supports up to 16 virtual networks Flexibility - Extends Later 2 networks across different data centers or cloud environments Improved utilization - Optimizes traffic flows within and across data centers

Drawbacks of VXLAN?

Complexity Latency Configuration

Used to consolidate numerous wide-area networking and security functions into a single cloud-native service to ensurer secure and seamless access for end-users

Secure Access Secure Edge (SASE)

A key aspect of using SASE technology is?

SASE uses SDN to provide security and networking services from the cloud

Subset of SASE that focuses on security services to protect access between users, devices, and the cloud

Security Service Edge (SSE)

Used to inspect and filter unwanted software and malware from user-initiated web and Internet traffic

Secure Web Gateway (SWG)

Designed on the principle that trust is not a default for any user or device, inside or outside the organization's network

Zero Trust Network Access (ZTNA)

Which deployment model provides dedicated infrastructure for a single organization, offering greater control and security over resources while maintaining scalability and flexibility?

Private cloud

Which cloud characteristic allows a number of users to share the same physical resources while maintaining isolation and security between them?

Multi-tenancy

Which of the following options best exemplifies a cloud networking service where resources such as applications are centrally hosted and accessed via the internet?

SaaS

Which of the following best illustrates the most suitable use case for a Software-Defined Wide Area Network (SD-WAN)?

A multinational corporation with branch offices worldwide requiring centralized network management

Which of the following is a benefit of SASE?

It provides users and devices secure, fast, and reliable access to resources in the cloud

Cloud and the Datacenter Flashcards

(77 cards)