Security Architecture

Question 1

Outlines the division of responsibility between the cloud service provider and the customer

Answer 1

Responsibility Matrix

Question 2

Provide specialized services that end efficiency of cloud solutions

Answer 2

Third-Party Vendors

Question 3

Combine on-premise infrastructure, private cloud service, and public cloud services

Answer 3

Hybrid Solution

Question 4

Computing infrastructure that’s physically located on-site at a business

Answer 4

On-premise Solutions

Question 5

System’s ability to be accessed when needed

Answer 5

Availability

Question 6

System’s ability to recover from failures and continue to function

Answer 6

Resilience

Question 7

It’s essential to consider both the immediate and long-term costs of cloud adoption

Answer 7

Cost

Question 8

Speed at which the system can adapt to changes in demand

Answer 8

Responsiveness

Question 9

Cloud services are easier to deploy than on-premise solutions

Answer 9

Ease of Deployment

Question 10

When using the cloud services, some risks are transferred to the provider

Answer 10

Risk Transference

Question 11

Cloud service providers regularly release patches to fix vulnerabilities

Answer 11

Patch Availability

Question 12

Businesses might not be able to apply patches due to compatibility issues

Answer 12

Inability to Patch

Question 13

Customers don’t have to worry about power consumption

Answer 13

Power

Question 14

Amount of computational resources that a customer can use

Answer 14

Compute

Question 15

Can lead to vulnerabilities if one user’s data is compromised

Answer 15

Shared Physical Server Vulnerabilities

Question 16

Can lead to unauthorized access, data breaches, and other security incidents

Answer 16

Inadequate Virtual Environment Security

Question 17

Can lead to unauthorized access to sensitive data and systems

Answer 17

User Access Management

Question 18

Can lead to leaving the system vulnerability to new threats

Answer 18

Lack of Up-to-date Security Measures

Question 19

Can lead to a complete system outage affecting all users

Answer 19

Single Points of Failure

Question 20

Can lead to allowing unauthorized users to gain access to cloud systems

Answer 20

Weak Authentication and Encryption Practices

Question 21

Lack of clear guidelines or procedures for various security aspects

Answer 21

Unclear policies

Question 22

Residual data left behind after deletion or erasure processes

Answer 22

Data Remnants

Question 23

Technology that allows for the emulation of servers

Answer 23

Virlualization

Question 24

Lightweight alternative to full machine virtualization

Answer 24

Containerization

Question 25

Known as a bare metal or native hypervisor, it runs directly on the host hardware and functions similarily to an operating system

Answer 25

Type 1

Question 26

Operates within a standard operating system, such as Windows, MAC, or Linux

Answer 26

Type 2

Question 27

Occurs when an attacker is able to break out of one of these normally isolated virtual machines

Answer 27

Virtual Machine Escape

Question 28

Occurs when a user is able to gain the ability to run functions as a higher level user

Answer 28

Privilege Elevation

Question 29

When a virtual machine needs to move from one physical host to another

Answer 29

Live Migration of Virtual Machines

Question 30

Concept in computing where system resources like memory or processing power are reused

Answer 30

Resource Reuse

Question 31

Model where the responsibility of managing servers, databases, and some application logic is shifted away from developers

Answer 31

Serverless

Question 32

One of the most significant risks of serverless computing

Answer 32

Vendor Lock-in

Question 33

A software architecture where large applications are broken down into smaller and independent services

Answer 33

MicroServices

Question 34

Isolation of a network by removing any direct or indirect connections from other networks

Answer 34

Physical Separation/Air Gapping

Question 35

Creates boundaries within a network, restricting access to certain areas

Answer 35

Logical Separation

Question 36

Enables efficient network configuration to improve performance and monitoring

Answer 36

SDN

Question 37

Also called the forwarding plane that is responsible for handling packets and makes decisions based on protocols

Answer 37

Data Plane

Question 38

The brain of the network that decides where traffic is sent and is centralized in SDN

Answer 38

Control Plane

Question 39

The plane where all network applications interacting with the SDN controller reside

Answer 39

Application Plane

Question 40

A configuration that lacks consistency that might introduce risks, so it has to be eliminated

Answer 40

Snowflake System