Security+ 2.2

Transit Gateway

A network hub that acts as a regional virtual router to connect networks.

VM Escape Protection

A security exploit that enables a hacker/cracker to gain access to the primary hypervisor and its created virtual machines.

example of Paas

Java runtimes, databases such as mySQL or Oracle, and web servers such as Tomcat. Another example is Google App Engine, on which one can develop applications and let them execute on Google's platform.

Virtualization

Virtualization technology is used to enable a computer to have more than one OS present and, in many cases, operating at the same time. Virtualization is an abstraction of the OS layer, creating the ability to host multiple OSs on a single piece of hardware

Anything as a Service (XaaS)

With the growth of cloud services, applications, storage, and processing, the scale provided by cloud vendors has opened up new offerings that are collectively called Anything as a Service (XaaS). The wrapping of the previously mentioned SaaS and IaaS components into a particular service (say, Disaster Recovery as a Service) creates a new marketable item.

Containers

a type of virtualization that allows for shared operating systems for more resource savings and faster execution

Platform as a Service (PaaS)

describe the offering of a computing platform in the cloud. Multiple sets of software working together to provide services

Hybrid cloud

elements from private, public, and community cloud structures are combined. When considering a hybrid structure, you need to remain cognizant that, operationally, these differing environments are not actually joined together but rather are used together.

managed service provider (MSP)

is a company that remotely manages a customer's IT infrastructure.

A virtual private cloud (VPC)

is a virtual network defined in the cloud, such as AWS, Google Cloud, or IBM Cloud. A VPC endpoint enables a private connection to resources in a VPC using only internal private IP addresses.

Virtual Machine (VM) Sprawl Avoidance

lose track of a VM among many others that have been created

Software Defined Networking (SDN)

network architecture approach that enables the network to be intelligently and centrally controlled, or 'programmed,' using software applications

Cloud Models

serve various environments, including Platform as a Service (PaaS), Software as a Service (SaaS), and Infrastructure as a Service (IPaaS).

Infrastructure as a Service (IaaS)

the delivery of computer hardware capability, including the use of servers, networking, and storage, as a service marketed on a pay-per-use basis, scalable directly with need.

example of Iaas

DigitalOcean. Linode. Rackspace. Amazon Web Services (AWS) Cisco Metacloud. Microsoft Azure. Google Compute Engine (GCE)

Edge Computing

Method of optimizing cloud computing systems by performing some data processing on a set of linked servers at the edge of the network, near the source of the data.

example of Saas

Microsoft Office 365 Netflix Salesforce · Cisco WebEx · Dropbox · ZenDesk · MailChimp · Slack · HubSpot · DocuSign

Public Cloud

Provides cloud services to just about anyone

Software-Defined Visibility (SDV)

Using a central control program to control visibility in a network.

Resource policies

When you are specifying the details of a cloud engagement, how much processing power, what apps, what security requirements, how much storage, and access control are all resources. Management of these items is done via resource policies.

fog computing

an architecture where devices mediate processing between local hardware and remote servers. It regulates which information is sent to the cloud and which is processed locall

Software as a Service (SaaS)

is the offering of software to end users from within the cloud. Rather than installing software on client machines

Infrastructure as Code

is the process of managing and provisioning computer data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.

Services integration

the practice of managing services from multiple suppliers and creating a universal channel to deliver these services to a client.

Serverless Architecture

A cloud computing execution model in which the cloud provider allocates machine resources on demand, taking care of the servers on behalf of their customers.

community cloud

A community cloud system is one where several organizations with a common interest share a cloud environment for the specific purposes of the shared endeavor.

Type I hypervisor

A hypervisor that can run directly on a computer without an underlying host operating system.

Type II hypervisor

A hypervisor that runs within a conventional operating system environment.

Managed Security Service Provider (MSSP)

A managed security service provider (MSSP) does the same thing as a third party that manages security services.

Microservices/API

A software architecture that is composed of smaller modules that interact through APIs and can be updated without affecting the entire system.

thin client

A thin client is a lightweight computer, with limited resources, whose primary purpose is to communicate with another machine

In cloud computing, a virtual router deployed to facilitate connections between VPC subnets and VPN gateways.

A transit gateway is a network connection that is used to interconnect virtual private clouds (VPCs) and on-premises networks

Cloud Service Providers

Owns the computing equipment and infrastructure where cloud environments are set up

Private Cloud

Private clouds are essentially reserved resources used only by your organization—your own little cloud within the cloud.