Cloud Essentials

A few cloud services that can be consumed are?

-Email accounts -Websites -Data storage

Which of the following is the MOST likely reason for subscribing to PaaS?

​Application development

What makes up the CIA Triad?

-Confidentiality -Availability -Integrity

Virtualization technology is not an important skill for IT when adopting an IaaS strategy.

False

_____________ allows the users/tenants of a cloud to do tasks themselves

Self-Service

In using a structured approach to explore the potential impact of cloud computing in an organization undergoing the impact and changes that occur during Cloud service adoption, which of the following is an ITIL Service Lifecycle consideration?

Service Operation

ITIL and cloud management is broken down in to: Service Strategy, Service Design, and ________

Service Transition

As part of a critical SaaS application, one of the contractual statements by the cloud provider is a requirement to perform scheduled maintenance. This has a direct impact on which of the following?

Service operation

SaaS stands for?

Software as a Service

When the services and infrastructure are provided off-site, over the Internet:

Software as a Service

Which of the following processes needs to be changed to better handle Change Management in the cloud?

Software distribution

Hardware independence is:

The abstraction of your server OS from the server hardware and then packaging it into virtual machines

A company's email software vendor charged them $500 a month to use software, licensed for the maximum number of active email addresses. The company switched to a cloud-based email software that charged based on the number of active email addresses each month. The company was billed $100 the first month, $200 the second month, and $100 for the remaining 10 months of the year. After a year, how much money did the company save by switching to cloud computing?

$4,700

A few possible security risks when using the cloud:

- Data loss- Data exposure- Shared technology

Some forms of encapsulation being used in VPNs are:

- GRE- VXLAN- VLAN

Which of the following assets have risks related to a cloud provider going out of business?

- Not using hybrid cloud federations to keep your data synced with multiple providers- Data stored at the provider

Some of the ways to mitigate risks when using cloud data integration:

- Understand the application design when moving to the cloud- Keep the applications, data, and the users as close as possible

A few security benefits in using the cloud are:

-24/7 staffing and monitoring -Increased availability and improved disaster recovery through redundancy and multiple locations

Cloud computing is what?

-A kind of Internet-based computing that provides shared processing resources and data to computers and other devices on demand -A model for enabling ubiquitous, on-demand access to a shared pool of configurable computing resources such as networks, servers, storage, applications and services

When your organization has a compliance audit, which of the following might be included as part of the audit?

-Assessing what is used as identity management -Audit of the the access control list

Which terms best describe the following scenario? When the load on your web site goes up, the load balancer adds additional compute web servers to carry the load and then removes these servers when the load goes back down.

-Automation -Elasticity

You can only use virtual servers in private clouds or traditional data centers.

False. All forms of cloud computing make use of virtual servers.

Which of the following are ways of managing risk management?

-Identify what the organizations assets are -Identify threats and vulnerabilities -Address the identified risk -Monitor risks

Cloud computing characteristics:

-Managed by the provider -Managed through self-service on demand -Network accessible -Sustainable

Cloud providers and cloud software include:

-Microsoft Azure -OpenStack -Amazon Web Services -Google Cloud Platform

Which of the following are cloud providers or cloud software?

-OpenStack -Microsoft Azure -Google Compute Engine -Amazon Web Services

Which of the following organizations is MOST likely to consider confidentiality requirements before implementing a backup and disaster recovery cloud solution?

-Organizations with legal or regulatory constraints -Government or emergency response

What are some of the major differences between a private cloud and a public cloud?

-Private clouds are for use in a single organization -A public cloud is typically offered over the Internet

The three major cloud forms are:

-Public -Private -Hybrid

As stated by the National Institute of Standards and Technology, cloud characteristics include:

-Rapid elasticity -Broad network accessibility

Variable cost business models are focused on:

-Responsiveness -Removing the need for hardware completely -Allowing for smaller operating expenses (OPEX) over time, instead of large initial capital expenditures (CAPEX) -Operating efficiencies that do not work anymore

What are the three primary scalability levels?

-Server Scalability -Scaling of the Network -Scaling of the Platform

Some of important steps in the evolution from virtualization to the cloud are:

-Server virtualization -Distributed data centers -Private data centers -Hybrid data clouds and public clouds

Cloud scalability means?

-The ability of a particular system to fit a problem as the scope of that problem increases -The ability of an application to be scaled up to meet demand through replication and distribution of requests across a pool or farm of servers

Indications that your organization may be ready for the cloud are:

-Tied-up capital -Costly excess capacity -Running out of capacity

Some examples of using hardware standardization are:

-Using the same architecture, such as X86 -Taking advantage of tier-based virtualization cloud technologies -VM sizes are pre-defined sizes, often known as flavors

Common technologies used to mitigate security concerns are:

-Virtual firewalls -Virtual private networks

Indications that your organization may not be ready for the cloud are:

-Your organization owns large data centers that often have enough scale to be as flexible and efficient as cloud computing providers -Legal and security (compliance) reasons can require an organization to know more details about the location of its data and servers than a cloud computing provider is able to provide -Predictable and fixed workloads can typically make optimal use of their hardware and do not need scaling

You company's data could become compromised by

-phishing -social engineering -poor physical security

Cloud computing improves business flexibility by...

-providing easier access to users outside of the organization -rapidly growing and shrinking capacity -allowing for the faster deployment of applications

A webmail service hosted by an MSP for which of the following is considered a private cloud?

A single company

There are not legal risks when moving to the cloud.

False. Moving your data to the cloud created several legal questions that need to be addressed by your company's legal teams, especially if your company operates internationally.

How does scalability work with cloud computing? A. Servers and storage can be added quickly. B. Servers and storage can be released quickly. C. Users can be added and removed quickly. D. All of the above is correct.

All of the above is correct.

Why is there less maintenance effort using SaaS when managing the operating system?

Because the service provider manages the operating system in SaaS

The _______________ identifies customer requirements and makes sure that the cloud service provider meets the requirements before agreeing to deliver the service

Business Relationship Manager (BRM)

How can the internal IT department successfully react to cloud computing?

By becoming an internal cloud provider

How might an organization successfully implement a SaaS strategy?

By managing the risks that are associated with bringing in external providers

In order to maintain strategic flexibility and the ability to bring a cloud system back internally, which of the following is the MOST important requirement in the contract?

Cloud subscriber maintains ownership of their data

CBN stands for:

Cloud-Based Networking

CEN stands for:

Cloud-Enabled Networking

Which of the following is a reason for business users to be interested in cloud computing?

Desire for improved user experience

It does not matter what portions of your current data center or infrastructure could be a possible security risk when moving that data to the cloud.

False

Making use of cloud computing often slows down application development and architectural design.

False. Using cloud computing and making use of services that are distributed and already available for your development teams speeds up the time to market strategy for almost all new development projects.

Which of the following steps BEST lead to successful adoption of a cloud service?

Gather stakeholder requirements, select potentially suitable cloud providers, perform a pilot, and then select the most appropriate provider.

A military facility is NOT able to fully embrace cloud computing because of which of the following?

High degree of confidentiality and operational assurance

When computing services or infrastructure is maintained on both private and public clouds:

Hybrid clouds

Differing from more technology-oriented IT management approaches like network management and IT systems management, __________ is characterized by adopting a process approach towards management, focusing on customer needs and IT services for customers rather than IT systems, and stressing continual improvement.

IT Service Management (ITSM)

Why does cloud computing shift capital cost to variable cost?

IT assets are not owned by the customer

Which of the following cloud services would be used to pay for hardware when it is being used for computing, network space, and storage over the Internet?

IaaS

Which of the following is the MOST significant difference between SaaS and IaaS?

IaaS can test network configurations.

Which of the following is a good case for IT outsourcing, as well as cloud computing?

Improving the overall cost structure

Which of the following recognized approaches for managing an organization's technology environment can be applied to cloud computing services?

Information Technology Infrastructure Library (ITIL)

IaaS stands for?

Infrastructure as a Service

Which of the following does the server virtualization layer do?

It allows the underling physical server hardware to be shared

Which of the following is indicated by a high number of variations of different virtual servers?

Lack of automation of virtual machine image manufacturing

Which of the following risk results if cloud computing providers limit their Service Level Agreement (SLA) liabilities?

Legal risk

Which of the following is the function of orchestration services?

Manage the starting and stopping of application server clusters

Which of following is the MOST beneficial aspect of public cloud deployment for a startup company?

No upfront capital expenditure

A cloud subscriber may come under certain security constraints when hosting sensitive data in the cloud due to government regulations. Which of the following is the BEST mitigating control that could be implemented by the cloud provider?

Offer a single-tenancy software service with segregated virtualized infrastructure.

Which of the following is the MOST widely used example of cloud computing?

Online email

Being able to create websites and web services quickly is an example of which of the following?

PaaS

Which of the following processes should be implemented to validate the application security of the cloud provider's SaaS application?

Periodic penetration testing

PaaS stands for?

Platform as a Service

Which of the following is a differentiating characteristic of private cloud solutions compared to public cloud solutions?

Private cloud solutions are dedicated for use by a single organization.

When computing services or infrastructure is maintained on the private network:

Private clouds

When computing services or infrastructure is maintained on the public network:

Public clouds

Which of the following applies only to public cloud computing as opposed to outsourcing?

Public clouds have no upfront CAPEX costs for hardware

Which of the following is NOT a recognized cloud classification model?

QoS

Which of the following is BEST used when setting up security for services being used within a public cloud?

SSL

G Suite (formerly known as Google Apps, and different than Google Cloud Platform) is a set of online applications allowing users to create and share documents. This best describes which cloud type?

SaaS

Twitter is a service that allows users to exchange short text messages. This is an example of:

SaaS

Which of the following characteristics of cloud computing describes the ability to grow easily in response to an increase in demand?

Scalability

Which of the following is a typical concern for business and IT leaders, when adopting cloud computing?

Security of current IT solutions

A company is using an Internet-based cloud service provided by a third party. Which of the following can the third party NOT guarantee when providing cloud resources?

The cost of the services

Which of the following is the MOST important service management consequence of elastic capacity?

The need for good performance monitoring and management

Which of the following do IT outsourcing and cloud computing typically have in common?

The possibility for vendor lock-in

The MOST important business continuity risk when selecting cloud service providers is:

The provider going out of business

What consequences does outsourcing IT and cloud computing have in common?

The use of external staffing

Which consequences do outsourcing IT, as well as cloud computing, have in common?

The use of external staffing

The following reduces your company's ________: Because cloud computing greatly reduces this, on-demand, scalable, and elastic services, allow the company to get products out quicker.

Time to market

A data centre is a facility used to house computer systems and associated components, such as telecommunications and storage systems.

True

An application for internal-use only, on company-owned assets, would be best described as a private SaaS.

True

Applications that are easy to migrate and have some business value are great options when first piloting or doing a POC for migrating to the cloud.

True

Capital tied up in hardware that might become obsolete over time is one limitations of owning your own servers instead of using the cloud.

True

Cloud computing delivers IT capabilities that scale with demand, which is a huge benefit to organizations that want to quickly start out.

True

Cloud computing is typically based on open Internet technology

True

Cloud-related financial risks can be managed by making sure that cloud assets are generating revenue.

True

Data integration is complex in private data centers and is even more so when it comes to the cloud.

True

Federation is really a form of hybrid cloud technologies

True

If you do not already know the processes behind your current IT infrastructure, then making changes such as moving to the cloud can be detrimental.

True

It is important to use standardization on things such as data formats, virtual machine sizes, etc. because it helps facilitate, when the needs arises, to move from one cloud provider to another.

True

It is possible that data can be lost or stolen when migrating to the cloud.

True

Multitenancy allows system resources to be fully utilized before another server is brought online, further reducing the operating costs and data centre cooling that is required along with it.

True

Often times when using third party management tools for the cloud there is risk because of the possibility vendor lock-in.

True

Server virtualization allows the underlying physical server hardware to be shared.

True

The goal of ITSM is to ensure that IT functions efficiently and that its processes are also in alignment with the needs of the business.

True

The management requirements of cloud computing become much more complex when you need to manage private, public, and traditional data centers all together. You'll need to add capabilities for federating these environments.

True

Virtual machines can be secured at the VM-level by using access control list and firewalls.

True

Virtualization software separates physical infrastructures to create various dedicated resources.

True

Web email is considered an early example of cloud adoption

True

Within cloud environments, the purpose of the Business Relationship Management process is extended to form and uphold the cloud service provider and the customer-business relationship

True

You should be aware of which portions of your current data center or infrastructure can be a possible security risk when moving that data to the cloud.

True

A _____ allows one network from a single geographical data center to communicate securely with a data center in a different locale.

VPN

Which of the following must be implemented by a cloud provider to ensure that different entities can authenticate and share basic user account information?

Virtualization

You access a PaaS cloud by what means?

Web services

Which of the following questions should be considered before selecting a cloud computing vendor?

What cloud computing product will fit the business needs?

Examples of _____ Area Networks are the Internet and VPN tunnels.

Wide

When using the ITIL standard the first step when considering when a company needs to implement a cloud network is to

assess what the business needs are

When utilizing cloud technologies, one of the biggest benefits is using ________, which allows things to take place in cloud loads without much user intervention.

automation

Network ___________ is the amount of data that can be sent across a network link within a given time.

bandwidth

When using cloud computing, you will shift _________ cost to _______ cost.

capital cost to variable cost

A ________ cloud, also known as cloud federation, is the deployment and management of multiple external and internal cloud computing services to match business needs. A federation is the union of several smaller parts that perform a common action.

federated

Cloud computing allows business to move away from the need to have _______ capital expenditures related to computer hardware by utilizing the cloud instead.

large

Cloud computing allows for you to use _________ because you only pay based on your usage.

opex

A cloud's network must be _________ and ___________.

resilient and redundant

Private clouds are operated solely for _______________ organization(s)

specific

In keeping with organizational goals of a corporation when deploying an application to a cloud services provider, which of the following is NOT a selection criteria for choosing a pilot?

​​Successful completion