Cloud Essentials
A few cloud services that can be consumed are?
-Email accounts -Websites -Data storage
Which of the following is the MOST likely reason for subscribing to PaaS?
Application development
What makes up the CIA Triad?
-Confidentiality -Availability -Integrity
Virtualization technology is not an important skill for IT when adopting an IaaS strategy.
False
_____________ allows the users/tenants of a cloud to do tasks themselves
Self-Service
In using a structured approach to explore the potential impact of cloud computing in an organization undergoing the impact and changes that occur during Cloud service adoption, which of the following is an ITIL Service Lifecycle consideration?
Service Operation
ITIL and cloud management is broken down in to: Service Strategy, Service Design, and ________
Service Transition
As part of a critical SaaS application, one of the contractual statements by the cloud provider is a requirement to perform scheduled maintenance. This has a direct impact on which of the following?
Service operation
SaaS stands for?
Software as a Service
When the services and infrastructure are provided off-site, over the Internet:
Software as a Service
Which of the following processes needs to be changed to better handle Change Management in the cloud?
Software distribution
Hardware independence is:
The abstraction of your server OS from the server hardware and then packaging it into virtual machines
A company's email software vendor charged them $500 a month to use software, licensed for the maximum number of active email addresses. The company switched to a cloud-based email software that charged based on the number of active email addresses each month. The company was billed $100 the first month, $200 the second month, and $100 for the remaining 10 months of the year. After a year, how much money did the company save by switching to cloud computing?
$4,700
A few possible security risks when using the cloud:
- Data loss- Data exposure- Shared technology
Some forms of encapsulation being used in VPNs are:
- GRE- VXLAN- VLAN
Which of the following assets have risks related to a cloud provider going out of business?
- Not using hybrid cloud federations to keep your data synced with multiple providers- Data stored at the provider
Some of the ways to mitigate risks when using cloud data integration:
- Understand the application design when moving to the cloud- Keep the applications, data, and the users as close as possible
A few security benefits in using the cloud are:
-24/7 staffing and monitoring -Increased availability and improved disaster recovery through redundancy and multiple locations
Cloud computing is what?
-A kind of Internet-based computing that provides shared processing resources and data to computers and other devices on demand -A model for enabling ubiquitous, on-demand access to a shared pool of configurable computing resources such as networks, servers, storage, applications and services
When your organization has a compliance audit, which of the following might be included as part of the audit?
-Assessing what is used as identity management -Audit of the the access control list
Which terms best describe the following scenario? When the load on your web site goes up, the load balancer adds additional compute web servers to carry the load and then removes these servers when the load goes back down.
-Automation -Elasticity
You can only use virtual servers in private clouds or traditional data centers.
False. All forms of cloud computing make use of virtual servers.
Which of the following are ways of managing risk management?
-Identify what the organizations assets are -Identify threats and vulnerabilities -Address the identified risk -Monitor risks
Cloud computing characteristics:
-Managed by the provider -Managed through self-service on demand -Network accessible -Sustainable
Cloud providers and cloud software include:
-Microsoft Azure -OpenStack -Amazon Web Services -Google Cloud Platform
Which of the following are cloud providers or cloud software?
-OpenStack -Microsoft Azure -Google Compute Engine -Amazon Web Services
Which of the following organizations is MOST likely to consider confidentiality requirements before implementing a backup and disaster recovery cloud solution?
-Organizations with legal or regulatory constraints -Government or emergency response
What are some of the major differences between a private cloud and a public cloud?
-Private clouds are for use in a single organization -A public cloud is typically offered over the Internet
The three major cloud forms are:
-Public -Private -Hybrid
As stated by the National Institute of Standards and Technology, cloud characteristics include:
-Rapid elasticity -Broad network accessibility
Variable cost business models are focused on:
-Responsiveness -Removing the need for hardware completely -Allowing for smaller operating expenses (OPEX) over time, instead of large initial capital expenditures (CAPEX) -Operating efficiencies that do not work anymore
What are the three primary scalability levels?
-Server Scalability -Scaling of the Network -Scaling of the Platform
Some of important steps in the evolution from virtualization to the cloud are:
-Server virtualization -Distributed data centers -Private data centers -Hybrid data clouds and public clouds
Cloud scalability means?
-The ability of a particular system to fit a problem as the scope of that problem increases -The ability of an application to be scaled up to meet demand through replication and distribution of requests across a pool or farm of servers
Indications that your organization may be ready for the cloud are:
-Tied-up capital -Costly excess capacity -Running out of capacity
Some examples of using hardware standardization are:
-Using the same architecture, such as X86 -Taking advantage of tier-based virtualization cloud technologies -VM sizes are pre-defined sizes, often known as flavors
Common technologies used to mitigate security concerns are:
-Virtual firewalls -Virtual private networks
Indications that your organization may not be ready for the cloud are:
-Your organization owns large data centers that often have enough scale to be as flexible and efficient as cloud computing providers -Legal and security (compliance) reasons can require an organization to know more details about the location of its data and servers than a cloud computing provider is able to provide -Predictable and fixed workloads can typically make optimal use of their hardware and do not need scaling
You company's data could become compromised by
-phishing -social engineering -poor physical security
Cloud computing improves business flexibility by...
-providing easier access to users outside of the organization -rapidly growing and shrinking capacity -allowing for the faster deployment of applications
A webmail service hosted by an MSP for which of the following is considered a private cloud?
A single company
There are not legal risks when moving to the cloud.
False. Moving your data to the cloud created several legal questions that need to be addressed by your company's legal teams, especially if your company operates internationally.
How does scalability work with cloud computing? A. Servers and storage can be added quickly. B. Servers and storage can be released quickly. C. Users can be added and removed quickly. D. All of the above is correct.
All of the above is correct.
Why is there less maintenance effort using SaaS when managing the operating system?
Because the service provider manages the operating system in SaaS
The _______________ identifies customer requirements and makes sure that the cloud service provider meets the requirements before agreeing to deliver the service
Business Relationship Manager (BRM)
How can the internal IT department successfully react to cloud computing?
By becoming an internal cloud provider
How might an organization successfully implement a SaaS strategy?
By managing the risks that are associated with bringing in external providers
In order to maintain strategic flexibility and the ability to bring a cloud system back internally, which of the following is the MOST important requirement in the contract?
Cloud subscriber maintains ownership of their data
CBN stands for:
Cloud-Based Networking
CEN stands for:
Cloud-Enabled Networking
Which of the following is a reason for business users to be interested in cloud computing?
Desire for improved user experience
It does not matter what portions of your current data center or infrastructure could be a possible security risk when moving that data to the cloud.
False
Making use of cloud computing often slows down application development and architectural design.
False. Using cloud computing and making use of services that are distributed and already available for your development teams speeds up the time to market strategy for almost all new development projects.
Which of the following steps BEST lead to successful adoption of a cloud service?
Gather stakeholder requirements, select potentially suitable cloud providers, perform a pilot, and then select the most appropriate provider.
A military facility is NOT able to fully embrace cloud computing because of which of the following?
High degree of confidentiality and operational assurance
When computing services or infrastructure is maintained on both private and public clouds:
Hybrid clouds
Differing from more technology-oriented IT management approaches like network management and IT systems management, __________ is characterized by adopting a process approach towards management, focusing on customer needs and IT services for customers rather than IT systems, and stressing continual improvement.
IT Service Management (ITSM)
Why does cloud computing shift capital cost to variable cost?
IT assets are not owned by the customer
Which of the following cloud services would be used to pay for hardware when it is being used for computing, network space, and storage over the Internet?
IaaS
Which of the following is the MOST significant difference between SaaS and IaaS?
IaaS can test network configurations.
Which of the following is a good case for IT outsourcing, as well as cloud computing?
Improving the overall cost structure
Which of the following recognized approaches for managing an organization's technology environment can be applied to cloud computing services?
Information Technology Infrastructure Library (ITIL)
IaaS stands for?
Infrastructure as a Service
Which of the following does the server virtualization layer do?
It allows the underling physical server hardware to be shared
Which of the following is indicated by a high number of variations of different virtual servers?
Lack of automation of virtual machine image manufacturing
Which of the following risk results if cloud computing providers limit their Service Level Agreement (SLA) liabilities?
Legal risk
Which of the following is the function of orchestration services?
Manage the starting and stopping of application server clusters
Which of following is the MOST beneficial aspect of public cloud deployment for a startup company?
No upfront capital expenditure
A cloud subscriber may come under certain security constraints when hosting sensitive data in the cloud due to government regulations. Which of the following is the BEST mitigating control that could be implemented by the cloud provider?
Offer a single-tenancy software service with segregated virtualized infrastructure.
Which of the following is the MOST widely used example of cloud computing?
Online email
Being able to create websites and web services quickly is an example of which of the following?
PaaS
Which of the following processes should be implemented to validate the application security of the cloud provider's SaaS application?
Periodic penetration testing
PaaS stands for?
Platform as a Service
Which of the following is a differentiating characteristic of private cloud solutions compared to public cloud solutions?
Private cloud solutions are dedicated for use by a single organization.
When computing services or infrastructure is maintained on the private network:
Private clouds
When computing services or infrastructure is maintained on the public network:
Public clouds
Which of the following applies only to public cloud computing as opposed to outsourcing?
Public clouds have no upfront CAPEX costs for hardware
Which of the following is NOT a recognized cloud classification model?
QoS
Which of the following is BEST used when setting up security for services being used within a public cloud?
SSL
G Suite (formerly known as Google Apps, and different than Google Cloud Platform) is a set of online applications allowing users to create and share documents. This best describes which cloud type?
SaaS
Twitter is a service that allows users to exchange short text messages. This is an example of:
SaaS
Which of the following characteristics of cloud computing describes the ability to grow easily in response to an increase in demand?
Scalability
Which of the following is a typical concern for business and IT leaders, when adopting cloud computing?
Security of current IT solutions
A company is using an Internet-based cloud service provided by a third party. Which of the following can the third party NOT guarantee when providing cloud resources?
The cost of the services
Which of the following is the MOST important service management consequence of elastic capacity?
The need for good performance monitoring and management
Which of the following do IT outsourcing and cloud computing typically have in common?
The possibility for vendor lock-in
The MOST important business continuity risk when selecting cloud service providers is:
The provider going out of business
What consequences does outsourcing IT and cloud computing have in common?
The use of external staffing
Which consequences do outsourcing IT, as well as cloud computing, have in common?
The use of external staffing
The following reduces your company's ________: Because cloud computing greatly reduces this, on-demand, scalable, and elastic services, allow the company to get products out quicker.
Time to market
A data centre is a facility used to house computer systems and associated components, such as telecommunications and storage systems.
True
An application for internal-use only, on company-owned assets, would be best described as a private SaaS.
True
Applications that are easy to migrate and have some business value are great options when first piloting or doing a POC for migrating to the cloud.
True
Capital tied up in hardware that might become obsolete over time is one limitations of owning your own servers instead of using the cloud.
True
Cloud computing delivers IT capabilities that scale with demand, which is a huge benefit to organizations that want to quickly start out.
True
Cloud computing is typically based on open Internet technology
True
Cloud-related financial risks can be managed by making sure that cloud assets are generating revenue.
True
Data integration is complex in private data centers and is even more so when it comes to the cloud.
True
Federation is really a form of hybrid cloud technologies
True
If you do not already know the processes behind your current IT infrastructure, then making changes such as moving to the cloud can be detrimental.
True
It is important to use standardization on things such as data formats, virtual machine sizes, etc. because it helps facilitate, when the needs arises, to move from one cloud provider to another.
True
It is possible that data can be lost or stolen when migrating to the cloud.
True
Multitenancy allows system resources to be fully utilized before another server is brought online, further reducing the operating costs and data centre cooling that is required along with it.
True
Often times when using third party management tools for the cloud there is risk because of the possibility vendor lock-in.
True
Server virtualization allows the underlying physical server hardware to be shared.
True
The goal of ITSM is to ensure that IT functions efficiently and that its processes are also in alignment with the needs of the business.
True
The management requirements of cloud computing become much more complex when you need to manage private, public, and traditional data centers all together. You'll need to add capabilities for federating these environments.
True
Virtual machines can be secured at the VM-level by using access control list and firewalls.
True
Virtualization software separates physical infrastructures to create various dedicated resources.
True
Web email is considered an early example of cloud adoption
True
Within cloud environments, the purpose of the Business Relationship Management process is extended to form and uphold the cloud service provider and the customer-business relationship
True
You should be aware of which portions of your current data center or infrastructure can be a possible security risk when moving that data to the cloud.
True
A _____ allows one network from a single geographical data center to communicate securely with a data center in a different locale.
VPN
Which of the following must be implemented by a cloud provider to ensure that different entities can authenticate and share basic user account information?
Virtualization
You access a PaaS cloud by what means?
Web services
Which of the following questions should be considered before selecting a cloud computing vendor?
What cloud computing product will fit the business needs?
Examples of _____ Area Networks are the Internet and VPN tunnels.
Wide
When using the ITIL standard the first step when considering when a company needs to implement a cloud network is to
assess what the business needs are
When utilizing cloud technologies, one of the biggest benefits is using ________, which allows things to take place in cloud loads without much user intervention.
automation
Network ___________ is the amount of data that can be sent across a network link within a given time.
bandwidth
When using cloud computing, you will shift _________ cost to _______ cost.
capital cost to variable cost
A ________ cloud, also known as cloud federation, is the deployment and management of multiple external and internal cloud computing services to match business needs. A federation is the union of several smaller parts that perform a common action.
federated
Cloud computing allows business to move away from the need to have _______ capital expenditures related to computer hardware by utilizing the cloud instead.
large
Cloud computing allows for you to use _________ because you only pay based on your usage.
opex
A cloud's network must be _________ and ___________.
resilient and redundant
Private clouds are operated solely for _______________ organization(s)
specific
In keeping with organizational goals of a corporation when deploying an application to a cloud services provider, which of the following is NOT a selection criteria for choosing a pilot?
Successful completion