Unit 3.1: OSI model (Open Systems Interconnection) - ANSWER The OSI model is a
framework that standardizes the functions of a networking system into seven distinct layers.
Each layer interacts with the layer directly above and below it, facilitating data
communication between devices
1. Physical Layer: Transmits raw bits over a physical medium (cables, radio waves)
2. Data Link Layer: Manages node-to-node data transfer and error detection (Ethernet, MAC
addresses)
3. Network Layer: Routes data packets between networks (IP, routers)
4. Transport Layer: Manages reliable data transfer (TCP, UDP)
5. Session Layer: Controls communication sessions (NetBIOS, PPTP)
6. Presentation Layer: Translates data formats and handles encryption (SSL/TLS)
7. Application Layer: Provides network services to applications (HTTP, FTP, SMTP)
Unit 3.1: What are infrastructure considerations in security architecture? -
ANSWER Involves evaluating the hardware, software, network, and power resources
required to build a secure environment, ensuring that systems can support business
objectives securely and reliably
3.1: TCP/IP model (Transmission Control Protocol/Internet Protocol) - ANSWER The
TCP/IP model is a simplified, practical framework for designing and understanding network
communication over the Internet. It consists of 4 layers that define how data is exchanged
between devices
1
, 1. Network Interface/Link Layer: Manages physical connections and data transfer over the
physical medium, such as Ethernet and Wi-Fi. It corresponds to the Physical and Data Link
layers of the OSI model
2. Internet Layer: Handles logical addressing, routing, and packet forwarding. Protocols like
IP (Internet Protocol), ICMP (Internet Control Message Protocol), and ARP (Address
Resolution Protocol) operate here, similar to the Network layer of the OSI model
3. Transport Layer: Ensures end-to-end communication, reliability, and flow control between
devices. It includes protocols like TCP (Transmission Control Protocol) for reliable,
connection-oriented communication and UDP (User Datagram Protocol) for faster,
connectionless communication
4. Application Layer: Provides network services and manages protocols for communication
between software applications, such as HTTP (web browsing), FTP (file transfers), SMTP
(email), and DNS (domain name resolution). This layer combines the functionalities of the
Session, Presentation, and Application layers of the OSI model.
Unit 3.1: Cloud infrastructure - ANSWER Cloud infrastructure refers to the hardware
and software components needed to support the delivery of cloud services
Cloud infrastructure includes:
- Physical servers
- Storage
- Networking
- Virtualization
- Management software
Unit 3.1: Cloud responsibility matrix - ANSWER Defines who is responsible for security
in a cloud environment, detailing what aspects the cloud provider manages versus what the
customer is responsible for, based on the service model (IaaS, PaaS, SaaS)
Unit 3.1: Hybrid cloud - ANSWER A combination of on-premises private cloud and
third-party public cloud services, with orchestration between them. It allows data and
applications to be shared between them but adds complexity to security management
2
framework that standardizes the functions of a networking system into seven distinct layers.
Each layer interacts with the layer directly above and below it, facilitating data
communication between devices
1. Physical Layer: Transmits raw bits over a physical medium (cables, radio waves)
2. Data Link Layer: Manages node-to-node data transfer and error detection (Ethernet, MAC
addresses)
3. Network Layer: Routes data packets between networks (IP, routers)
4. Transport Layer: Manages reliable data transfer (TCP, UDP)
5. Session Layer: Controls communication sessions (NetBIOS, PPTP)
6. Presentation Layer: Translates data formats and handles encryption (SSL/TLS)
7. Application Layer: Provides network services to applications (HTTP, FTP, SMTP)
Unit 3.1: What are infrastructure considerations in security architecture? -
ANSWER Involves evaluating the hardware, software, network, and power resources
required to build a secure environment, ensuring that systems can support business
objectives securely and reliably
3.1: TCP/IP model (Transmission Control Protocol/Internet Protocol) - ANSWER The
TCP/IP model is a simplified, practical framework for designing and understanding network
communication over the Internet. It consists of 4 layers that define how data is exchanged
between devices
1
, 1. Network Interface/Link Layer: Manages physical connections and data transfer over the
physical medium, such as Ethernet and Wi-Fi. It corresponds to the Physical and Data Link
layers of the OSI model
2. Internet Layer: Handles logical addressing, routing, and packet forwarding. Protocols like
IP (Internet Protocol), ICMP (Internet Control Message Protocol), and ARP (Address
Resolution Protocol) operate here, similar to the Network layer of the OSI model
3. Transport Layer: Ensures end-to-end communication, reliability, and flow control between
devices. It includes protocols like TCP (Transmission Control Protocol) for reliable,
connection-oriented communication and UDP (User Datagram Protocol) for faster,
connectionless communication
4. Application Layer: Provides network services and manages protocols for communication
between software applications, such as HTTP (web browsing), FTP (file transfers), SMTP
(email), and DNS (domain name resolution). This layer combines the functionalities of the
Session, Presentation, and Application layers of the OSI model.
Unit 3.1: Cloud infrastructure - ANSWER Cloud infrastructure refers to the hardware
and software components needed to support the delivery of cloud services
Cloud infrastructure includes:
- Physical servers
- Storage
- Networking
- Virtualization
- Management software
Unit 3.1: Cloud responsibility matrix - ANSWER Defines who is responsible for security
in a cloud environment, detailing what aspects the cloud provider manages versus what the
customer is responsible for, based on the service model (IaaS, PaaS, SaaS)
Unit 3.1: Hybrid cloud - ANSWER A combination of on-premises private cloud and
third-party public cloud services, with orchestration between them. It allows data and
applications to be shared between them but adds complexity to security management
2
