D320 WGU Study Guide – Complete With Solutions
BIA (Business Impact Analysis) Right Ans - an assessment of the priorities
given to each asset and process within the organization; analysis considers the
effect (impact) any hard or loss might mean to the organization overall;
identify critical paths and single points of failure; determine costs of
compliance
Metered Service Right Ans - the organization only pays for what it uses
Rapid Elasticity Right Ans - excess capacity available to be apportioned to
cloud customers
Cloud bursting Right Ans - Organizations to use hosted cloud serves to
augment internal, private data center capabilities with managed services
during times of increase demand; an org can rent the additional capacity as
needed from an external cloud provider.
Benefits of cloud services Right Ans - Reduction in personal cost
Reduction in capital expenditure
Reduction in operational costs
Transferring some regulatory costs
Reduction in costs for data archival/backup services
ROI (Return on Investment) Right Ans - term related to cost-benefit
measures; used to describe a profitability ratio; calculated by dividing net
profits by net assets
Elasticity Right Ans - customers can contract cloud providers to use
virtualization to flexibly allocate only the needed usage of each resource to the
organization, while holding costs while maintaining profitability; allow users
to access their data from diverse platforms and location, increasing
portability, accessibility, and availability.
Simplicity Right Ans - Allow a user to seamlessly use the service without
frequently interacting with the cloud service provider
Scalability Right Ans - Increasing/reducing services can be easily, quickly,
and cost-effectively accomplished
,IaaS (Infrastructure as a Service) Right Ans - most basic service; allows
customer to install all software and
OSs on hardware housed and connected by the cloud vendor; can be
considered a warm site for
BC/DR purposes; optimal for orgs wanting control over the security of their
data and limited
cloud vendor assistance (BC/DR or archiving); least expensive option;
customer retain IT staffing
o When to use: website or application hosting; virtual data centers; data
analysis
PaaS (Platform as a Service) Right Ans - includes services from IaaS and
OSs (offers a selection for
customers to use, Windows, Linux, Mac, etc.); vendor is responsible for
patching, administering,
and updating the OS; customer can install any software; useful for customers
involved in
software development (they can test on multiple OS platforms); includes
cloud-based database
engines and services "big data" style services (data warehousing and
datamining); provider
offers access to back-end engine/functionality, while customer can
create/install apps/APIs to
access the backend
PaaS (Platform as a Service) Right Ans - When to use: reduce development
time; support for different programming languages;
easy collaboration for remote/distributed teams; high development
capabilities w/o
additional staff
PaaS (Platform as a Service) Right Ans - Data Storage Types used:
structured/unstructured
Unstructured Data Types (PaaS) Right Ans - qualitative data; natural-
language text; incorporate media
(audio, video, images); contains JSON, XML, binary objects (images encoded as
text
,strings); important for data analytic strategies; noSQL
Structured Data Types (PaaS) Right Ans - quantitative data; organized and
decipherable by machine
learning algorithms; SQL (relational) can be used to quickly input, search, and
manipulate data; used by machine learning algorithms
SaaS (Software as a Service) Right Ans - includes everything from IaaS and
PaaS with the addition of
software programs; vendor is responsible for administering, patching, and
updating everything,
also takes care of all infrastructure, compute, and storage needs as well as
providing OSs and
application; customer is only involved in uploading and processing data on a
full production
environment; application is a shared responsibility of all parties
SaaS (Software as a Service) Right Ans - When to use: (Personal) email
services (gmail), cloud storage services (Dropbox),
cloud-based file management (Google Docs); (Business) gmail, collaboration
tools
(Trello), CRM (Salfesforce), ERP
Cloud Deployment Models Right Ans - Public Cloud: resources are owned
and operated by a vendor and sold, leased, or rented to
anyone; multitenant environments; multiple customers will share resources;
EX: customer might
be using a AM that resides on the same hardware that hosts another VM as
their competitor, but
they do not know the entities using the same resources; Rackspace,
Microsoft's Azure, and AWS
(Amazon Web Services)
- Private Cloud: resources dedicated to a single customer; might be owned and
maintained by the
entity that is the sole customer (org might own and operate a data center that
serves as the
cloud environment for the org's users); might be a set of resources (racks,
blades, software
, packages) owned by the single customer but located and maintained at
provider's data center;
provider might offer physical security, admin services, and utilities (power,
Internet) for
customers (referred to as co-lo (co-located) environment)
- Community Cloud: features infrastructure and processing owned and
operated by/for an affinity
group; orgs come together to perform joint tasks and functions; gaming
communities, ownership
is spread throughout the various members of the community; can be
provisioned by a third
party (FedRAMP service - only used by US federal gov)
- Hybrid Cloud: contains elements of other models; org might want to retain
some private cloud
resources (remote user access)
Cloud Broker Right Ans - company that purchases hosting services from a
provider and resells them to its own customers
CASB (Cloud Access Security Broker) Right Ans - third-party entity offering
independent IAM (identity and
access management) services to CSPs and cloud customers; can be SSO,
certificate management,
and cryptographic key escrow
Regulators Right Ans - ensure orgs are incompliance with regulatory
framework for which they are responsible for; HIPAA, GLBA, PCI DSS, ISO,
SOX, etc.; regulators include FTC, SEC, and auditors
Cost-Benefit Analysis Right Ans - comparing potential positive impact
(profit, efficiency, market share) of a business decision to potential negative
impact (expense, detriment to production, risk) and weighing the two as
equivalent or not (potential positive/negative)
FIPS 140-2 Right Ans - NIST document that describes the process for
accrediting and cryptosystems for use by the federal government; lists only
approved cryptographic tools
BIA (Business Impact Analysis) Right Ans - an assessment of the priorities
given to each asset and process within the organization; analysis considers the
effect (impact) any hard or loss might mean to the organization overall;
identify critical paths and single points of failure; determine costs of
compliance
Metered Service Right Ans - the organization only pays for what it uses
Rapid Elasticity Right Ans - excess capacity available to be apportioned to
cloud customers
Cloud bursting Right Ans - Organizations to use hosted cloud serves to
augment internal, private data center capabilities with managed services
during times of increase demand; an org can rent the additional capacity as
needed from an external cloud provider.
Benefits of cloud services Right Ans - Reduction in personal cost
Reduction in capital expenditure
Reduction in operational costs
Transferring some regulatory costs
Reduction in costs for data archival/backup services
ROI (Return on Investment) Right Ans - term related to cost-benefit
measures; used to describe a profitability ratio; calculated by dividing net
profits by net assets
Elasticity Right Ans - customers can contract cloud providers to use
virtualization to flexibly allocate only the needed usage of each resource to the
organization, while holding costs while maintaining profitability; allow users
to access their data from diverse platforms and location, increasing
portability, accessibility, and availability.
Simplicity Right Ans - Allow a user to seamlessly use the service without
frequently interacting with the cloud service provider
Scalability Right Ans - Increasing/reducing services can be easily, quickly,
and cost-effectively accomplished
,IaaS (Infrastructure as a Service) Right Ans - most basic service; allows
customer to install all software and
OSs on hardware housed and connected by the cloud vendor; can be
considered a warm site for
BC/DR purposes; optimal for orgs wanting control over the security of their
data and limited
cloud vendor assistance (BC/DR or archiving); least expensive option;
customer retain IT staffing
o When to use: website or application hosting; virtual data centers; data
analysis
PaaS (Platform as a Service) Right Ans - includes services from IaaS and
OSs (offers a selection for
customers to use, Windows, Linux, Mac, etc.); vendor is responsible for
patching, administering,
and updating the OS; customer can install any software; useful for customers
involved in
software development (they can test on multiple OS platforms); includes
cloud-based database
engines and services "big data" style services (data warehousing and
datamining); provider
offers access to back-end engine/functionality, while customer can
create/install apps/APIs to
access the backend
PaaS (Platform as a Service) Right Ans - When to use: reduce development
time; support for different programming languages;
easy collaboration for remote/distributed teams; high development
capabilities w/o
additional staff
PaaS (Platform as a Service) Right Ans - Data Storage Types used:
structured/unstructured
Unstructured Data Types (PaaS) Right Ans - qualitative data; natural-
language text; incorporate media
(audio, video, images); contains JSON, XML, binary objects (images encoded as
text
,strings); important for data analytic strategies; noSQL
Structured Data Types (PaaS) Right Ans - quantitative data; organized and
decipherable by machine
learning algorithms; SQL (relational) can be used to quickly input, search, and
manipulate data; used by machine learning algorithms
SaaS (Software as a Service) Right Ans - includes everything from IaaS and
PaaS with the addition of
software programs; vendor is responsible for administering, patching, and
updating everything,
also takes care of all infrastructure, compute, and storage needs as well as
providing OSs and
application; customer is only involved in uploading and processing data on a
full production
environment; application is a shared responsibility of all parties
SaaS (Software as a Service) Right Ans - When to use: (Personal) email
services (gmail), cloud storage services (Dropbox),
cloud-based file management (Google Docs); (Business) gmail, collaboration
tools
(Trello), CRM (Salfesforce), ERP
Cloud Deployment Models Right Ans - Public Cloud: resources are owned
and operated by a vendor and sold, leased, or rented to
anyone; multitenant environments; multiple customers will share resources;
EX: customer might
be using a AM that resides on the same hardware that hosts another VM as
their competitor, but
they do not know the entities using the same resources; Rackspace,
Microsoft's Azure, and AWS
(Amazon Web Services)
- Private Cloud: resources dedicated to a single customer; might be owned and
maintained by the
entity that is the sole customer (org might own and operate a data center that
serves as the
cloud environment for the org's users); might be a set of resources (racks,
blades, software
, packages) owned by the single customer but located and maintained at
provider's data center;
provider might offer physical security, admin services, and utilities (power,
Internet) for
customers (referred to as co-lo (co-located) environment)
- Community Cloud: features infrastructure and processing owned and
operated by/for an affinity
group; orgs come together to perform joint tasks and functions; gaming
communities, ownership
is spread throughout the various members of the community; can be
provisioned by a third
party (FedRAMP service - only used by US federal gov)
- Hybrid Cloud: contains elements of other models; org might want to retain
some private cloud
resources (remote user access)
Cloud Broker Right Ans - company that purchases hosting services from a
provider and resells them to its own customers
CASB (Cloud Access Security Broker) Right Ans - third-party entity offering
independent IAM (identity and
access management) services to CSPs and cloud customers; can be SSO,
certificate management,
and cryptographic key escrow
Regulators Right Ans - ensure orgs are incompliance with regulatory
framework for which they are responsible for; HIPAA, GLBA, PCI DSS, ISO,
SOX, etc.; regulators include FTC, SEC, and auditors
Cost-Benefit Analysis Right Ans - comparing potential positive impact
(profit, efficiency, market share) of a business decision to potential negative
impact (expense, detriment to production, risk) and weighing the two as
equivalent or not (potential positive/negative)
FIPS 140-2 Right Ans - NIST document that describes the process for
accrediting and cryptosystems for use by the federal government; lists only
approved cryptographic tools
