Cisco Devnet Assoc -- Application Deployment and Security Questions & Answers Solved 100% Correct!!

Components of a container technology - Namespaces Control groups Union File Systems container technology -- control groups - or cgroups , are a standard linux concept that enables the system to limit the resources, such as RAM or storage, used by an application. container technology -- namespaces - which isolate different parts of the running container. For example, the process itself is isolated in the pid (process ID) namespace, the filesystem is isolated in the mnt (mount) namespace, and networking is isolated in the net namespace. container technology -- Union File Systems - UnionFS , are file systems that are built layer by layer, combining resources. Deployment Models - Bare Metal Virtual Machines Container-based Infrastructure Serverless computing docker -d parameter - --detach, saying we want to run it in the backgrounddocker -p parameter - to publish it on the ports that we exposed in the dockerfile docker command to see list of images - docker images downside to serverless computing - While there is a huge advantage in the fact that you're only paying for the resources that are actually in use — as opposed to a virtual machine that may be running all the time, even when its capacity isn't needed — it's important to remember that this model means that you have zero control over the host machine, so it may not be appropriate from a security perspective. how to build a docker container - docker build -t <tag> <name for container> how to commit a docker container to a registry - docker commit <tag name> <image name> how to login to a docker container - sudo docker exec -it < tag name> /bin/sh how to remove a docker container - docker tm <tag name> how to run a docker container - docker run -it <tag name> /bin/sh how to stop a docker container - docker stop <tag name> Hybrid Cloud - hybrid cloud is the combination of two different types of clouds. Typically, hybrid cloud is used to bridge private cloud and public cloud within a single application. list docker container processes - docker ps On-Premises Infrastructure - any system that's literally within the confines of your building, but in this case we're talking about traditional data centers housing individual machines that are provisioned for applications, rather than clouds, external or otherwise.One major disadvantage of a public cloud - One disadvantage of public cloud however, is known as the "noisy neighbor" problem. Because you are sharing the cloud with other users, you may have to contend with situations in which other workloads take up more than their share of resources. Private Cloud - What distinguishes a private cloud from other types of clouds is that all resources within the cloud are under the control of your organization. In most cases, a private cloud will be located in your data center, but that's not technically a requirement to be called "private." The important part is that all resources that run on the hardware belong to the owner organization. The advantage of a private cloud is that you have complete control over where it's located, which is important in situations where there are specific compliance regulations, and that you don't typically have to worry about other workloads on the system. On the downside, you do have to have an operations team that can manage the cloud and keep it running. Public Cloud - A public cloud is essentially the same as a private cloud, but it is managed by a public cloud provider. Public clouds can also run systems such as OpenStack or Kubernetes, or they can be specific proprietary clouds such as Amazon Web Services or Azure. Serverless Computing - Serverless computing takes advantage of a modern trend towards applications that are built around services — that is, the application makes a call to another program or workload to accomplish a particular task — to create an environment where applications are made available on an "as needed" basis. Types of Infrastructure - On-Premises Private Cloud Hybrid Cloud Edge CloudWhat are the 4 Deployment Environments - Development Environment Testing Environment Staging Environment Production Environment what are the two types of Hypervisors - 'Type 1', which run directly on the physical hardware ('bare metal') 'Type 2', which run, usually as an application, under an existing operating system. What is a Bare Metal Deployment Model - he most familiar, and the most basic way to deploy software is by installing it directly on the target computer, or the "bare metal." I What is a development environment - where you do your coding, and in most cases it bears only a passing resemblance to the final environment — typically just enough for you to deal with fundamental aspects of your infrastructure, such as containers or cloud networking. You'll likely use an IDE or other tool to make deployment easier. Each developer typically has their own development environment. what is a dockerfile - is a simple text file, named Dockerfile . It defines the steps the docker build command needs to take in order to create an image that can be used to create the target container. What is a Production Environment - Finally, the code arrives at the production environment, where end users interact with it. At this point it's been tested multiple times, and should be error free. The production environment itself must be sized and constructed to handle expected traffic, including surges that might come seasonally or with a particular event.Handling those surges is something you can plan for when designing your infrastructure. Before we can look at infrastructure, however, we need to talk about different models you can use for deploying your software. What is a Staging Environment - Staging should be as close as possible to the actual production environment, so that the code can undergo final acceptance testing in a realistic environment. n fact, instead of maintaining a smaller-scale staging environment, some organizations maintain two matching production environments, one of which hosts the current release of an application, the other standing ready to receive a new release (the environments are often referred to using color names, e.g., "Green and Blue," "Red and Black," etc.). In this case, when a new version is deployed, traffic is shifted (gradually or suddenly, as in "cut over") from the current production environment to the new one. With the next release, the process repeats in reverse. What is a Testing Environment - set aside for testing the code, though when working on small projects, the development and testing environments are often combined. We'll talk more about testing later on, but for now, understand that this environment should be structurally similar to the final production environment, even if it is on a much smaller scale. The testing environment often includes automated testing tools such as Jenkins, CircleCI, or Travis CI, as well as integration with a version control system, and is shared among the entire team. It may also include code review tools such as Gerrit. what is a Virtual Machine Deployment Model - A virtual machine is like a computer within your computer; it has its own computing power, network interfaces, and storage. What is container-based infrastructure - Containers were designed to provide many of the same benefits as VMs, such as workload isolation and the ability to run multiple workloads on a single machine, but they're architected a bit differently. Where VMs emulate an entire computer, a container typically represents just an application or a group of applications. The value of using containers is that all of the libraries and binaries you need to run the application are included, so the user doesn't have to take that additional installation step.What is Edge Cloud - Moves computing closer to where it's needed, so instead of transactions making their way from the end user in, say, Cleveland, to the main cloud in, say, Oregon, there may be an intermediary cloud -- an edge cloud -- in Cleveland what is the PATH environmental variable - which is the list of places Bash will look for a script that doesn't include a path to the executable. You can look at the value of the path by using the echo command, which we used earlier: