ISTM 310 MIDTERM REVIEW EXAM
(ACTUAL EXAM) WITH CORRECT ACTUAL
QUESTIONS AND CORRECTLY WELL
DEFINED ANSWERS LATEST ALREADY
GRADED A+ 2025 – 2026
Principle of least privilege - ANSWERS-A security discipline that requires that
a particular user, system, or application be given no more privilege than
necessary to perform its function or job.
Identity-based policies - ANSWERS-Attach managed and inline policies to IAM
identities (users, groups to which users belong, or roles). Identity-based
policies grant permissions to an identity.
Inline policies - ANSWERS-Highly customizable AWS policies that are attached
to a user or group through AWS
Managed policies - ANSWERS-Standalone identity-based policies that you can
attach to multiple users, groups, and roles in your AWS account
,Resource-based policies - ANSWERS-an access control concept where a user
in another account (i.e., a different cloud customer's account) can be granted
access to a resource in your account.
Root user - ANSWERS-When you first create an AWS account, you begin with
a single sign-in identity that has complete access to all AWS services and
resources in the account.
Network - ANSWERS-A group of computers that connect to one another to
send data
Subnet - ANSWERS-A grouping of devices that all share the same router and
IP address range.
How many bits is an IPv6 address? - ANSWERS-128 bits
How many bits is an IPv4 address? - ANSWERS-32 bits
CIDR (Classless Inter Domain Routing) - ANSWERS-Allows service providers to
allocate IPv4 addresses on any address bit boundary (prefix length /)
At what layer in the OSI model contains Wi-Fi and ethernet - ANSWERS-Data
Link
At what layer in the OSI model houses the wires and raw bits? - ANSWERS-
Physical
,As data moves from the the direct connection between devices towards the
data the user cares about, it is _____ with additional information. -
ANSWERS-decapsulation, decapsulated
What is the cloud? - ANSWERS-Leasing of space that is not your hardware
How is the cloud green? - ANSWERS-The cloud can save an organization
money because they don't need to run and maintain physical servers and are
better for the environment because you only pay for the exact energy you use
with less excess energy wasted.
Is the cloud a safer computing environment than an in-house network? -
ANSWERS-Not necessarily because the cloud provider is a bigger target to hit
and you entrust your data in a single organization.
What is chaos monkey? - ANSWERS-Chaos money was invented by Netflix to
shut down random systems but because of redundancy, there was not change
in user experience.
What does elasticity mean? - ANSWERS-The ability to scale out and scale
back as needed based on demand
What is IaaS (Infrastructure as a Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware and virtualization.
Least convenience and most control.
, What is PaaS (Platform as a Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware, virtualization, and operating system.
Some convenience and some control.
What is SaaS (Software As A Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware, virtualization, operating system,
middleware, and applications. Cloud provider controls everything.
Most convenience and least control.
Out of IaaS, SaaS, and PaaS, rank them on a scale on most to least control for
the user - ANSWERS-Most control: IaaS -> PaaS - SaaS
What does the s stand for in https - ANSWERS-secure
What layer of the OSI model is http or https? - ANSWERS-Layer seven or the
application layer because it is what the user interacts with
What layer of the OSI model is a frame? - ANSWERS-Layer two or the data
link layer
What is the TCP/IP model (Name the steps)? - ANSWERS-4. Application
3. Transact
2. Network or Internet
1. Access
(ACTUAL EXAM) WITH CORRECT ACTUAL
QUESTIONS AND CORRECTLY WELL
DEFINED ANSWERS LATEST ALREADY
GRADED A+ 2025 – 2026
Principle of least privilege - ANSWERS-A security discipline that requires that
a particular user, system, or application be given no more privilege than
necessary to perform its function or job.
Identity-based policies - ANSWERS-Attach managed and inline policies to IAM
identities (users, groups to which users belong, or roles). Identity-based
policies grant permissions to an identity.
Inline policies - ANSWERS-Highly customizable AWS policies that are attached
to a user or group through AWS
Managed policies - ANSWERS-Standalone identity-based policies that you can
attach to multiple users, groups, and roles in your AWS account
,Resource-based policies - ANSWERS-an access control concept where a user
in another account (i.e., a different cloud customer's account) can be granted
access to a resource in your account.
Root user - ANSWERS-When you first create an AWS account, you begin with
a single sign-in identity that has complete access to all AWS services and
resources in the account.
Network - ANSWERS-A group of computers that connect to one another to
send data
Subnet - ANSWERS-A grouping of devices that all share the same router and
IP address range.
How many bits is an IPv6 address? - ANSWERS-128 bits
How many bits is an IPv4 address? - ANSWERS-32 bits
CIDR (Classless Inter Domain Routing) - ANSWERS-Allows service providers to
allocate IPv4 addresses on any address bit boundary (prefix length /)
At what layer in the OSI model contains Wi-Fi and ethernet - ANSWERS-Data
Link
At what layer in the OSI model houses the wires and raw bits? - ANSWERS-
Physical
,As data moves from the the direct connection between devices towards the
data the user cares about, it is _____ with additional information. -
ANSWERS-decapsulation, decapsulated
What is the cloud? - ANSWERS-Leasing of space that is not your hardware
How is the cloud green? - ANSWERS-The cloud can save an organization
money because they don't need to run and maintain physical servers and are
better for the environment because you only pay for the exact energy you use
with less excess energy wasted.
Is the cloud a safer computing environment than an in-house network? -
ANSWERS-Not necessarily because the cloud provider is a bigger target to hit
and you entrust your data in a single organization.
What is chaos monkey? - ANSWERS-Chaos money was invented by Netflix to
shut down random systems but because of redundancy, there was not change
in user experience.
What does elasticity mean? - ANSWERS-The ability to scale out and scale
back as needed based on demand
What is IaaS (Infrastructure as a Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware and virtualization.
Least convenience and most control.
, What is PaaS (Platform as a Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware, virtualization, and operating system.
Some convenience and some control.
What is SaaS (Software As A Service)? - ANSWERS-Cloud model where the
cloud provider provides the hardware, virtualization, operating system,
middleware, and applications. Cloud provider controls everything.
Most convenience and least control.
Out of IaaS, SaaS, and PaaS, rank them on a scale on most to least control for
the user - ANSWERS-Most control: IaaS -> PaaS - SaaS
What does the s stand for in https - ANSWERS-secure
What layer of the OSI model is http or https? - ANSWERS-Layer seven or the
application layer because it is what the user interacts with
What layer of the OSI model is a frame? - ANSWERS-Layer two or the data
link layer
What is the TCP/IP model (Name the steps)? - ANSWERS-4. Application
3. Transact
2. Network or Internet
1. Access
