Certified Cloud Security Specialist - C838| 342 QUESTIONS| WITH COMPLETE SOLUTIONS

NIST 800-145 Cloud Computing Definition correct answer: A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction Business Impact Analysis (BIA) correct answer: An assessment of the priorities given to each asset and process within the organization. A proper analysis should consider the effect any harm or loss of each asset might mean to the organization overall. Special care should be paid to identifying critical paths and single points of failure. Cloud Bursting correct answer: When an orgization uses hosted cloud services to augment an internal, private datacenter capabilities with managed services during times of increased demand Elasticity correct answer: The flexibility of allocating resources as needed for immediate usage, instead of purchasing resources according to other variables. Cloud Customer vs Cloud User correct answer: Cloud Customers PURCHASE Cloud Users USE Private Cloud correct answer: Owned by a single organization and is implemented on a cloud-based secure environment protected by a firewall Public Cloud correct answer: Delivers cloud services over a network that is open for free usage Infrastructure as a Service (IaaS) correct answer: The most basic of cloud service offerings Allows the customer to install all software, including operating systems (OSs) on hardware housed and connected by the cloud vendor. Examples: Includes hardware, blades, connectivity, and utilities Platform as a Service (PaaS) correct answer: Contains everything included in IaaS, with the addition of OSs. The vendor is responsible for installing, patching, administering, and updating the OS as necessary, and the customer can install any software they deem useful. This model is especially useful for software development operations (DevOps). Software as a Service (SaaS) correct answer: Includes everything listed in the previous two models, with the addition of software programs. The cloud customer is basically only involved in uploading and processing data on a full production environment hosted by the provider. Examples: Includes applications, CRM, hosted HR, and mail Cloud Service Provider (CSP) correct answer: The vendor offering cloud services. Will own the datacenter, employ the staff, own and manage the resources (hardware and software), monitor service provision and security, and provide administrative assistance for the customer and the customer's data and processing needs. Examples include Amazon Web Services, Rackspace, and