WGU C838 Certified Cloud Security Specialist Latest Update Graded A+

WGU C838 Certified Cloud Security Specialist Latest Update Graded A+ NIST 800-145 Cloud Computing Definition A model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction Business Impact Analysis (BIA) An assessment of the priorities given to each asset and process within the organization. A proper analysis should consider the effect any harm or loss of each asset might mean to the organization overall. Special care should be paid to identifying critical paths and single points of failure. Cloud Bursting When an orgization uses hosted cloud services to augment an internal, private datacenter capabilities with managed services during times of increased demand Elasticity The flexibility of allocating resources as needed for immediate usage, instead of purchasing resources according to other variables. Cloud Customer vs Cloud User Cloud Customers PURCHASE Cloud Users USE Private Cloud Owned by a single organization and is implemented on a cloud-based secure environment protected by a firewall Public Cloud Delivers cloud services over a network that is open for free usage Infrastructure as a Service (IaaS) The most basic of cloud service offerings Allows the customer to install all software, including operating systems (OSs) on hardware housed and connected by the cloud vendor. Examples: Includes hardware, blades, connectivity, and utilities Platform as a Service (PaaS) Contains everything included in IaaS, with the addition of OSs. The vendor is responsible for installing, patching, administering, and updating the OS as necessary, and the customer can install any software they deem useful. This model is especially useful for software development operations (DevOps). Software as a Service (SaaS) Includes everything listed in the previous two models, with the addition of software programs. The cloud customer is basically only involved in uploading and processing data on a full production environment hosted by the provider. Examples: Includes applications, CRM, hosted HR, and mail Cloud Service Provider (CSP) The vendor offering cloud services. Will own the datacenter, employ the staff, own and manage the resources (hardware and software), monitor service provision and security, and provide administrative assistance for the customer and the customer's data and processing needs. Examples include Amazon Web Services, Rackspace, and Microsoft's Azure. Cloud Access Security Broker (CASB) A third-party entity offering independent identity and access management (IAM) services to CSPs and cloud customers Apache Cloud Stack An open source cloud computing and IaaS platform developed to help make creating, deploying, and managing cloud services easier by providing a complete "stack" of features and components for cloud environments. Business Requirement * An operational driver for decision making and input for risk management. * Drive security decisions. Cloud App (Cloud Application) The phrase used to describe a software application that is never installed on a local computer. Instead, it is accessed via the Internet. Cloud Computing A type of computing, compared to grid computing, that relies on ensuring computing resources rather than having local server or personal devices to handle applications. Cloud Computing Reseller A company that purchases hosting services from a cloud server hosting or computing provider and then resells them to its own customers. Cloud Migration The process of transitioning all or part of a company's data, applications, and services from onsite premises to the cloud, where the information can be provided over the Internet on an on-demand basis.