WGU C838 Certified Cloud Security Specialist Latest
Update Graded A+
NIST 800-145 Cloud Computing Definition ✔✔A model for enabling ubiquitous, convenient, on-
demand network access to a shared pool of configurable computing resources that can be
rapidly provisioned and released with minimal management effort or service provider
interaction
Business Impact Analysis (BIA) ✔✔An assessment of the priorities given to each asset and
process within the organization. A proper analysis should consider the effect any harm or loss of
each asset might mean to the organization overall. Special care should be paid to identifying
critical paths and single points of failure.
Cloud Bursting ✔✔When an orgization uses hosted cloud services to augment an internal,
private datacenter capabilities with managed services during times of increased demand
Elasticity ✔✔The flexibility of allocating resources as needed for immediate usage, instead of
purchasing resources according to other variables.
Cloud Customer vs Cloud User ✔✔Cloud Customers PURCHASE
Cloud Users USE
Private Cloud ✔✔Owned by a single organization and is implemented on a cloud-based secure
environment protected by a firewall
Public Cloud ✔✔Delivers cloud services over a network that is open for free usage
Infrastructure as a Service (IaaS) ✔✔The most basic of cloud service offerings
,Allows the customer to install all software, including operating systems (OSs) on hardware
housed and connected by the cloud vendor. Examples: Includes hardware, blades, connectivity,
and utilities
Platform as a Service (PaaS) ✔✔Contains everything included in IaaS, with the addition of OSs.
The vendor is responsible for installing, patching, administering, and updating the OS as
necessary, and the customer can install any software they deem useful.
This model is especially useful for software development operations (DevOps).
Software as a Service (SaaS) ✔✔Includes everything listed in the previous two models, with the
addition of software programs. The cloud customer is basically only involved in uploading and
processing data on a full production environment hosted by the provider. Examples: Includes
applications, CRM, hosted HR, and mail
Cloud Service Provider (CSP) ✔✔The vendor offering cloud services.
Will own the datacenter, employ the staff, own and manage the resources (hardware and
software), monitor service provision and security, and provide administrative assistance for the
customer and the customer's data and processing needs.
Examples include Amazon Web Services, Rackspace, and Microsoft's Azure.
Cloud Access Security Broker (CASB) ✔✔A third-party entity offering independent identity and
access management (IAM) services to CSPs and cloud customers
Apache Cloud Stack ✔✔An open source cloud computing and IaaS platform developed to help
make creating, deploying, and managing cloud services easier by providing a complete "stack"
of features and components for cloud environments.
,Business Requirement ✔✔* An operational driver for decision making and input for risk
management.
* Drive security decisions.
Cloud App (Cloud Application) ✔✔The phrase used to describe a software application that is
never installed on a local computer. Instead, it is accessed via the Internet.
Cloud Computing ✔✔A type of computing, compared to grid computing, that relies on ensuring
computing resources rather than having local server or personal devices to handle applications.
Cloud Computing Reseller ✔✔A company that purchases hosting services from a cloud server
hosting or computing provider and then resells them to its own customers.
Cloud Migration ✔✔The process of transitioning all or part of a company's data, applications,
and services from onsite premises to the cloud, where the information can be provided over the
Internet on an on-demand basis.
Cloud OS ✔✔A phrase frequently used in place of PaaS to denote an association to cloud
computing.
Cloud Provider ✔✔A service provider that offers customer storage or software solutions
available via a public network, usually the Internet.
Dictates both the technology and operational procedures involved.
Cloud Services Broker (CSB) ✔✔Typically a third-party entity or company that looks to extend or
enhance value to multiple customers of cloud-based services through relationships with
multiple cloud service providers. It acts as a liaison between cloud services customers and cloud
service providers, selecting the best provider for each customer and monitoring the services.
, Eucalyptus ✔✔An open source cloud computing and IaaS platform for enabling private clouds.
FIPS 140-2 ✔✔A NIST document that lists accredited and outmoded CRYPTOSYSTEMS
Managed Service Provider ✔✔An IT service where the CUSTOMER dictates BOTH the
technology and operational procedures, and an external party executes administration and
operational support according to a contract.
Multi-Tenant ✔✔Multiple customers using the same public cloud (and often the same hosts, in
a virtualized cloud environment).
NIST 800-53 ✔✔A guidance document with the primary goal of ensuring that appropriate
security requirements and controls are applied to all U.S. FEDERAL GOVERNMENT information
in information management systems.
Trusted Cloud Initiative (TCI) Reference Model ✔✔A guide for cloud providers, allowing them to
create a holistic architecture (including the physical facility of the datacenter, the logical layout
of the network, and the processes necessary to utilize both) that cloud customers can purchase
and use with comfort and confidence.
Characteristics of Cloud Computing ✔✔· Broad network access
· Resource pooling
· Measured service
· On demand self-service
· Rapid expansion
Cloud Deployment Models ✔✔· Public
· Private
Update Graded A+
NIST 800-145 Cloud Computing Definition ✔✔A model for enabling ubiquitous, convenient, on-
demand network access to a shared pool of configurable computing resources that can be
rapidly provisioned and released with minimal management effort or service provider
interaction
Business Impact Analysis (BIA) ✔✔An assessment of the priorities given to each asset and
process within the organization. A proper analysis should consider the effect any harm or loss of
each asset might mean to the organization overall. Special care should be paid to identifying
critical paths and single points of failure.
Cloud Bursting ✔✔When an orgization uses hosted cloud services to augment an internal,
private datacenter capabilities with managed services during times of increased demand
Elasticity ✔✔The flexibility of allocating resources as needed for immediate usage, instead of
purchasing resources according to other variables.
Cloud Customer vs Cloud User ✔✔Cloud Customers PURCHASE
Cloud Users USE
Private Cloud ✔✔Owned by a single organization and is implemented on a cloud-based secure
environment protected by a firewall
Public Cloud ✔✔Delivers cloud services over a network that is open for free usage
Infrastructure as a Service (IaaS) ✔✔The most basic of cloud service offerings
,Allows the customer to install all software, including operating systems (OSs) on hardware
housed and connected by the cloud vendor. Examples: Includes hardware, blades, connectivity,
and utilities
Platform as a Service (PaaS) ✔✔Contains everything included in IaaS, with the addition of OSs.
The vendor is responsible for installing, patching, administering, and updating the OS as
necessary, and the customer can install any software they deem useful.
This model is especially useful for software development operations (DevOps).
Software as a Service (SaaS) ✔✔Includes everything listed in the previous two models, with the
addition of software programs. The cloud customer is basically only involved in uploading and
processing data on a full production environment hosted by the provider. Examples: Includes
applications, CRM, hosted HR, and mail
Cloud Service Provider (CSP) ✔✔The vendor offering cloud services.
Will own the datacenter, employ the staff, own and manage the resources (hardware and
software), monitor service provision and security, and provide administrative assistance for the
customer and the customer's data and processing needs.
Examples include Amazon Web Services, Rackspace, and Microsoft's Azure.
Cloud Access Security Broker (CASB) ✔✔A third-party entity offering independent identity and
access management (IAM) services to CSPs and cloud customers
Apache Cloud Stack ✔✔An open source cloud computing and IaaS platform developed to help
make creating, deploying, and managing cloud services easier by providing a complete "stack"
of features and components for cloud environments.
,Business Requirement ✔✔* An operational driver for decision making and input for risk
management.
* Drive security decisions.
Cloud App (Cloud Application) ✔✔The phrase used to describe a software application that is
never installed on a local computer. Instead, it is accessed via the Internet.
Cloud Computing ✔✔A type of computing, compared to grid computing, that relies on ensuring
computing resources rather than having local server or personal devices to handle applications.
Cloud Computing Reseller ✔✔A company that purchases hosting services from a cloud server
hosting or computing provider and then resells them to its own customers.
Cloud Migration ✔✔The process of transitioning all or part of a company's data, applications,
and services from onsite premises to the cloud, where the information can be provided over the
Internet on an on-demand basis.
Cloud OS ✔✔A phrase frequently used in place of PaaS to denote an association to cloud
computing.
Cloud Provider ✔✔A service provider that offers customer storage or software solutions
available via a public network, usually the Internet.
Dictates both the technology and operational procedures involved.
Cloud Services Broker (CSB) ✔✔Typically a third-party entity or company that looks to extend or
enhance value to multiple customers of cloud-based services through relationships with
multiple cloud service providers. It acts as a liaison between cloud services customers and cloud
service providers, selecting the best provider for each customer and monitoring the services.
, Eucalyptus ✔✔An open source cloud computing and IaaS platform for enabling private clouds.
FIPS 140-2 ✔✔A NIST document that lists accredited and outmoded CRYPTOSYSTEMS
Managed Service Provider ✔✔An IT service where the CUSTOMER dictates BOTH the
technology and operational procedures, and an external party executes administration and
operational support according to a contract.
Multi-Tenant ✔✔Multiple customers using the same public cloud (and often the same hosts, in
a virtualized cloud environment).
NIST 800-53 ✔✔A guidance document with the primary goal of ensuring that appropriate
security requirements and controls are applied to all U.S. FEDERAL GOVERNMENT information
in information management systems.
Trusted Cloud Initiative (TCI) Reference Model ✔✔A guide for cloud providers, allowing them to
create a holistic architecture (including the physical facility of the datacenter, the logical layout
of the network, and the processes necessary to utilize both) that cloud customers can purchase
and use with comfort and confidence.
Characteristics of Cloud Computing ✔✔· Broad network access
· Resource pooling
· Measured service
· On demand self-service
· Rapid expansion
Cloud Deployment Models ✔✔· Public
· Private
