CNIT 271 Exam 1CORRECT SOLUTIONS GRADE A+ GUARANTEED

Software as a Service (SaaS) A form of cloud computing where a consumer subscribes to a third-party software and receives a service that is delivered online. Everything is managed by the provider Like google mail, office 365 Platform as a Service (PaaS) A cloud service in which consumers can install and run their own specialized applications on the cloud computing network. This is an operating system in the cloud. Like appEngine, Microsoft Azure Infastructure as a Service (IaaS) the cloud hosting of a bare server computer, data storage, network, and virtualization Provides virtual machines and other virtualized hardware Public Cloud promotes massive, global, and industrywide applications offered to the general public Cost-effective, high availability and scalability. Can lack in overall security Private Cloud serves only one customer or organization and can be located on the customer's premises or off the customer's premises. High security and is very customizable community cloud serves a specific community with common business models, security requirements, and compliance considerations Is like a public and private combined Easy data sharing and collaboration among the organization Hybrid Cloud includes two or more private, public, or community clouds, but each cloud remains separate and is only linked by technology that enables data and application portability flexible and better security broad network access (cloud computing) all devices can access data and applications Container as a Service (CaaS) This cloud computing model provides containers and clusters as a service to its subscribers. Function as a Service (FaaS) A category of cloud computing services that provides a platform allowing customers to develop, run, and manage application functionalities without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app. What are cloud users responsible for application-level security What are cloud vendors responsible for physical security and some software security risks of cloud computing Abuse, insecure interfaces, malicious insiders, shared technology, data loss, account or service hijacking, unknown risk profile, multi-instance model provides a unique DBMS running on a virtual machine instance for each cloud subscriber multi-tenant model provides a predefined environment for the cloud subscriber that is shared with other tenants, typically through tagging data with a subscriber identifier Keystone Security model for openStack. Provides identity and token IoT (Internet of Things) Continuing development of the Internet that allows everyday objects embedded with electronic devices to send and receive data over the Internet. Information Technology (IT) the computers and other electronic devices used to store, retrieve, transmit and manipulate data. Primarily using wired connectivity Operational Technology (OT) A communications network designed to implement an industrial control system rather than data networking. Like machines embedded with IT Actuator single purpose devices bought by consumers cloud enabled IoT unlimited resources and seamless communication edge device it is installed closer to a client device, such as a workstation or a security door, than to the core or backbone of a network gateway A node on a network that serves as a portal to other networks. Fog Computing Provisioning processing resource between the network edge of IoT devices and the data center to reduce latency. core network connects geographically dispersed fog networks and other networks using high performance routers. MQTT (Message Queuing Telemetry Transport) A (TCP/IP) publish/subscribe network protocol that is defined by OASIS and used in Internet of Things (IoT) devices. MQTT is a protocol used to send messages between devices. It is used in remote environments with limited bandwith. MQTT contains two network entities Message Broker + Message Clients Message brokers are server that route messages between clients. MQTT can be used to send messages between sensor devices and analytic applications. Constrained Application Protocol (CoAP) ideal for constrained devices and networks. Uses UDP. Request Response. Not as reliable as MQTT Discretionary Access Control (DAC) A means of restricting access to objects based on the identity of subjects and/or groups to which they belong. Role-Based Access Control (RBAC) An access control model that bases the access control authorizations on the roles (or functions) that the user is assigned within an organization Mandatory Access Control (MAC) The most restrictive access control model, typically found in military settings in which security is of supreme importance. Using security labels and clearance to access data. Attribute-based access control (ABAC) Controls access based on attributes of the user, the resource to be accessed, and current environmental conditions Strengths: Flexibility Subject An entity capable of accessing objects. Three classes, Owner, Group, World Object A resource to which access is controlled. Entity used to contain and/or receive information CONTINUED.....