Cloud Security Basics

Segregating duties and enforcing logging, monitoring, and auditing of administrator activities.

Privacy refers to the right to keep personal and proprietary information from being disclosed.

Users lose control over the exact location of their data and may even lose access to it.

<p>Dynamic provisioning involves outsourcing, with issues like identifying subcontractors and rights to data during bankruptcy.</p> Signup and view all the answers

<p>Cloud encryption converts plaintext data into unreadable ciphertext, enhancing data privacy and security.</p> Signup and view all the answers

<p>Cloud security is a concern due to the target-rich environment that attracts malicious actors and the potential vulnerabilities inherent in storage.</p> Signup and view all the answers

<p>One major security risk is unauthorized access to confidential information.</p> Signup and view all the answers

<p>Users often believe that cloud computing frees them from security concerns due to reliance on expert providers.</p> Signup and view all the answers

<p>Cloud users worry about unauthorized access and data theft from rogue employees of CSPs.</p> Signup and view all the answers

<p>Data is more vulnerable in storage since it remains accessible for long periods, while data being processed is exposed to threats for a shorter duration.</p> Signup and view all the answers

<p>A significant challenge is the lack of international regulations on data security and privacy.</p> Signup and view all the answers

<p>Organizations might believe they are better protected because they trust that experts manage cloud security effectively.</p> Signup and view all the answers

<p>One consequence is heightened fear of insider threats and potential data breaches.</p> Signup and view all the answers

<p>Users are concerned about the fuzzy boundaries of responsibility between themselves and the cloud service providers, as well as difficulties in identifying the root cause of problems.</p> Signup and view all the answers

<p>Common methods include distributed denial of service (DDoS) attacks and phishing.</p> Signup and view all the answers

<p>System failures, power outages, and catastrophic events can lead to extended shutdowns of cloud services, affecting users' access to hosted applications.</p> Signup and view all the answers

<p>Risks include lack of transparency and limited user control, which can lead to potential data breaches and compromised services.</p> Signup and view all the answers

<p>Multi-factor authentication enhances security by adding an extra layer of verification, which helps protect against data breaches.</p> Signup and view all the answers

<p>Compromised credentials can result from lax authentication, weak passwords, and poor management of keys and certificates, leading to unauthorized access.</p> Signup and view all the answers

<p>Exploited system vulnerabilities can create new attack surfaces due to resource sharing and multi-tenancy, increasing the risk of security breaches.</p> Signup and view all the answers

<p>Organizations should implement monitoring systems to trace every transaction to the individual requesting it, thereby detecting suspicious activities.</p> Signup and view all the answers

<p>Users are concerned that they cannot verify if their data has been properly deleted and whether it can be recovered by others even after deletion.</p> Signup and view all the answers

<p>It leads to uncertainty about service interruptions, price increases, and the costs involved in switching to another cloud service provider.</p> Signup and view all the answers

<p>Multi-tenancy allows multiple users to share the same server, which can lead to shared vulnerabilities; a security breach can expose personal information of numerous users.</p> Signup and view all the answers

<p>Users face challenges in determining which country's laws apply to their data, depending on where it is stored and processed, complicating their rights and protections.</p> Signup and view all the answers

<p>They include risks from traditional security threats common to online systems, with increased impact due to the scale of cloud resources and user populations.</p> Signup and view all the answers

<p>Threats to system availability can occur through attacks that disrupt access to cloud services, impacting all users relying on those systems.</p> Signup and view all the answers

<p>Third-party data control raises concerns since users may not have direct oversight over their data once it's managed by another entity, increasing risks of data breach.</p> Signup and view all the answers

<p>The costs associated with migrating data and services to a new provider can be substantial, impacting budget and operational continuity.</p> Signup and view all the answers