Chapter 10 - 02 - Understand Cloud Computing Fundamentals - 01_ocred_fax_ocred.pdf

Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing Module Flow Understand Virtualization Essential...

Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing Module Flow Understand Virtualization Essential Concepts and OS Virtualization Security @ 3 ‘ p Fundamentals Discuss the Insights of Cloud Security and Best Practices Copyright © by EC-Council All Rights Reserved. Reproductionis Strictly Prohibited Understand Cloud Computing Fundamentals Cloud computing delivers various types of services and applications over the Internet. These services enable users to utilize software and hardware managed by third parties at remote locations. Major cloud service providers include Google, Amazon, and Microsoft. This section introduces cloud computing, the types of cloud computing services, the separation of responsibilities, the cloud deployment models, the NIST reference architecture and its benefits, the cloud storage architecture, the cloud service providers, fog computing, and edge computing. Module 10 Page 1302 Certified Cybersecurity Technician Copyright © by EC-Gouncil All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing Introduction to Cloud Computing a Q Cloud computing is an on-demand delivery of IT capabilities where IT infrastructure and applications are provided to subscribers as a metered service over a network Characteristics of Cloud Computing On-demand self-service Broad network access Distributed storage — 4 A Resource pooling Rapid elasticity Virtualization technology Copyright © by EC-Council All Rights Reserved. Reproduction Is Strictly Prohibited. Introduction to Cloud Computing Cloud computing is an on-demand delivery of IT capabilities in which an IT infrastructure and applications are provided to subscribers as metered services over a network. Examples of cloud solutions include Gmail, Facebook, Dropbox, and Salesforce. Characteristics of Cloud Computing The characteristics of cloud computing that attract many businesses to adopt the cloud technology are discussed below. * On-demand self-service: A type of service rendered by cloud service providers that provides on-demand cloud resources such as computing power, storage, and network, without the need for human interaction with service providers. = Distributed storage: Distributed storage in cloud offers better scalability, availability, and reliability of data. However, it can potentially involve security and compliance concerns. = Rapid elasticity: The cloud offers instant provisioning of capabilities to rapidly scale up or down according to demand. The resources available for provisioning to the consumers seem to be unlimited that can be purchased invariably in the desired quantity. = Automated management: By minimizing user involvement, cloud automation speeds up the processes, reduces labor costs, and reduces the possibility of human error. = Broad network access: Cloud resources are available over the network and can be accessed through standard procedures via a wide variety of platforms, including laptops, mobile phones, and PDAs. Module 10 Page 1303 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing = Resource pooling: The cloud service provider pools all the resources together to serve multiple customers in a multi-tenant environment, wherein the physical and virtual resources are dynamically assigned and reassigned on demand by the consumers. = Measured service: Cloud systems employ the “pay-per-use” metering method. Subscribers pay for the cloud services via monthly subscriptions or according to the usage of resources such as the storage levels, processing power, and bandwidth. Cloud service providers monitor, control, report, and charge the customers according to the resources consumed with complete transparency. = Virtualization technology: It enables the rapid scaling of resources in such a way that could not be achieved by non-virtualized environments. Limitations of Cloud Computing = QOrganizations have limited control and flexibility = Prone to outage and other technical issues = Security, privacy, and compliance issues = Contracts and lock-ins = Dependence on network connections Module 10 Page 1304 Certified Cybersecurity Technician Copyright © by EC-Gouncil All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing Cloud Computing Benefits \ 4( Economic e Operational v Business agility v Flexibility and efficiency v Less maintenance costs v Resilience and redundancy v Acquire economies of scale v Scale as required v'v’ Less capital expense v Less operational problems \ v Huge storage facilities for organizations v Deploy applications quickly Y ( 4 Staffing m -"f’\"‘- Security )N Streamline processes vv’ Less investment in security controls NN v’ Efficient, effective, and swift response to security Efficient usage of resources breaches NNS Less personnel training v’ Standardized open interface for managed security services (MSS) Less IT Staff v’ Effective patch management and implementation of AN NSN Multiple users can utilize cloud resources security updates v’ Better disaster recovery preparedness / y/ Copyright © by EC il All Rights Reserved. Reproductionis Strictly Prohibited Prohibited. Cloud Computing Benefits Cloud computing offers economic, operational, staffing, and security benefits. = Economic Economic o Business agility o Less maintenance costs (o] Acquire economies of scale O(o] Less capital expenditure Huge storage facilities for organizations Environment friendly (o] o Less total cost of ownership (@] (o] Less power consumption = QOperational o Flexibility and efficiency o o Resilience and redundancy O o Scale as required O Less operational problems O Deploy applications quickly O Backup and disaster recovery O Automatic updates O Module 10 Page 1305 Certified Cybersecurity Technician Copyright © by EC-Gouncil EC-Council All Rights Reserved. Reproduction is Strictly Prohibited. Certified Cybersecurity Technician Exam 212-82 Virtualization and Cloud Computing = Staffing (@) Streamline processes @) Efficient usage of resources O Less personnel training O Less IT Staff O Multiple users can utilize cloud resources O Evolution of new business models (@) Simultaneous sharing of resources = Security O Less investment in security controls O Efficient, effective, and swift response to security breaches (@) Standardized open interface for managed security services (MSS) O Effective patch management and implementation of security updates Better disaster recovery preparedness Ability to dynamically scale defensive resources on demand Resource aggregation offers better management of security systems Rigorous internal audits and risk assessment procedures Module 10 Page 1306 Certified Cybersecurity Technician Copyright © by EG-Council All Rights Reserved. Reproduction is Strictly Prohibited.