Cyber Security Fundamentals 2020 Pretest: What Is Cloud Computing?

What Is Cloud Computing?

Cloud computing is a model for delivering computing resources—servers, storage, databases, networking, software, analytics, and intelligence—over the Internet ("the cloud") to offer faster innovation, flexible resources, and economies of scale. Instead of owning physical hardware, users lease services from providers who manage the underlying infrastructure.

Core Characteristics of Cloud Services

• On‑Demand Self‑Service: Users provision resources automatically without human interaction with the provider.
• Broad Network Access: Services are available over the network and accessed through standard mechanisms.
• Resource Pooling: Provider's computing resources are pooled to serve multiple customers with different usage needs.
• Rapid Elasticity: Resources can be elastically provisioned and released to scale quickly.
• Measured Service: Resource usage is monitored, controlled, and reported.

Service Models Explained

Infrastructure as a Service (IaaS)

Provides virtualized computing resources over the Internet. Users manage operating systems, applications, and data while the provider manages physical servers, storage, and networking.

Platform as a Service (PaaS)

Offers a platform allowing customers to develop, run, and manage applications without dealing with underlying infrastructure.

Software as a Service (SaaS)

Delivers software applications over the Internet, on a subscription basis, with the provider handling maintenance and upgrades.

Deployment Models

• Public Cloud: Services offered over the public Internet and shared across multiple organizations.
• Private Cloud: Exclusive use by a single organization, either on-premises or hosted by a third party.
• Hybrid Cloud: Combination of public and private clouds, allowing data and applications to move between them.
• Community Cloud: Shared infrastructure among organizations with common concerns.

Benefits for Cyber Security Professionals

• Scalable Security Controls: Rapid deployment of firewalls, IDS/IPS, and encryption across virtual machines.
• Centralized Monitoring: Unified dashboards for visibility across distributed workloads.
• Automated Patch Management: Providers often handle underlying OS and middleware patches.
• Disaster Recovery: Built‑in redundancy and backup options reduce recovery time.

Key Security Considerations

• Shared Responsibility Model: Provider secures the infrastructure; customer secures data, applications, and access controls.
• Data Residency: Understand where data is stored to comply with regulations.
• Identity and Access Management (IAM): Implement least privilege and multi‑factor authentication.
• Encryption: Encrypt data at rest and in transit.
• Compliance: Verify provider's certifications (ISO 27001, SOC 2, GDPR, HIPAA).

Common Misconceptions

• "Cloud is always more secure": Security depends on configuration and user practices.
• "I don't need to patch my VMs": Patching is still required unless using fully managed services.
• "All data is automatically encrypted": Encryption settings must be explicitly enabled.

Quick Reference Table