Shared responsibility model, IAM, and core cloud security concepts across major cloud providers.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- In the shared responsibility model, who is responsible for securing the physical infrastructure of cloud data centers?
- The cloud provider
- In the shared responsibility model, who is responsible for securing applications and data stored in the cloud?
- The customer
- What does IAM stand for?
- Identity and Access Management
- What are the three core components of IAM?
- Identification, authentication, and authorization
- What is the purpose of a cloud access policy?
- To define which actions specific identities are allowed or denied on cloud resources
- What is a principal in IAM?
- An entity (user, role, or service) that can perform actions on cloud resources
- What is the principle of least privilege?
- Granting users only the minimum permissions needed to perform their job functions
- What is multi-factor authentication (MFA)?
- A security method requiring two or more forms of verification before granting access
- What is the difference between authentication and authorization?
- Authentication verifies who you are; authorization determines what you can access
- What is a service account in cloud computing?
- A special type of account that applications and services use to authenticate with cloud APIs
- What is encryption at rest?
- Protecting data by encrypting it while it is stored on disk or in databases
- What is encryption in transit?
- Protecting data by encrypting it while it is being transmitted over a network
- What is TLS (Transport Layer Security)?
- A cryptographic protocol that ensures secure communication over networks
- What is a virtual private cloud (VPC)?
- An isolated network environment within a cloud provider's infrastructure where users can launch resources
- What is a security group?
- A virtual firewall that controls inbound and outbound traffic to cloud resources