Shared responsibility model, IAM, and core cloud security concepts across major cloud providers.
About this set
40 basic cards for Cloud Security Cloud Computing. It opens with "In the shared responsibility model, who is responsible for securing the" and "In the shared responsibility model, who is responsible for securing". More Professional Certifications decks are listed below.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- In the shared responsibility model, who is responsible for securing the physical infrastructure of cloud data centers?
Show answer
The cloud provider- In the shared responsibility model, who is responsible for securing applications and data stored in the cloud?
Show answer
The customer- What are the three core components of IAM?
Show answer
Identification, authentication, and authorization- What is the purpose of a cloud access policy?
Show answer
To define which actions specific identities are allowed or denied on cloud resources- What is a principal in IAM?
Show answer
An entity (user, role, or service) that can perform actions on cloud resources- What is the principle of least privilege?
Show answer
Granting users only the minimum permissions needed to perform their job functions- What is multi-factor authentication (MFA)?
Show answer
A security method requiring two or more forms of verification before granting access- What is the difference between authentication and authorization?
Show answer
Authentication verifies who you are; authorization determines what you can access- What is a service account in cloud computing?
Show answer
A special type of account that applications and services use to authenticate with cloud APIs- What is encryption at rest?
Show answer
Protecting data by encrypting it while it is stored on disk or in databases- What is encryption in transit?
Show answer
Protecting data by encrypting it while it is being transmitted over a network- What is TLS (Transport Layer Security)?
Show answer
A cryptographic protocol that ensures secure communication over networks- What is a virtual private cloud (VPC)?
Show answer
An isolated network environment within a cloud provider's infrastructure where users can launch resources- What is network access control list (NACL)?
Show answer
A stateless firewall that operates at the subnet level to allow or deny traffic- What is the principle of defense in depth?
Show answer
Using multiple layers of security controls to protect systems and data
FlashKeepers