Ericsson Cloud and Automation Solutions Flashcards

Cloud Security refers to

Answer: All of the above

Cloud security is a comprehensive discipline that encompasses various elements to protect cloud environments. It includes strategic frameworks like policies, the technical safeguards provided by technologies, and the operational procedures known as deployment controls. Therefore, a holistic approach to cloud security integrates all these aspects to ensure robust protection for data and applications.

Cloud Security protects

Answer: All of the above

Cloud security is designed to safeguard all critical components within a cloud computing environment. This includes protecting sensitive information (data), ensuring the integrity and availability of software programs (applications), and securing the underlying computing resources such as servers, networks, and storage (infrastructure). A comprehensive cloud security strategy addresses threats across this entire spectrum to maintain confidentiality, integrity, and availability.

Dimensions of Cloud Computing include

Answer: All of the above

Cloud computing involves several critical dimensions beyond just the technical infrastructure. Security and privacy are fundamental to protect user data and systems, while compliance ensures adherence to various industry standards and governmental regulations. Legal and contractual issues define the responsibilities and liabilities between cloud providers and their customers, making all these factors essential considerations for successful cloud adoption and management.

_______ are responsible for keeping their applications up to date – and must therefore ensure they have a patch strategy (to ensure that their applications are screened from malware and hackers scanning for vulnerabilities that allow unauthorized access to their data within the cloud to be gained).

Answer: Customers

In most cloud service models, customers retain significant responsibility for the security of their own applications and data. This includes ensuring that their applications are regularly updated, patched, and configured securely to prevent vulnerabilities that could be exploited by malicious actors. While cloud providers secure the underlying infrastructure, the customer is accountable for the security posture of what they deploy and manage within the cloud.

Cloud providers ensure that _________via the cloud are secure by implementing testing and acceptance procedures for outsourced or packaged application code.

Answer: Applications available as a service

Cloud providers offering 'Applications available as a service' (SaaS) are directly responsible for the security of those applications. This means they must implement rigorous testing and acceptance procedures for all application code, whether developed internally or outsourced, to identify and mitigate vulnerabilities. This ensures that the software provided to customers is secure and reliable.

Cloud providers have _________ and __________plans in place to ensure that service can be maintained in case of a disaster or an emergency and that any data lost will be recovered.

Answer: Business continuity and data recovery

Cloud providers must have robust strategies in place to ensure continuous service availability and data integrity. Business continuity plans outline procedures to maintain essential functions during disruptions, while data recovery plans detail how lost data can be restored after an incident. These two plans are crucial for minimizing downtime and preventing permanent data loss, assuring customers of service resilience and data safety.

Cloud providers must enable their customers to comply appropriately with these regulations.

Answer: All of the above

Cloud providers operate within a complex regulatory landscape and must enable their customers to meet various compliance requirements. Regulations like PCI DSS (for payment card data), HIPAA (for protected health information), and Sarbanes-Oxley Act (for financial reporting) impose strict security and privacy mandates. Providers must offer features, certifications, and contractual assurances that help customers satisfy these diverse regulatory obligations.