Cloud Computing & Virtualization Flashcards

Which cloud service model gives the customer the most control over the operating system and installed software?

Answer: IaaS

IaaS provides virtualized compute, storage and networking while the customer manages the OS and applications.

A cleared contractor wants to host unclassified Controlled Unclassified Information (CUI) from a DoD contract in a commercial cloud. What is the typical baseline authorization the provider should hold?

Answer: FedRAMP authorization at an appropriate impact level

DoD contracts generally require cloud providers handling covered defense information to meet FedRAMP (and DoD cloud security) requirements.

In a hypervisor-based environment, what is a 'Type 1' hypervisor?

Answer: A hypervisor that runs directly on the physical hardware

Type 1 (bare-metal) hypervisors run directly on hardware, without a host OS beneath them.

Which cloud deployment model is provisioned for exclusive use by a single organization?

Answer: Private cloud

A private cloud is operated for one organization, whether on-premises or hosted by a third party.

What is 'VM escape'?

Answer: An attack where code in a guest VM breaks out to access the hypervisor or other VMs

VM escape exploits flaws to break isolation between a guest and the hypervisor or neighboring guests.

In the shared responsibility model, who is always responsible for deciding what data is placed in the cloud and how it is classified?

Answer: The customer

The customer retains responsibility for its data, including classification and handling, regardless of service model.

Classified information may NOT be processed on a commercial cloud system unless it:

Answer: Has been authorized for classified processing by the cognizant government authority

Classified processing requires a system authorized by the government (such as DCSA for contractor systems), and ordinary commercial cloud does not qualify.