1. CompTIA Security+ Study Guide (SY0-401)
Chapter 6:
Securing the Cloud

2. Chapter 6: Securing the Cloud
Explain network design elements and components.
Given a scenario, select the appropriate solutions to establish host security.
Implement the appropriate controls to ensure data security.

3. Cloud Computing Service Models
Software as a Service (SaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)

4. Cloud Delivery Models
Private
Public
Community
Hybrid

5. Virtualization Type I model is known as “bare metal”
Can boot without the operating system
Type II model is known as “hosted”
Requires the operating system and is dependent on it

6. Chapter 6: Securing the Cloud
Snapshots
Patch Compatibility
Host Availability/Elasticity
Security Control Testing (SCT)
Sandboxing

7. Security and the Cloud Multitenancy Laws and Regulations
Various clients reside on the same machine.
A flaw in implementation could compromise security.
Laws and Regulations
The consumer retains the ultimate responsibility for compliance

8. Cloud Storage DAS (direct attached storage) NAS (network area storage)
SANs (storage area networks)