CLOUD COMP CT097-3-3 Cloud Infrastructure and Service_CT097-3-3-CSVC Exam. Q&A

downloaded from

Scholarfriends

https://scholarfriends.com Downloaded by: writerforacademic@gmail.com | https://scholarfriends.com/singlePaper/309508/cloud-comp-ct097-3-3-cloud-infrastructureand-service-ct097-3-3-csvc-exam-qa Distribution of this document is illegal.

CT097-3-3-CSVC Exam. Q&A Question 1 Process of providing service by separating the physical delivery of service is technique of virtualization. Virtual version of the hardware is made, it uses specialized software for creating virtual version of computing resources. Using same hardware multiple operating system and applications can run and it increases the flexibility of hardware utilization.

Desktop virtualization is virtualization technique where employees OS is stored on server of data center. Employees can access the desktop virtually from any machine. Using desktop virtualization employees can access a desktop remotely from any connected device and it allows digital workspaces. In virtual desktop all the icons, wallpaper, folders and toolbars etc. are stored on a remote server rather than a computing device. Physical client (employees) are separated from desktop environment and its application. Virtual desktop infrastructure is popular type of desktop virtualization. Host-based virtual machine uses client-server model for delivering persistent and non-persistent desktops to other connected devices. In persistent virtual desktop individual employees has unique image of desktop which customizes with different application and its data can be saved for future. Using identical pool employees can access the virtual desktop and when employees logs out of virtual desktop infrastructure it reverts to its unaltered state in non-persistent virtual desktop[ CITATION Nam20 \l 1033 ]. There are two important types of desktop virtualization which is based on operating system instance that is local or remote. 

Local desktop virtualization: In local desktop virtualization all processing and workloads occurs on local hardware, in this virtualization operating system runs on a client device by using hardware virtualization. Using local system resources requirement of application computing can be met and it can be used when there is no need of a continuous network connection for desktop virtualization. Using local desktop virtualization no resources can be shared to mobile devices and other thin clients.



Remote desktop virtualization: In remote desktop virtualization client/server environment virtualization is operated. All the user interactions occurs on a client device where operating system and applications allows user to operate operating system in a server of data center. In this virtualization laptop, thin clients device or mobile devices can be used.

All the control of application and desktop is centralized to the IT department which will

maximize the organizational investment in IT hardware using remote access for sharing resources of computer.

Figure 1: Desktop virtualization[ CITATION Diz20 \l 1033 ] Desktop virtualization is very beneficial for the organization which is implementing cloud infrastructure, some of the major benefits of desktop virtualization during time of pandemic for working from home are:

1. Resource management After implementation of desktop virtualization Umbrella Sdn. Bhd. need to strengthen their data center rather than individual desktops. When desktop virtualization is implemented lower-cost computers and devices to employees can be provided as most of the in-depth computing work is done in data center. IT department can provide thin clients computing devices to the employees, it will save the money as lower cost devices can be used.

2. Remote work By using desktop virtualization employees can work remotely from the home and IT admins will support them by giving control over desktops to organizational devices. Using a thin client device employees can easily access the server and work as each employees are provided with individual virtual desktops. Employees can access the operating system and application remotely from any location and they can log out when their task is done. It makes all the employees safe during this pandemic period as there is no need of working together with in the same office, each employees can work remotely from any location.

3. Improved Security In desktop virtualization only needed access is provided to the employees. When desktop virtualization is implemented employees work is not limited to a physical device. In case of any error or malfunction of a device it can be restored easily. All the data of the Umbrella Sdn. Bhd. is stored in data center rather than an individual’s machine. No company data is stored in personal computers of employees so it’s safer though employee’s personal computer is lost or mishandled.

4. Greater convenience All the data and applications of Umbrella Sdn. Bhd. is stored in the cloud, where access is not provided to multiple devices of different platforms. As per the requirement of employees access is granted by IT admins so that they can connect right device through the internet connection from anywhere. All the updated data are stored in the cloud atomically so it provides greater convenience.

5. Increase employee productivity

It is pandemic time and Umbrella Sdn. Bhd. is also facing many problems so they have decided to work from home by using desktop virtualization which will increase the productivity of work.

Employees can access their computers virtually from anywhere and perform their work. Using desktop virtualization employees can perform their task faster and there is less task of IT admins as there is no need to configure individual computing devices[ CITATION NET20 \l 1033 ].

Question 2 For securing application and data hosted on cloud security concern has to be taken, some of the latest technique and programs for the security of data are against intrusion and breach of data.

There are various security issues which are associated to cloud computing and it makes security concern more vulnerable to cybercrimes. Without legal authorization hackers try to breach the cloud with different techniques. Usually hacker treats their activities as a valid instances for gaining access to the information on cloud. When secure services is provided to clod users then cloud security can be understood. Major security concern of cloud computing is security of servers, storage and applications for end users. End user access to the cloud services using web browser where specific cloud services is provided to the end users. There are major three layers in cloud computing: system layer, platform layer and application layer.

System layer is bottom layer which includes infrastructures of servers, network devices, memory and storage. It is also known as infrastructure as a services (IaaS) where resources of computers are provided on demand. IaaS service of Amazon’s EC2 is the example of cloud computing service provider. Middle layer is Platform layer and it is also known as Platform as a service (PaaS) where development platform for users to design specific application is provided. In PaaS developers do not require to buy software development tools which will reduce the cost. Service provided by google application is example of PaaS where services are Gmail, google groups, google docs, google talk, and google suits. Customers can customize these tools on their domain names. Windows Azure is also PaaS provider which helps to build different applications with various languages, tools. Top layer is application layer which is also known as Software as a service (SaaS). SaaS allows users to rent applications running on clouds instead of purchasing them. SaaS reduces cost for the end users by providing software services, SaaS reduces costs so it is popular among the different companies. For running the cloud business security is the major concern because it is major issue. Major objective of cloud based security is to stop threat or malware to stop misuse or manipulation of private data. When the threats of the system is identified it helps to know about possible vulnerabilities. Cloud based application security is applicable for large application base, application with low to medium risks and several organization having strict budget and time restrictions. Cloud based testing makes the process faster and cost effective[ CITATION TeS13 \l 1033 ].

Figure 2: Cloud Service Models[ CITATION IDM18 \l 1033 ] Major steps for organization to achieve desired secured environment are: 1. Policies and procedure Policies and procedure are one of the major concern for the IT governance. Policies and procedure explains about what is going to happen, how to deal in such situation and how is going to happen. There is need of solid policies and procedure document which will provide organization with IT and security blueprint. For fulfilling requirement and ambitions there is need of proper policies and procedure.

2. Mobile protection, remote access and virtual private network In mobile protection mobile devices are used which creates unique situation for InfoSec pros, it creates secure environment. Wireless network is associated with mobile device management which prevents devices from connecting to the network unless authentication is done and it helps to know about present requirements. All the needed antivirus and anti-malware is installed and updated.

Remote access and VPN is for the security of the system where authentication is required, authentication for accessing the system is provided. VPN connection is made with gateway router or firewall with simple handshake where traffic is passed to the assigned ports. This is minimal security solution which is not suitable for security intensive environment. Better solution is to set up better VPN gateway which can handles VPN tunnel. IPSec connection is more secure as it requires security certificates on the gateway concentrator. For remote access user need to login through authentic username and password, it is checked and verification is given.

3. Back up and disaster recovery Most valuable asset of the organization is data. Loss of data leads to irreversible damage to the organization, including loss of productivity, revenue and customers. It is hard to predict about the disaster so it is more secure if backup of the data is stored. For recovery of the disaster needed precautions for data safety are taken. In cloud computing on demand cloud service is provided over internet which needs to be stored safely. Major goal of disaster recovery is to minimize the impact of disaster on business. To operate the organization smoothly there is need to have proper disaster recovery plans as disasters are uncertain and customers’ demands are high.

Clients and service provider agreement is done where service provider facilities for clients are included, it is called service level agreement (SLA). All the services are provided as per the SLA so provider and client must follow SLA. 4. End user security awareness training End users are the one who uses the service provided, they has to be satisfied by the service. End user may have limited knowledge and ideas so there is need to provide proper training to the end user so that provider faces less problems. Mishandling of the service may leads to the serious problems so end user security awareness training is very important. There are many breaches to the system each year due to little knowledge of the end user, if end user are trained it will make easier. When end user security awareness training is given it will help to create secure environment and IT admins have to face less security issues due to end user.

5. Technical training

Technical training is very essential because technical sound person can handle any issues and conditions. All the staffs, end users should have minimum technical knowledge so that they can also help to run the system smoothly. In cloud service minimum knowledge may leads to the serious problems so technical training should be given. In any organization data is the most important thing so security of data is very important. For data security each user need to have minimum knowledge how to keep data secure, for that technical training is provided[ CITATION Ton20 \l 1033 ].

Question 3 Cloud computing is the delivery of computing services like servers, storages and services over the internet. Cloud based storage and recovery solution enables to backup and restore the files.

Cloud computing helps in disaster recovery where data is stored in secured cloud environment for providing high availability of data. Organization keeps on adding the new hardware and software applications and services to daily activities, and it increases the related security risks.

Disaster can occur at any moment and it can make a heavy loss of data and it is better to create a data backup and recovery plan. There are different company which provides computing services and they are called cloud providers. And cloud providers charged as per the usage of the service.

Based on the service cloud computing can be divided into three major parts: 

IaaS (Infrastructure as a service)



PaaS (Platform as a service)



SaaS (Software as a service)

Software as a service (SaaS) can be employed to avoid a service interruption in time of disaster.

SaaS allows users to rent applications running on clouds instead of purchasing them. SaaS reduces cost for the end users by providing software services, SaaS reduces the overall costs so it is popular among the different organizations. Only need services can be used in SaaS so it lower the cost of service and service is paid as per the use. There are chances of data loss while migrating to the cloud. SaaS disaster recovery plan is very suitable as it helps to recover data easily. Disaster recovery is important for business continuity. Disaster recovery as a service (DRaaS) and business continuity planning are parts of risk management foe the organization.

SaaS disaster recovery plan is related to the people, process and technology, it may not be possible for all catastrophe. There is need to decide about the disaster and risk which has to be minimized.

DRaaS is a service of cloud computing which helps to protect data or application from interruption. DRaaS is business continuity as a service and several disaster recovery is provided as services. For using SaaS disaster recovery following requirements of organizations should be there. 

Automatic backup of data



Fast recovery of data with minimum user interaction



Flexible restoring options



Simple billing structure recognition

SaaS provides centrally hosted application using the internet service. For storing and uploading critical information secure environment should be there SaaS is great option for the safety of the data. SaaS disaster recovery provides recovery plan and it avoids catastrophe. SaaS backup and recovery is perfect and secure solution for data security[ CITATION Ish18 \l 1033 ].

Figure 3: Software as a service[ CITATION Mil20 \l 1033 ] SaaS is a software which is owned and managed by multiple providers, SaaS provider delivers software on the basis of common code and data definitions. SaaS software which is maintained and leased on the basis of metrics. Service provider of cloud services installs, operate and maintain the different types of software application.

Before few years software’s are purchased and installed into the device, but after the implementation of SaaS subscribed users can access it from anywhere and SaaS is very beneficial for individuals and business organization[ CITATION Mil20 \l 1033 ].

Benefits of SaaS to the organization are: 1. Reduced time to benefit In SaaS software is already installed and configured which is different from the traditional approach as there is no need of new hardware. In few hours servers is ready and application is also ready for use. Using SaaS time for the working solution is very few than the traditional approach.

2. Scalability and integration SaaS offers the cloud environment which are scalable and have integration to other SaaS offering services. There is no need of new devices and software for the advancement of service. After enabling SaaS service they can use the service. Most of the professional software are built on application programming interfaces (APIs). API helps to connect two application together and they can communicate with each other. Using API and documentation integration of the software can be done very fast.

3. Upgrades Upgrades is provided to the customers by the SaaS, all the cost and effort associated with the upgrades and new releases is very low than the traditional approach, as traditional approach forces users to upgrades and install. There is no need of IT expertise for using the SaaS platform.

4. Easy to use and perform proof concepts SaaS is easy to use and perform proof concepts because of the best practices and samples provided with it. User can test the functionality of the software or new features. Smooth migration between the different versions of instances is there and before buying SaaS user can test the software. SaaS helps to solves critical needs of the business for multiple clients.

5. Security

All the data and information are stored in the cloud which is safer, user can easily access their data whenever needed. On premises system have many faults and risks as compared to SaaS. SaaS helps to keep all the software secure by using firewalls, prevention software for intrusion, antivirus and different level of access control. Highly secure facilities for user is provided which helps to prevent data and information from attacks[ CITATION Sas20 \l 1033 ].

References ASSOCIATES, N. S., 2020. NETWORK SECURITY ASSOCIATES. [Online] Available at: https://www.nsa-nv.com/virtual-desktops-during-the-covid-pandemic/ [Accessed 30 09 2020].

Bisht, N., 2020. geeksforgeeks. [Online] Available at: https://www.geeksforgeeks.org/virtualization-cloud-computingtypes/#:~:text=Desktop%20virtualization%20allows%20the%20users,to%20have%20a %20virtual%20desktop.

[Accessed 30 09 2020].

Chou, T.-S., 2013. Security Threats on Cloud Computing Vulnerabilities. researchgate, 5(3), p.

88.

Dizzion, 2020. Dizzion. [Online] Available at: https://www.dizzion.com/desktop-virtualization/ [Accessed 30 09 2020].

IDM, 2018. Types of Cloud Services. [Online] Available at: https://medium.com/@IDMdatasecurity/types-of-cloud-services-b54e5b574f6 [Accessed 01 10 2020].

Mameghani, S., 2020. Maindeck. [Online] Available at: https://www.maindeck.io/saas-benefits-shipping [Accessed 02 10 2020].

MilesWeb, 2020. MilesWeb. [Online] Available at: https://www.milesweb.com/hosting/cloud-hosting/what-is-saas [Accessed 01 10 2020].

Ratra, I., 2018. Data Recovery. [Online] Available at: https://www.datarecovery.institute/saas-disaster-recovery-plan/#:~:text=Software %20As%20A%20Service%20Disaster%20Recovery%20Scenarios&text=If%20you%20rely %20on%20SaaS,or%20customer%27s%20data%20loss%20scenarios.

[Accessed 02 10 2020].

Tony DeGonia, A., 2020. ALIENVAULT IS NOW AT&T CYBERSECURITY. [Online] Available at: https://cybersecurity.att.com/blogs/security-essentials/10-steps-to-creating-a-secureit-environment [Accessed 01 10 2020].