CompTIA CLO-002 - CompTIA Cloud Essentials+

 A company that adopts a multicloud strategy for its IT applications is trying to avoid vendor lock-in as part of its risk mitigation strategy. Vendor lock-in is a situation where the customer becomes dependent on a single cloud provider and faces high switching costs and technical challenges if they want to migrate to another provider. Vendor lock-in can limit the customer’s flexibility, choice, and control over their IT resources and expose them to the risks of service degradation, price increases, or vendor lockout12. A multicloud strategy is an approach that uses multiple cloud providers for different IT applications, based on the best fit for each workload. A multicloud strategy can help the customer avoid vendor lock-in by reducing their reliance on any single provider, increasing their bargaining power, and enabling them to leverage the best features and services from different providers34.

Resource tagging is a method of assigning metadata to cloud resources, such as virtual machines, storage volumes, databases, or networks. Resource tags are key-value pairs that can be used for various purposes, such as identifying, organizing, grouping, filtering, or reporting on cloud resources. Resource tagging can also be used for billing recognition, which means tracking and allocating the costs of cloud resources to different departments, projects, or customers. By applying resource tags to cloud resources, department members can provision their own cloud resources and have their usage and costs automatically attributed to their department. Resource tags can also help department managers monitor and optimize their cloud spending, and enforce policies and budgets for their cloud resources. Sandboxing, BYOL, and reserved instances are not related to billing recognition. Sandboxing is a technique of creating isolated environments for testing or experimenting with cloud resources, without affecting the production environment. BYOL stands for bring your own license, which means using an existing software license for a cloud service, instead of purchasing a new license from the cloud provider. Reserved instances are a type of cloud pricing model that offers discounted rates for committing to a certain amount of cloud resources for a specific period of time. References: CompTIA Cloud Essentials+ CLO-002 Study Guide, Chapter 3: Cloud Business Principles, Section 3.4: Cloud Billing and Cost Management, Page 891 and Resource tagging best practices | Google Cloud

A hybrid cloud deployment model includes application components on a company’s network as well as on the Internet. A hybrid cloud is a combination of two or more cloud deployment models, such as public, private, or community, that are connected by a common network or technology. A hybrid cloud allows the company to leverage the benefits of both public and private clouds, such as scalability, cost-efficiency, security, and control. A hybrid cloud can also enable the company to use different cloud services for different types of workloads, such as sensitive data, high-performance computing, or disaster recovery12. References: CompTIA Cloud Essentials+ Certification | CompTIA IT Certifications, CompTIA Cloud Essentials+: Essential Cloud Principles, CompTIA Cloud Essentials CLO-002 Certification Study Guide, CompTIA Cloud+ Certification Exam Objectives

 Availability is one of the three basic functions of security management that are present in all systems. Availability is the assertion that a computer system is available or accessible by an authorized user whenever it is needed. Systems have high order of availability to ensure that the system operates as expected when needed1. Availability provides building of fault tolerance system in the products. It also ensures the backup processing by including hot and cold sites in the disaster recovery planning1.

Having a local user database option to ensure the application can still be used if the corporate directory is not responsive to login requests is an example of availability, as it ensures that the users can access the application even if the primary authentication service is unavailable. This is a form of backup processing that provides an alternative means of accessing the application in case of a failure or outage. Having a local user database option does not affect the access, authorization, or auditing of the application, as these are related to the identification, verification, and monitoring of the users, not the availability of the application. References: Availability in Information Security - GeeksforGeeks; 5 Security Concepts Every Developer Should Understand; The 7 Basic Principles of IT Security - Techopedia.

 Right-sizing is the process of adjusting the resources allocated to a system to match its actual needs and avoid paying for unused capacity. Right-sizing can be done manually or automatically, and it can involve increasing or decreasing the resources as needed. Right-sizing is one of the benefits of cloud computing, as it allows for more efficient and cost-effective use of resources. References: CompTIA Cloud Essentials+ (CLO-002) Study Guide, Chapter 2: Cloud Computing Concepts, Section 2.2: Cloud Service Models, page 3812

Learn more:

1. comptia.org2. comptia.org3. globalknowledge.com4. partners.comptia.org

1of30

A service level agreement (SLA) is a contract that defines the quality and performance metrics that are agreeable to both parties. An SLA specifies the expectations and responsibilities of the service provider and the customer in terms of service availability, reliability, security, and responsiveness. An SLA also defines the penalties or remedies for non-compliance with the agreed-upon metrics. An SLA is a key component of cloud computing contracts, as it ensures that the cloud service provider delivers the service according to the customer’s requirements and expectations12.

 Data sovereignty is the concept that best represents the requirement for keeping intellectual property within a country’s borders. Data sovereignty refers to the idea that data is subject to the laws and governance of the country in which it is stored or processed. Data sovereignty can have implications for data privacy, security, compliance, and access, as different countries may have different regulations, standards, or policies regarding data protection, ownership, or transfer.Data sovereignty can also affect the choice of cloud providers, as some cloud providers may store or process data in multiple locations across the world, which may not comply with the data sovereignty requirements of the customer or the country. Therefore, customers who need to ensure data sovereignty should carefully review the terms and conditions of the cloud provider, and choose the one that offers the appropriate data location, encryption, or isolation options12

 Disaster recovery is the process of restoring the normal operations of an organization after a disruptive event, such as a natural disaster, a cyberattack, or a human error. Disaster recovery involves the planning, preparation, and implementation of strategies and procedures to minimize the impact and duration of the disruption, and to ensure the continuity and availability of the critical functions and data of the organization1

RTO and RPO are two key metrics that are used to measure and evaluate the disaster recovery capabilities and objectives of an organization. RTO stands for Recovery Time Objective, which is the maximum acceptable amount of time that an application or a service can be offline orunavailable after a disruption. RPO stands for Recovery Point Objective, which is the maximum acceptable amount of data that can be lost or unrecoverable after a disruption2

When designing a new cloud-enabled application, an organization that is considering RTO and RPO is most likely concerned about disaster recovery, as these metrics can help the organization to determine the optimal level of backup, redundancy, and recovery for the application, as well as the potential costs and risks of downtime or data loss. RTO and RPO can also help the organization to choose the appropriate cloud service model, provider, and deployment option that can meet the disaster recovery requirements and expectations of the organization and its customers3

Operating expenditure (OPEX) fees are variable costs that depend on the usage of cloud services, such as storage, bandwidth, compute, or licensing fees. OPEX fees are typically charged by the cloud provider on a monthly or pay-as-you-go basis. A small business that migrates from on-premises CRM software to a cloud provider must consider the OPEX fees as part of the total costof ownership (TCO) of the cloud solution. OPEX fees can vary depending on the demand, performance, availability, and scalability of the cloud service. References: CompTIA Cloud Essentials+ Certification Exam Objectives1, CompTIA Cloud Essentials+ Study Guide, Chapter 2: Business Principles of Cloud Environments

Risk mitigation is the process of reducing the impact or likelihood of a risk by implementing controls or countermeasures. By enabling geo-redundancy for its cloud environment, thecompany adopted a risk mitigation strategy to minimize the effect of possible outages in some regions. Geo-redundancy is a feature that allows the replication and distribution of data and services across multiple geographic locations to ensure availability and resiliency12. If one region experiences an outage, the company can still access its data and services from another region. References: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 4: Risk Management, pages 105-106.