CompTIA CLO-002 - CompTIA Cloud Essentials+

HTTPS and SSH are considered secure access types of hosts in the cloud because they use encryption and authentication to protect the data and the identity of the users. HTTPS is a protocol that uses SSL or TLS to encrypt the communication between a web browser and a web server. SSH is a protocol that allows secure remote login and file transfer over a network. Both HTTPS and SSH prevent unauthorized access, eavesdropping, and tampering of the data in transit. References: CompTIA Cloud Essentials+ Certification Study Guide, Second Edition (Exam CLO-002), Chapter 3: Security in the Cloud, pages 83-84.

Infrastructure as code (IaC) is a software engineering approach that allows the provisioning and management of infrastructure resources using code and automation1. It involves defining infrastructure configurations and provisioning them through code, rather than manually configuring and managing infrastructure resources2. One of the main reasons for using IaC is to capture the system configurations to track changes and remediate configuration drift3. Configuration drift is the phenomenon where the actual state of an infrastructure resourcedeviates from its desired state over time due to manual interventions, updates, patches, or other factors. Configuration drift can cause inconsistencies, errors, and security issues in the infrastructure environment. IaC helps to prevent and detect configuration drift by storing the infrastructure configuration code in a version control system and applying it consistently across all environments. IaC also enables the use of automated testing and validation tools to verify the compliance and functionality of the infrastructure resources. By using IaC, DevOps teams can ensure that the infrastructure is always in a known and reproducible state, and that any changes are documented and traceable. References: 1: https://technology.gov.capital/infrastructure-as-code-iac/ 2: https://aws.amazon.com/what-is/iac/ 3: https://learn.microsoft.com/en-us/devops/deliver/what-is-infrastructure-as-code : https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide, Chapter 5, page 179-180

SaaS stands for Software as a Service, which is a cloud computing model that provides ready-to-use software applications over the internet, such as CRM, email, or office suites. SaaS is themost appropriate cloud computing model for a startup company that wants to use a CRM application to manage its sales and support organizations, and does not have any IT staff. SaaS offers the following benefits for the company:

SaaS does not require any installation, maintenance, or update of the software, as the cloud provider handles all the technical aspects of the service. The company can access the software through a web browser or a mobile app, without worrying about the underlying infrastructure, platform, or software.

SaaS is scalable, flexible, and cost-effective, as the company can adjust the number of users or features of the software according to its needs and budget. The company only pays for what it uses, and can avoid the upfront costs of purchasing or licensing the software.

SaaS is reliable, secure, and compliant, as the cloud provider ensures the availability, backup, and recovery of the software, as well as the protection of the data and the adherence to the relevant standards and regulations.

Transference is a risk response method that involves shifting the responsibility or impact of a risk to a third party3. Transference does not eliminate the risk, but it reduces the exposure or liability of the original party. A common example of transference is insurance, where the risk is transferred to the insurer in exchange for a premium4. In this case, the SaaS provider transfers the risk of misuse of the service to the customer by specifying it in the user agreement.

 DNS stands for Domain Name System, which is a service that translates domain names into IP addresses. Domain names are easier to remember than IP addresses, and they can also change without affecting the users. For example, a SaaS application can have a domain name like www.saas.com, which can be resolved to different IP addresses depending on the location, availability, and performance of the servers. DNS allows users to access the SaaS application by typing the domain name in their browser, instead of memorizing the IP address. References: https://www.comptia.org/training/books/cloud-essentials-clo-002-study-guide, Chapter 2, page 43.