CompTIA Cloud+ Study Guide

ABOUT THE AUTHORBen Piper, is an IT consultant who has created more than 30 educational courses covering cloud technologies, networking, and automation. Learn more about Ben from his website at www.benpiper.com.

• Introduction xxiiiAssessment Test IviAnswers to Assessment Test lxxviiChapter 1 Introducing Cloud Computing Configurations and Deployments 1Introducing Cloud Computing 4Virtualization 7Cloud Service Models 10Cloud Reference Designs and Delivery Models 14Introducing Cloud Concepts and Components 16Connecting the Cloud to the Outside World 18Deciding Whether to Move to the Cloud 18Selecting Cloud Compute Resources 18Hypervisor Affinity Rules 19Validating and Preparing for the Move to the Cloud 19Choosing Elements and Objects in the Cloud 20Internet of Things 21Machine Learning/Artificial Intelligence (AI) 21Creating and Validating a Cloud Deployment 22The Cloud Shared Resource Pooling Model 23Organizational Uses of the Cloud 27Scaling and Architecting Cloud Systems Based on Requirements 29Understanding Cloud Performance 29Delivering High Availability Operations 30Managing and Connecting to Your Cloud Resources 30Is My Data Safe? (Replication and Synchronization) 32Understanding Load Balancers 34Cloud Testing 35Verifying System Requirements 36Correct Scaling for Your Requirements 36Making Sure the Cloud Is Always Available 37Remote Management of VMs 39Monitoring Your Cloud Resources 41Writing It All Down (Documentation) 41Creating Baselines 41Shared Responsibility Model 42Summary 43Exam Essentials 43Written Lab 45Review Questions 46Chapter 2 Cloud Deployments 51Executing a Cloud Deployment 58Understanding Deployment and Change Management 59Cloud Deployment Models 65Network Deployment Considerations 67Service Level Agreements 77Matching Data Center Resources to Cloud Resources 78What Are Available and Proposed Hardware Resources? 78Templates and Images 81Physical Resource High Availability 82Introducing Disaster Recovery 82Physical Hardware Performance Benchmarks 83Cost Savings When Using the Cloud 83Energy Savings in the Cloud 84Shared vs. Dedicated Hardware Resources in a Cloud Data Center 84Microservices 84Configuring and Deploying Storage 86Identifying Storage Configurations 86Storage Provisioning 90Storage Priorities: Understanding Storage Tiers 94Managing and Protecting Your Stored Data 95Storage Security Considerations 102Accessing Your Storage in the Cloud 105Performing a Server Migration 105Different Types of Server Migrations 106Addressing Application Portability 109Workload Migration Common Procedures 110Examining Infrastructure Capable of Supporting a Migration 110Managing User Identities and Roles 111RBAC: Identifying Users and What Their Roles Are 112What Happens When You Authenticate? 113Understanding Federation 113Single Sign-On Systems 113Understanding Infrastructure Services 114Summary 117Exam Essentials 118Written Lab 119Review Questions 120Chapter 3 Security in the Cloud 125Cloud Security Compliance and Configurations 128Establishing Your Company’s Security Policies 130Selecting and Applying the Security Policies to Your Cloud Operations 130Some Common Regulatory Requirements 130Encrypting Your Data 134Remote Access Protocols 139Automating Cloud Security 140Security Best Practices 141Access Control 144Accessing Cloud-Based Objects 144Cloud Service Models and Security 146Cloud Deployment Models and Security 147Role-Based Access Control 148Mandatory Access Control 148Discretionary Access Control 148Multifactor Authentication 149Single Sign-On 149Summary 149Exam Essentials 150Written Lab 151Review Questions 153Chapter 4 Implementing Cloud Security 157Implementing Security in the Cloud 159Data Classification 159Segmenting Your Deployment 160Implementing Encryption 162Applying Multifactor Authentication 163Regulatory and Compliance Issues During Implementation 164Cloud Access Security Broker 165Automating Cloud Security 165Automation Tools 166Techniques for Implementing Cloud Security 168Security Services 170Summary 173Exam Essentials 174Written Lab 175Review Questions 177Chapter 5 Maintaining Cloud Operations 183Applying Security Patches 187Patching Cloud Resources 187Patching Methodologies 189Patching Order of Operations and Dependencies 193Updating Cloud Elements 193Hotfix 193Patch 194Version Update 194Rollback 195Workflow Automation 195Continuous Integration and Continuous Deployment 196Virtualization Automation Tools and Activities 197Storage Operations 199Types of Backups 199Backup Targets 203Backup and Restore Operations 205Summary 206Exam Essentials 207Written Lab 209Review Questions 210Chapter 6 Disaster Recovery, Business Continuity, and Ongoing Maintenance 215Implementing a Disaster Recovery and Business Continuity Plan 216Service Provider Responsibilities and Capabilities 217Disaster Recovery Models and Techniques 219Business Continuity 225Establishing a Business Continuity Plan 225Establishing Service Level Agreements 227Cloud Maintenance 228Establishing Maintenance Windows 228Maintenance Interruptions to Operations 229Maintenance Automation Impact and Scope 229Common Maintenance Automation Tasks 229Summary 233Exam Essentials 234Written Lab 235Review Questions 236Chapter 7 Cloud Management 241Cloud Metrics 244Monitoring Your Deployment 246Cloud Support Agreements 250Standard Cloud Maintenance Responsibilities 250Configuration Management Applications and Tools 251Change Management Processes 251Adding and Removing Cloud Resources 252Determining Usage Patterns 252Bursting 252Migrating Between Cloud Providers 252Scaling Resources to Meet Requirements 253Extending the Scope of the Cloud 256Understanding Application Life Cycles 256Organizational Changes 257Managing Account Provisioning 258Account Identification 258Authentication 259Authorization 259Lockout Policies 259Password Complexity 259Account Automation and Orchestration 260Summary 261Exam Essentials 262Written Lab 263Review Questions 264Chapter 8 Cloud Management Baselines, Performance, and SLAs 269Measuring Your Deployment Against the Baseline 272Object Tracking for Baseline Validation 273Applying Changes to the Cloud to Meet Baseline Requirements 277Changing Operations to Meet Expected Performance/Capacity Requirements 280Cloud Accounting, Chargeback, and Reporting 281Summary 284Exam Essentials 285Written Lab 286Review Questions 287Chapter 9 Troubleshooting 291Incident Management 294Incident Types 294Logging Incidents 298Prioritizing Incidents 298Preparation 299Templates 300Time Synchronization 301Workflow 301Troubleshooting Cloud Capacity Issues 301Capacity Boundaries in the Cloud 301Troubleshooting Automation and Orchestration 304Process and Workflow Issues 305Summary 307Exam Essentials 308Written Lab 309Review Questions 310Chapter 10 Troubleshooting Networking and Security Issues and Understanding Methodologies 315Troubleshooting Cloud Networking Issues 317Identifying the Common Networking Issues in the Cloud 318Network Troubleshooting and Connectivity Tools 324Remote Access Tools 333Troubleshooting Security Issues 336Account Privilege Escalation 336Network Access Issues 337Authentication 337Authorization 337Federations 338Certificate Configuration Issues 338Device- Hardening Settings 338External Attacks 339Internal Attacks 339Maintain Sufficient Security Controls and Processes 339Network Access Tunneling and Encryption 340Troubleshooting Methodology 340Identifying the Problem 341Establishing a Theory 341Testing the Theory 343Creating and Implementing a Plan of Action 344Verifying the Resolution 344Documenting the Ordeal 344Summary 344Exam Essentials 345Written Lab 346Review Questions 347 Index 375