Domain 3: Security Architecture and Engineering

Video transcripts

Every course video in Domain 3, written out with timestamps so you can search the wording instead of scrubbing through playback.

  • Transcript

    1. 0:04Mist identifies three service models and
    2. 0:08ISO IEC 17 7 89 identifies four service categories
    3. 0:13that represent different types of cloud services available.
    4. 0:16The first three are the same with both standards
    5. 0:19software as a service sass the capability provided to the consumer
    6. 0:23is to use the providers applications running on a cloud infrastructure.
    7. 0:27The applications are accessible from various client devices through either
    8. 0:31a thin client interface such as a web browser,
    9. 0:33for example, web based email or a program interface.
    10. 0:37The consumer does not manage or control
    11. 0:39the underlying cloud infrastructure including network servers,
    12. 0:43operating systems, storage or even individual application capabilities.
    13. 0:47With the possible exception of
    14. 0:49limited user specific application configuration settings
    15. 0:53platform as a service or pass
    16. 0:56the capability provided to the consumer is
    17. 0:58to deploy onto the cloud infrastructure,
    18. 1:01consumer created or acquired applications created using programming languages,
    19. 1:06libraries, services and tools supported by the provider.
    20. 1:10The consumer does not manage or control
    21. 1:12the underlying cloud infrastructure including network servers,
    22. 1:16operating systems or storage
    23. 1:18but has control over the deployed applications and
    24. 1:21possibly configuration settings for the application hosting environment
    25. 1:25infrastructure as a service or I
    26. 1:28A.
    27. 1:28The capability provided to the consumer is to provision,
    28. 1:31processing storage networks and other fundamental
    29. 1:34computing resources where the consumer is able
    30. 1:37to deploy and run arbitrary software which
    31. 1:40can include operating systems and applications.
    32. 1:43The consumer doesn't manage or control the underlying cloud infrastructure
    33. 1:47but does have control over operating systems, storage and deployed applications
    34. 1:52and possibly limited control of select networking components.
    35. 1:55For example, host firewalls.
    36. 1:58The slide here shows a typical pizza as a service as
    37. 2:02an example to describe the three types of cloud deployment.
    38. 2:05The make at home pizza represents the on prem system.
    39. 2:09When you make a pizza at home,
    40. 2:10all ingredients in the oven are required to be from your home
    41. 2:14just as everything is on prem for an on premise system, including network switches,
    42. 2:18routers system, et cetera
    43. 2:20for a take and bake pizza.
    44. 2:22The vendor provides the pizza dough toppings, cheese and sauce.
    45. 2:26You manage the oven drinks, fire electric gas and dining table.
    46. 2:31Now, in the case of a
    47. 2:32a
    48. 2:32the vendor manages the physical environment and
    49. 2:35you control the OS and the applications
    50. 2:38for the pizza delivery vendor provides pizza dough toppings, cheese sauce,
    51. 2:42fire and electric gas.
    52. 2:44You manage the dining table and the drinks
    53. 2:47just as pass, the vendor manages the physical environment N OS.
    54. 2:51You control the applications
    55. 2:54for the dining out model. The vendor manages everything and you manage nothing.
    56. 2:58And this of course is the same as the Sass model.
    57. 3:01You're responsible for certain controls such as access control, auditing,
    58. 3:05et cetera.
    59. 3:06IOIEC 17 7 89 adds an additional service category as
    60. 3:11network as a service or NAS
    61. 3:14a cloud service category in which the capability provided to the
    62. 3:17cloud service customer is to transport
    63. 3:20connectivity and related network capabilities.
    64. 3:23Ioiec 17 7 88 defines the four categories
    65. 3:28above and adds some additional service categories.
    66. 3:31Communication as a service or CAA S compute as a service or compass
    67. 3:36and data storage as a service or DS A.

    defines the four categories above and adds some additional service categories. Communication as a service or CAA S compute as a service or compass and data storage as a service or DS A.

    Open in the ISC2 portal