Cloud Computing - Short Question Answer
Here in this section of Cloud Computing Short Questions Answers, We have listed out some of the important Short Questions with Answers which will help students to answer it correctly in their University Written Exam.
1. What is Changing Markets?
Markets are increasingly dynamic. Products and skills rapidly become obsolete, eroding competitiveness. So incumbents need to find and implement new ideas at an ever faster pace. Also, new businesses are entering the market more rapidly, and they are extending their portfolios by forging alliances with other players.
2. Note on Dynamic ICT Services.
Standardized production also enables ICT providers to achieve greater economies of scale. However, this calls for highly effective ICT management— on the part of both the service provider and the customer. Proven concepts and methodologies from the manufacturing industry can be applied to ICT. The following are particularly worth mentioning:
- Standardization
- Automation
- Modularization
- Integrated creation of ICT services
3. What is Quality.
If consumers’ Internet or ICT services are unavailable, or data access is slow, the consequences are rarely serious. But in business, the nonavailability of a service can have a grave knock-on effect on entire mission-critical processes—bringing production to a standstill, or preventing orders from being processed.
4. What is Map Reduce Programming Model?
Map Reduce is a software framework for solving many large-scale computing problems. The Map Reduce abstraction is inspired by the Map and Reduce functions, which are commonly used in functional languages such as Lisp
5. List out features of Map Reduce Model.
Data-Aware. When the Map Reduce-Master node is scheduling the Map tasks for a newly submitted job, it takes in consideration the data location information retrieved from the GFS- Master node.
Simplicity. As the Map Reduce runtime is responsible for parallelization and concurrency control, this allows programmers to easily design parallel and distributed applications.
6. What is Hadoop.
Hadoop is a top-level Apache project, being built and used by a community of contributors from all over the world. It was advocated by industry’s premier Web players—Google, Yahoo!, Microsoft, and Facebook—as the engine to power the cloud
7. What is Hadoop MapReduce?
The Map/Reduce framework has master/slave architecture. The master, called JobTracker, is responsible for (a) querying the NameNode for the block locations, (b) scheduling the tasks on the slave which is hosting the task’s blocks, and (c) monitoring the successes and failures of the tasks. The slaves, called TaskTracker, execute the tasks as directed by the master.
8. What is Disco in cloud computing?
Disco is an open-source MapReduce implementation developed by Nokia. The Disco core is written in Erlang, while users of Disco typically write jobs in Python. Disco was started at Nokia Research Center as a lightweight framework for rapid scripting of distributed data processing tasks.
9. What is MapReduce.NET.
MapReduce.NET is designed for the Windows platform, with emphasis on reusing as many existing Windows components as possible. The MapReduce.Net runtime library is assisted by several components services from Aneka and runs on WinDFS.
10. What is meant by Skynet?
Skynet is a Ruby implementation of MapReduce, created by Geni. Skynet is“anadaptive, self- upgrading, fault-tolerant,andfully distributed system with no single point of failure” .
At the heart of Skynet is plug-in based message queue architecture, with the message queuing allowing workers to watch out for each other.
11. What is Grid Gain?
Grid Gain is an open cloud platform, developed in Java, for Java. Grid Gain enables users to develop and run applications on private or public clouds.
The MapReduce paradigm is at core of what Grid Gain does. It defines the process of splitting an initial task into multiple subtasks, executing these subtasks in parallel and aggregating (reducing) results back to one final result.
12. What is SAP Systems?
SAP systems are used for a variety of business applications that differ by version and functionality [such as customer relationship management (CRM) and enterprise resource planning. Certain SAP applications are
composed of several loosely coupled systems. Such systems have independent databases and communicate asynchronously by message with each other.
13. List out three tier architecture.
- Requests are handled by the SAP Web
- In the middle tier, there are two types of components: multiple stateful dialog instances (DIs) and a single central instance (CI) that performs central services such as application- level locking, messaging, and registration of DIs. The number of DIs can be changed while the system is running to adapt to load
- A single database management system (DBMS) serves the SAP
14. What are the challenges in infrastructures provider?
- Managing thousands of different service components that comprise a variety of service applications executed by thousands of virtual execution environments, on top of a complex infrastructure that also includes network and storage systems.
- Consolidating many applications on the same infrastructure, thereby increasing HW utilization and optimizing power consumption, while keeping the operational cost at
- Guaranteeing the individual SLAs of the many customers of the data center who face different and fluctuating
15. What is Dynamic Elasticity.
The cloud should dynamically adjust resource allocation parameters (memory, CPU, network bandwidth, storage) of individual virtual execution environments seamlessly. Moreover, the number of virtual execution environments must be dynamically and seamlessly adjusted to adapt to the changing load.
16. What is Elasticity?
One of the main advantages of cloud computing is the capability to provide, or release, resources on-demand. These “elasticity” capabilities should be enacted automatically by cloud computing providers to meet demand variations, just as electrical companies are able (under normal operational circumstances) to automatically deal with variances in electricity consumption levels.
17. Role of Service Manager.
The baseline federation is the most basic federation scenario, but even here the SM must be allowed to specify placement restrictions when a service is deployed.
18. What are the SECURITY CONSIDERATIONS in cloud?
virtualized service-oriented infrastructures provide computing as a commodity for today’s competitive businesses. Besides costeffectiveness, they also ensure optimized use of system and network resources, reduced carbon footprints, and simplify management of their underlying resources.
19. What is External Threats?
The Internet represents the same origin of threats for the communication across the RESERVOIR sites (VMI interfaces) and outside the RESERVOIR sites both for the SMI interface and service interface
20. What is Internal Threats
Each RESERVOIR site has a logical representation with three different layers, but these layers can be compounded by one or more hardware components.
21. What is Admission Control?
Admission control algorithms play an important role in deciding the set of requests that should be admitted into the application server when the server experiences “very” heavy load.
22. List out Application SLA:
In the application co-location hosting model, the server capacity is available to the applications based solely on their resource demands. Hence, the service providers are flexible in allocating and de-allocating computing resources among the co-located applications.
23. What are the steps in SLA?
SLA life cycle and consists of the following five phases:
- Contract definition
- Publishing and discovery
- Negotiation
- Operationalization
- De-commissioning
24. What is Negotiation.
Once the customer has discovered a service provider who can meet their application hosting need, the SLA terms and conditions needs to be mutually agreed upon before signing the agreement for hosting the application.
25. List out SLA MANAGEMENT IN CLOUD
SLA management of applications hosted on cloud platforms involves five phases.
- Feasibility
- On-boarding
- Pre-production
- Production
- Termination
26. What is Rules Engine.
The operation policy defines a sequence of actions to be enacted under different conditions/trigger points. The rules engine evaluates the data captured by the monitoring system, evaluates against the predefined operation rules, and triggers the associated action if required.
27. What is Virtual Engine and Cloud Environment.
Virtual Engine (VE). These are related to the performance loss introduced by the virtualization mechanism. They are strictly related to the VE technology adopted.
Cloud Environment (CE). These are the losses introduced at a higher level by the cloud environment, and they are mainly due to overheads and to the sharing of computing and communication resources.
28. What is GRID AND CLOUD?
“Grid vs Cloud” is the title of an incredible number of recent Web blogs and articles in on-line forums and magazines, where many HPC users express their own opinion on the relationship between the two paradigms [Cloud is simply presented, by its supporters, as an evolution of the grid. Some consider grids and clouds as alternative options to do the same thing in a different way. However, there are very few clouds on which one can build, test, or run compute-intensive applications.
29. What are the types of Cloud Computing?
They are the four types of Cloud Computing.
- Public Private
- Private
- Community
- Hybrid
30. What are the Advantage of Cloud Computing?
They are the seven types of advantage of Cloud Computing
- Cost reduction
- Scalability
- Levels the playing field
- Easier Collaboration
- Affordable
- Scalable and Flexible
- Efficiency
31. What are the Disadvantage of Cloud Computing?
They are the six types of Disadvantage of Cloud Computing
- Security concerns
- Risk of losing internet connection
- Limited resources for customization
- Availability
- Data mobility and ownership
- Privacy
32. What is the area to process the Cloud Migrations?
They are the three area of process.
- Plan
- Execute
- Monitor
33. What are the types of Cloud Computing for the Business Purpose?
They are the six types of Cloud Computing
- WWW-based Cloud Computing
- Software as a Service
- Platform as a Service
- Utility Cloud Computing Services
- Managed Services
- Service Commerce
34. What is Public Cloud?
A public cloud is based on the standard Cloud computing model, where the service provider makes the resources such as storage and application available to the public over the WWW. These service may be free or on a pay-per-usage model.
35. What is Private Cloud?
A private cloud is a proprietary computing model that provides services to user who are behind a firewall.
36. What are Models in Cloud Service?
They are the five types are models in cloud service
- SaaS
- PaaS
- Iaas
- Baas
- Maas
37. What are the other Cloud-related techniques?
They are the three types of other Cloud-related techniques
- Grid computing
- Utility computing
- Automatic computing
38. What is the Step to get Cloud Computing infrastructure for his Business?
The following steps are:
- Choose on-demand technology which will be the foundation for your infrastructure.
- Determine how your employees can access information from the infrastructure.
- Prepare the infrastructure with the necessary software and hardware.
- Set up each computer to access the infrastructure.
- Integrate all aspects of the infrastructure so that all employees can participate in resource.
39. What is PaaS?
It is service, where application/software can be build, tested and deployed at a single unit.
Paas is a useful for application builders, developers, deployers and testers.
40. What is SaaS?
Provider of SaaS has full administrative rights for its application and responsible for activities such as deployment, maintenance and update.
41. What are the pros and cors of Cloud Computing and Cloud basic Device?
- Centralized Data Storage in Cloud
- Cloud Servers Maintenance and
- Data Access and Network
- Cost Factor
- Cloud Servers Data Backup and Availability
42. What are the Four types of Cloud Services available in IBM Company?
- IaaS
- PaaS
- SaaS
- BaaS
43. List out the types on Cloud is based on its infrastructure.
- Public
- Private
- 3. Hybrid.
44. What is CDM?
The CDM provides an open frame work for identifying the necessities and differences of various cloud deployment environment.
45. What are Factors to be considered which designed Cloud based Architecture?
- Cost
- Complexity
- Speed
- Cloud Portability
- Security
46. What is called Combined Cloud?
Combining internal and external providers termed as combined cloud. By intergrating multiplecloud services, consumers can ease the transition to public cloud services.
47. List out the three key Principles of Cloud Computing.
- Abstraction
- Automation
- Elasticity
48. Define Cloud Federation.
Cloud federation is interconnectiong the cloud computing environments with two or more service providers for balancing the traffic load and to surge spikes while there is demand.
49. What is Virtualization?
Virtualization reduces the burden of workloads of users by centralizing the administrative tasks and improving the scalability and workloads.
50. Define Virtual Machine
Virtual machines consolidate the workloads of under-utilized servers. Because of this onc can save on hardware, environmental costs and management.
51. What are the types of Virtualization?
They are the six types of Virtualization
- Sever Virtualization
- Network Virtualization
- Storage Virtualization
- Desktop Virtualization
- Application Virtualization
- Management Virtualization
52. List out the Need for Server Virtualization
- Consolidation
- Redundancy
- Legacy System
- Migration
53. What are the Advantages of OS Virtualization?
They are the four types of advantages
- Flexible provisioning
- Rapid software deployment
- Easy and efficient implaning updates
- Easy rollback scenarios
54. List out the Disadvantage of OS Virtualization.
They are the four types of disadvantages
- No work off-line capability
- High-speed LAN
- Limited number of OS are supported
- Imaging disadvantages apply to this
55. What is Clustering?
Cluster is defined as a type of parallel or distributed system that consists of a collection of interconnected computers and is used as a single, unified computing resource. Forming a cluster refers to a collection of computers boubnded together to form a common resource pool.
56. List out the primary types of Storage Virtualization.
They are the two primary types of storage Virtualization
- Block Virtualization
- File Virtualization
57. What are the Components of a Virtual Network?
They are the five components
- Network switch adapters
- Netowork elements
- VLAN and VMs
- Network mobile elements
- Network
58. Define Cloud Stack.
CloudStack includes a computer function that assigns virtual machines (VMs) to individual servers, a network function that manages switches to create and manage logical networks, object and block storage systems, an image management function and an administration interface. Cloud computing that supports all components of the software stack.
59. Define Server Virtualization.
Server virtualization is a virtualization technique that involves partitioning a physical server into a number of small, virtual servers with the help of virtualization software. In server virtualization, each virtual server runs multiple operating system instances at the same time.
60. What is known as Network Virtualization?
In computing, network virtualization or network virtualisation is the process of combining hardware and software network resources and network functionality into a single, software-based administrative entity, a virtual network.
61. What is CDLC.
A cloud engineering discipline has its own lifecycle model like other engineering disciplines, for a systematic and scientific development of the cloud known as cloud development lifecycle model.
62. List out the Phases of CDLC.
They are the six phases of CDLC.
- Reuirement and Analysis
- Architect
- Implementation and Integration
- Quality Assurance and Verification
- Deploy, Testing and
- Monitor, Migrate and
63. What is Cloud computing?
Cloud Computing can be defined as delivering computing power( CPU, RAM, Network Speeds, Storage OS software) a service over a network (usually on the internet) rather than physically having the computing resources at the customer location.
Cloud computing is the on-demand availability of computer system resources, especially data storage and computing power, without direct active management by the user. The term is generally used to describe data centers available to many users over the Internet.
Example: AWS, Azure, Google Cloud
64. What are the types in cloud services?
- Storage, backup, and data retrieval
- Creating and testing apps
- Analyzing data
- Audio and video streaming
- Delivering software on demand
65. 4. What is Public cloud?
The cloud infrastructure is provisioned for open use by the general public. It may be owned, managed, and operated by a business, academic, or government organization, or some combination of them. It exists on the premises of the cloud provider.
66. What did you meant by community cloud?
The cloud infrastructure is provisioned for exclusive use by a specific community of consumers from organizations that have shared concerns (e.g., mission, security requirements, policy, and compliance considerations). It may be owned, managed, and operated by one or more of the organizations in the community, a third party, or some combination of them, and it may exist on or off premises.
67. Note on Hybrid cloud.
The cloud infrastructure is a composition of two or more distinct cloud infrastructures (private, community, or public) that remain unique entities, but are bound together by standardized or proprietary technology that enables data and application portability (e.g., cloud bursting for load balancing between clouds).
68. What is mean by SaaS?
SaaS or software as a service is a software distribution model in which applications are hosted by a vendor or service provider and made available to customers over a network (internet). SaaS is becoming an increasingly prevalent delivery model as underlying technologies that supports Service Oriented Architecture (SOA) or Web Services. Through internet this service is available to users anywhere in the world.
69. What is mean by IaaS?
IaaS (Infrastructure As A Service) is one of the fundamental service model of cloud computing alongside PaaS( Platform as a Service). It provides access to computing resources in a virtualized environment “the cloud” on internet. It provides computing infrastructure like virtual server space, network connections, bandwidth, load balancers and IP addresses. The pool of hardware resource is extracted from multiple servers and networks usually distributed across numerous data centers. This provides redundancy and reliability to IaaS.
70. Write down note on PaaS?
Platform as a service, is referred as PaaS, it provides a platform and environment to allow developers to build applications and services. This service is hosted in the cloud and accessed by the users via internet.
71. What is mean by migrating in cloud computing?
Cloud migration is the process of moving digital business operations into the cloud. Cloud migration is sort of like a physical move, except it involves moving data, applications, and IT processes from some data centers to other data centers, instead of packing up and moving physical goods. Much like a move from a smaller office to a larger one, cloud migration requires quite a lot of preparation and advance work, but usually it ends up being worth the effort, resulting in cost savings and greater flexibility.
72. Why we use Migrating?
The general goal or benefit of any cloud migration is to host applications and data in the most effective IT environment possible, based on factors such as cost, performance and security.
For example, many organizations perform the migration of on-premises applications and data from their local data center to public cloud infrastructure to take advantage of benefits, such as greater elasticity, self-service provisioning, redundancy and a flexible, pay-per-use model.
73. What are the challenges of SaaS Paradigm?
- Controlling
- Visibility & flexibility
- Security and privacy
- High performance and Availability
- Integration and composition
- Standards
74. What is virtualization?
Virtualization is the key component of cloud computing for providing computing and storage services. Virtualization is the ability to run multiple operating systems on a single physical system and share the underlying hardware resources. It is the process by which one computer hosts the appearance of many computers.
75. What is Google app engine?
Google app engine is a SaaS provider which was introduced in 2008. It was quite unique cloud system compared to other systems. It provides platform to create applications. It provides infrastructure for hosting. Many high level services which need to be build are available when using an App Engine.
76. Define Cloud Supply chain.
Business-to-business exchanges have become a common form of procurement due to their advantages regarding flexibility (such as the ability of being able to quickly change business partners), although the mean procurement prices are generally higher compared to long-term contracts. On the other side, a lot of procurement managers still believe that long-term relationships are the key in the procurement process partly due to cost savings. Two main conflicting opinions on the optimal type of relationship – as it seems.
77. What is Transition Challenges?
The very concept of cloud represents a leap from traditional approach for IT to deliver mission critical services. With any leap comes the gap of risk and challenges to overcome. These challenges can be classified in five different categories, which are the five aspects of the enterprise cloud stages: build, develop, migrate, run, and consume
78. What is VLAN.
A virtual local area network (VLAN) is a logical group of workstations, servers and network devices that appear to be on the same LAN despite their geographical distribution. A VLAN allows a network of computers and users to communicate in a simulated environment as if they exist in a single LAN and are sharing a single broadcast and multicast domain. VLANs are implemented to achieve scalability, security and ease of network management and can quickly adapt to changes in network requirements and relocation of workstations and server nodes.
79. What is Virtualization Technology?
Virtualization in Cloud Computing is making a virtual platform of server operating system and storage devices. This will help the user by providing multiple machines at the same time it also allows sharing a single physical instance of resource or an application to multiple users. Cloud Virtualizations also manage the workload by transforming traditional computing and make it more scalable, economical and efficient.
80. List out types of Virtualization in Cloud Computing
- Types of Virtualization in Cloud Computing
- Operating System Virtualization
- Hardware Virtualization
- Server Virtualization
- Storage Virtualization
81. What is virtual machine monitor?
A Virtual Machine Monitor (VMM) is a software program that enables the creation, management and governance of virtual machines (VM) and manages the operation of a virtualized environment on top of a physical host machine.
82. What is Hypervisor and Xen Server?
The hypervisor isolates the operating systems from the primary host machine. The job of hypervisor is to cater to the needs of a guest operating system and to manage it efficiently Xen is a hypervisor that enables the simultaneous creation, execution and management of multiple virtual machines on one physical computer.
83. What is meant by anatomy of cloud computing?
Cloud computing is changing the way how hardware and software are provided for on-demand capacity fulfillment. Lately there are ways for on-demand servers, storage and CDNs. These are changing the way in developing web applications and make business decisions.
84. What is VM Management.
Virtualization management is software that interfaces with virtual environments and the underlying physical hardware to simplify resource administration, enhance data analyses, and streamline operations. Each virtualization management system is unique, but most feature an uncomplicated user interface, streamline the virtual machine (VM) creation process, monitor virtual environments, allocate resources, compile reports, and automatically enforce rules.
85. What is Leasing Model?
A new trend in the computer software industry that seems to be sticking around for good is the idea of cloud software, also occasionally known as open-source software. This model of software allows you and your team to run computer applications over the internet from anywhere so long as you have a subscription, rather than having one copy to install locally on a piece of hardware. Fidelity Capital is pleased to provide leasing services for cloud software for clients in a wide variety of industries. We are also capable of working with you to finance the training, installation and programming processes necessary to set up and master your new software.
86. What is Amazon EC2.
Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) cloud. Using Amazon EC2 eliminates your need to invest in hardware up front, so you can develop and deploy applications faster. You can use Amazon EC2 to launch as many or as few virtual servers as you need, configure security and networking, and manage storage. Amazon EC2 enables you to scale up or down to handle changes in requirements or spikes in popularity, reducing your need to forecast traffic.
87. What is Google App Engine?
Google App Engine (GAE) is a service for developing and hosting Web applications in Google's data centers, belonging to the platform as a service (PaaS) category of cloud computing. Web applications hosted on GAE are sandboxed and run across multiple servers for redundancy and allowing for scaling of resources according to the traffic requirements of the moment. App Engine automatically allocates additional resources to the servers to accommodate increased load.
88. What is meant by Microsoft Windows Azure?
Microsoft Azure is a platform as a service (PaaS) solution for building and hosting solutions using Microsoft’s products and in their data centers. It is a comprehensive suite of cloud products that allow users to create enterprise-class applications without having to build out their own infrastructure.
89. What is RVMS design.
Clients need to exchange numerous messages with required Web services to learn the current activity of resources and thus face significant overhead loss if most of the Web services prove ineffective. The novelty of
RVWS is that it combines dynamic attributes, stateful Web services (aware
of their past activity), stateful and dynamic WSDL documents, and brokering into a single, effective, service-based framework. Regardless of clients accessing services directly or discovering them via a broker, clients of RVWS-based distributed systems spend less time learning of services.
90. Note on CaaS.
the service-based Cluster as a Service (CaaS) Technology the exposure of a cluster via a Web service is intricate and comprises several services running on top of a physical cluster.
91. What is Job Monitoring?
Clients should be able to view the execution progress of their jobs. Even though the cluster is not the owned by
the client, the job is. Thus, it is the right of the client to see how the job is progressing and (if the client decides) terminate the job and remove it from the cluster.
92. What is LAN.
A local-area network (LAN) is a computer network that spans a relatively small area. Most often, a LAN is confined to a single room, building or group of buildings, however, one LAN can be connected to other LANs over any distance via telephone lines and radio waves.
93. What is WAN.
A system of LANs connected in this way is called a wide-area network (WAN). The difference between a LAN and WAN is that the wide-area network spans a relatively large geographical area. Typically, a WAN consists of two or more local-area networks (LANs) and are often connected through public networks.
94. What is Multimedia data security?
With the development of high-speed network technologies and large bandwidth connections, more and more multimedia data are being stored and shared in cyber space. The security requirements for video, audio, pictures, or images are different from other applications.
95. Note on Data privacy protection.
Existing methods enable direct execution of encrypted queries on encrypted datasets and allow users to ask identity queries over data of different encryptions. The ultimate goal of this research direction is to make queries in encrypted databases as efficient as possible while preventing adversaries from learning any useful knowledge about the data.
96. What is PDP.
Protocol based on the provable data procession (PDP) technology, which allows users to obtain a probabilistic proof from the storage service providers. Such a proof will be used as evidence that their data have been stored there.
97. Difference between Authentication and Authorization.
Authentication is the process of verifying a claim that a subject made to act on behalf of a given principal. Authentication attacks target a Web site’s method of validating the identity of a user, service, or application,
including Brute Force, Insufficient Authentication, and Weak Password Recovery Validation. Authorization is used to verify if an authenticated subject can perform a certain operation. Authentication must precede authorization. For example, only certain users are allowed to access specific content or functionality.
98. What is Logical Attacks.
Logical Attacks involve the exploitation of a Web application’s logic flow. Usually, a user’s action is completed in a multi-step process. The procedural workflow of the process is called application logic. A common Logical Attack is Denial of Service (DoS).
99. What is Customer information Protection.
Despite assurances by the public cloud leaders about security, few provide satisfactory disclosure or have long enough histories with their cloud offerings to provide warranties about the specific level of security put in place in their system. Security in-house is easier to maintain and to rely on.
100. What is Aneka Cloud platform?
Aneka [3] is a software platform and a framework for developing distributed applications on the cloud. It harnesses the computing resources of a heterogeneous network of workstations and servers or data centers on demand. Aneka provides developers with a rich set of APIs for transparently exploiting these resources by expressing the application logic with a variety of programming abstractions.
101. What are the resources in Aneka cloud?
Aneka identifies two types of private resources: static and dynamic resources. Static resources are constituted by existing physical workstations and servers that may be idle for a certain period of time. Their membership to the Aneka cloud is manually configured by administrators and does not change over time. Dynamic resources are mostly represented by virtual instances that join and leave the Aneka cloud and are controlled by resource pool managers that provision and release them when needed.
102. What is Workload Monitoring.
Workload monitoring becomes even more important in the case of hybrid clouds where a subset of resources is leased and resources can be dismissed if they are no longer necessary. Workload monitoring is an important feature for any distributed middleware, in the case of hybrid clouds, it is necessary to integrate this feature with scheduling policies that either directly or indirectly govern the management of virtual instances and their leases..
103. What is Resource Pool?
This is a container of virtual resources that mostly come from the same resource provider. A resource pool is in charge of managing the virtual resources it contains and eventually releasing them when they are no longer in use.
104. Note on CometCloud.
CometCloud is based on a decentralized coordination substrate, and it supports highly heterogeneous and dynamic cloud/grid infrastructures, integration of public/private clouds, and cloudbursts.
105. What is the goal of Autonomic Cloud bursting?
The goal of autonomic cloudbursts is to seamlessly and securely integrate private enterprise clouds and data centers with public utility clouds on-demand, to provide the abstraction of resizable computing capacity.
106. What is Load Dynamic.
Application workloads can vary significantly. This includes the number of application tasks as well the computational requirements of a task. The computational environment must dynamically grow (or shrink) in response to these dynamics while still maintaining strict deadlines.
107. What is Autonomic Cloudbriding?
Autonomic cloudbridging is meant to connect CometCloud and a virtual cloud which consists of public cloud, data center, and grid by the dynamic needs of the application. The clouds in the virtual cloud are heterogeneous and have
different types of resources and cost policies, besides, the performance of each cloud can change over time by the number of current users.
108. List out types of policies in cloudbridging.
Deadline-Based. When an application needs to be completed as soon as possible, assuming an adequate budget, the maximum required workers are allocated for the job.
Budget-Based. When a budget is enforced on the application, the number of workers allocated must ensure that the budget is not violated.
Workload-Based. When the application workload changes, the number of workers explicitly defined by the application is allocated or released.
109. What is Fault Tolerance.
Supporting fault-tolerance during runtime is critical to keep the application’s deadline. We support fault-tolerance in two ways which are in the infrastructure layer and in the programming layer.
110. What is Image Registration.
Nonlinear image registration [12] is the computationally expensive process to determine the mapping T between two images of the same object or similar objects acquired at different time, in different position or with different acquisition parameters or modalities.
111. What are the behaviors in Autonomic Cloudbursts?
VaR Using Workload-Based Policy: autonomic cloudburst is represented by the number of changing workers. When the application workload increases (or decreases), a predefined number of workers are added (or released), based on the application workload.
Image Registration Using Budget-Based Policy: The virtual cloud environment used for the experiments consisted of two research sites one public cloud (i.e.,AmazonWeb Service (AWS) EC2 [10]) and one private data center at Rutgers (i.e.,TW). The two research sites hosted their own image servers and job queues, and workers running on EC2 orTWaccess these image servers to get the image.
112. What is Basic CometCloud Operations.
Basic CometCloud Operations. In this experiment we evaluated the costs of basic tuple insertion and exact retrieval operations on the Rutgers cloud. Each machine was a peer node in the CometCloud overlay and the machines formed a single CometCloud peer group.
113. What is T-System.
T-Systems is one of Europe’s largest ICT service providers. Cloud computing is an opportunity for T-Systems to leverage its established concept for services delivered from data centers. Cloud computing entails the industrialization of IT production, enabling customers to use services and resources on demand. Business, however, cannot adopt wholesale the principles of cloud computing from the consumer world.
114. What are different cloud security challenges?
Cloud computing security challenges fall into three broad categories:
Data Protection: Securing your data both at rest and in transit
User Authentication: Limiting access to data and monitoring who accesses the data
Disaster and Data Breach: Contingency Planning
Data Protection
Implementing a cloud computing strategy means placing critical data in the hands of a third party, so ensuring the data remains secure both at rest (data residing on storage media) as well as when in transit is of paramount importance. Data needs to be encrypted at all times, with clearly defined roles when it comes to who will be managing the encryption keys. In most cases, the only way to truly ensure the confidentiality of encrypted data that resides on a cloud provider's storage servers is for the client to own and manage the data encryption keys.
User Authentication
Data resting in the cloud needs to be accessible only by those authorized to do so, making it critical to both restrict and monitor who will be accessing the company's data through the cloud. In order to ensure the integrity of user authentication, companies need to be able to view data access logs and audit trails to verify that only authorized users are accessing the data. These access logs and audit trails additionally need to be secured and maintained for as long as the company needs or legal purposes require. As with all cloud computing security challenges, it's the responsibility of the customer to ensure that the cloud provider has taken all necessary security measures to protect the customer's data and access to that data.
Contingency Planning
With the cloud serving as a single centralized repository for a company's mission-critical data, the risks of having that data compromised due to a data breach or temporarily made unavailable due to a natural disaster are real concerns. Much of the liability for the disruption of data in a cloud ultimately rests with the company whose mission-critical operations depend on that data, although liability can and should be negotiated in a contract with the services provider prior to commitment. A comprehensive security assessment from a neutral third party is strongly recommended as well.
Companies need to know how their data is being secured and what measures the service provider will be taking to ensure the integrity and availability of that data should the unexpected occur. Additionally, companies should also have contingency plans in place in the event their cloud provider fails or goes bankrupt. Can the data be easily retrieved and migrated to a new service provider or to a non-cloud strategy if this happens? And what happens to the data and the ability to access that data if the provider gets acquired by another company?
115. Explain virtual machine security in cloud computing.
2011 ended with the popularization of an idea: Bringing VMs (virtual machines) onto the cloud. Recent years have seen great advancements in both cloud computing and virtualization On one hand there is the ability to pool various resources to provide software-as-a-service, infrastructure-as-a-service, and platform-as-a-service. At its most basic, this is what describes cloud computing. On the other hand, we have virtual machines that provide agility, flexibility, and scalability to the cloud resources by allowing the vendors to copy, move, and manipulate their VMs at will. The term virtual machine essentially describes sharing the resources of one single physical computer into various computers within itself. VMware and virtual boxes are very commonly used virtual systems on desktops. Cloud computing effectively stands for many computers pretending to be one computing environment. Obviously, cloud computing would have many virtualized systems to maximize resources.
Keeping this information in mind, we can now look into the security issues that arise within a cloud-computing scenario. As more and more organizations follow the “Into the Cloud” concept, malicious hackers keep finding ways to get their hands on valuable information by manipulating safeguards and breaching the security layers (if any) of cloud environments. One issue is that the cloud-computing scenario is not as transparent as it claims to be. The service user has no clue about how his information is processed and stored. In addition, the service user cannot directly control the flow of data/information storage and processing. The service provider usually is not aware of the details of the service running in his or her environment. Thus, possible attacks on the cloud-computing environment can be classified in to:
Resource attacks:
These kinds of attacks include manipulating the available resources into mounting a large-scale botnet attack. These kinds of attacks target either cloud providers or service providers.
Data attacks:
These kinds of attacks include unauthorized modification of sensitive data at nodes, performing configuration changes to enable a sniffing attack via a specific device etc. These attacks are focused on cloud providers, service providers, and also on service users.
Denial of Service attacks:
The creation of a new virtual machine is not a difficult task, and thus, creating rogue VMs and allocating huge spaces for them can lead to a Denial of Service attack for service providers when they opt to create a new VM on the cloud. This kind of attack is generally called virtual machine sprawling.
Backdoor:
Another threat to a virtual environment empowered by cloud computing is the use of backdoor VMs that leak sensitive information and can destroy data privacy.
Having virtual machines would indirectly allow anyone with access to the host disk files of the VM to take a snapshot or illegal copy of the whole System. This can lead to corporate espionage and piracy of legitimate products.
With so many obvious security issues (and a lot more can be added to the list), we need to enumerate some steps that can be used to secure virtualization in cloud computing.
The most neglected aspect of any organization is its physical security. An advanced social engineer can take advantage of weak physical-security policies an organization has put in place. Thus, it’s important to have a consistent, context-aware security policy when it comes to controlling access to a data center. Traffic between the virtual machines needs to be monitored closely by using at least a few standard monitoring tools.
After thoroughly enhancing physical security, it’s time to check security on the inside. A well-configured gateway should be able to enforce security when any virtual machine is reconfigured, migrated, or added. This will help prevent VM sprawls and rogue VMs. Another approach that might help enhance internal security is the use of third-party validation checks, performed in accordance with security standards.
Checking virtual systems for integrity increases the capabilities for monitoring and securing environments. One of the primary focuses of this integrity check should be the seamless integration of existing virtual systems like VMware and virtual box. This would lead to file integrity checking and increased protection against data losses within VMs. Involving agentless anti-malware intrusion detection and prevention in one single virtual appliance (unlike isolated point security solutions) would contribute greatly towards VM integrity checks. This will greatly reduce operational overhead while adding zero footprints.
A server on a cloud may be used to deploy web applications, and in this scenario, an OWASP top-ten vulnerability check will have to be performed. Data on a cloud should be encrypted with suitable encryption and data-protection algorithms. Using these algorithms, we can check the integrity of the user profile or system profile trying to access disk files on the VMs. Profiles lacking security protections can be considered infected by malware. Working with a system ratio of one user to one machine would also greatly reduce risks in virtual computing platforms. To enhance the security aspect even more, after a particular environment is used, it’s best to sanitize the system (reload) and destroy all the residual data. Using incoming IP addresses to determine scope on Windows-based machines, and using SSH configuration settings on Linux machines, will help maintain a secure one-to-one connection.
116. What is provisioning in cloud computing. How Virtual machine can be provision in Azure cloud?
1. Provisioning VMM
VMM 2012 R2 must be deployed in order to provision VM’s VMM requirements can be found at this link.
VMM step by step deployment guide can be found here.
2. Configure VMM with Hosts
Configure Host Groups as per your resources and Add Hosts to the appropriate host groups. Information can be found here.
3. Configure VMM Networking
Deploy Logical Networks and IP Pools / Network Sites, Deploy VLANS / NVGRE where appropriate and Deploy Virtual Networks. Information can be found at this link.
4. Configure VMM Templates
Configure Hardware Profiles, Configure Guest OS Profile and Deploy VMM Templates.
5. Configure SPF
Configure Service Account, Deploy SPF, Ensure SPF Account is a VMM Admin! And is a member off all the appropriate groups
117. List and explain three service model of cloud computing.
Following are the three service model of cloud computing:
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Infrastructure as a Service (IaaS)
1. Software as a Service (SaaS):
The capability provided to the consumer is to use the provider’s applications running on a cloud infrastructure2. The applications are accessible from various client devices through either a thin client interface, such as a web browser (e.g., web-based email), or a program interface. The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, storage, or even individual application capabilities, with the possible exception of limited user-specific application configuration settings.
2. Platform as a Service (PaaS):
The capability provided to the consumer is to deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools supported by the provider.3 The consumer does not manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
3. Infrastructure as a Service (IaaS):
The capability provided to the consumer is to provision processing, storage, networks, and other fundamental computing resources where the consumer is able to deploy and run arbitrary software, which can include operating systems and applications. The consumer does not manage or control the underlying cloud infrastructure but has control over operating systems, storage, and deployed applications; and possibly limited control of select networking components (e.g., host firewalls).
118. Explain Hadoop Map Reduce job execution with the help of neat diagram.
MapReduce is a processing technique and a program model for distributed computing based on java. The MapReduce algorithm contains two important tasks, namely Map and Reduce. The map takes a set of data and converts it into another set of data, where individual elements are broken down into tuples (key/value pairs). Secondly, reduce task, which takes the output from a map as an input and combines those data tuples into a smaller set of tuples. As the sequence of the name MapReduce implies, the reduce task is always performed after the map job.
The major advantage of MapReduce is that it is easy to scale data processing over multiple computing nodes. Under the MapReduce model, the data processing primitives are called mappers and reducers. Decomposing a data processing application into mappers and reducers is sometimes nontrivial. But, once we write an application in the MapReduce form, scaling the application to run over hundreds, thousands, or even tens of thousands of machines in a cluster is merely a configuration change. This simple scalability is what has attracted many programmers to use the MapReduce model.
119. Explain Identity Access Management?
Identity and access management (IAM) is a framework for business processes that facilitates the management of electronic or digital identities. The framework includes the organizational policies for managing digital identity as well as the technologies needed to support identity management.
With IAM technologies, IT managers can control user access to critical information within their organizations. Identity and access management products offer role-based access control, which lets system administrators regulate access to systems or networks based on the roles of individual users within the enterprise.
In this context, access is the ability of an individual user to perform a specific task, such as view, create or modify a file. Roles are defined according to job competency, authority, and responsibility within the enterprise.
Systems used for identity and access management include single sign-on systems, multifactor authentication, and access management. These technologies also provide the ability to securely store identity and profile data as well as data governance functions to ensure that only data that is necessary and relevant is shared.
These products can be deployed on-premises, provided by a third-party vendor via a cloud-based subscription model, or deployed in a hybrid cloud.
120. Explain DAAS and NAAS?
DaaS – Data as a Service :
Since you can get software as a service it seems reasonable to think you should be able to get data as a service as well. DaaS providers collect and make available data on a wide range of topics, from economics and finance to social media to climate science. Some DaaS providers offer application programming interfaces (APIs) can provide on demand access to data when bulk downloads are not sufficient.
Network as a Service (Naas):
Network as a Service (NaaS) is sometimes listed as a separate Cloud provider along with Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). This factors out networking, firewalls, related security, etc. from IaaS.
NaaS can include flexible and extended Virtual Private Network (VPN), bandwidth on demand, custom routing, multicast protocols, security firewall, intrustions detection and prevention, Wide Area Network (WAN), content monitoring and filtering, and antivirus. There is no standard specification as to what is included in NaaS. Implementations vary.
121. What do you mean by cloud contract? Explain in details
"Cloud computing” means accessing computer capacity and programming facilities online or "in the cloud". Customers are spared the expense of purchasing, installing, and maintaining hardware and software locally.
Customers can easily expand or reduce IT capacity according to their needs. This essentially transforms computing into an on-demand utility. An added boon is that data can be accessed and processed from anywhere via the Internet.
Unfortunately, consumers and companies are often reluctant to take advantage of cloud computing services either because contracts are unclear or are unbalanced in favor of service providers. Existing regulations and national contract laws may not always be adapted to cloud-based services. The protection of personal data in a cloud environment also needs to be addressed. Adapting contract law is therefore an important part of the Commission’s cloud computing strategy.
Safe and fair contracts for cloud computing
The Commission is working towards cloud computing contracts that contain safe and fair terms and conditions for all parties. On 18 June 2013, the Commission set up a group of experts to define safe and fair conditions and identify best practices for cloud computing contracts. The Commission has also launched a comparative study on cloud computing contracts to supplement the work of the Expert Group.
122. Justify cloud security challenges in detail.
Cloud computing security challenges fall into three broad categories:
Data Protection: Securing your data both at rest and in transit
User Authentication: Limiting access to data and monitoring who accesses the data
Disaster and Data Breach: Contingency Planning
Data Protection
Implementing a cloud computing strategy means placing critical data in the hands of a third party, so ensuring the data remains secure both at rest (data residing on storage media) as well as when in transit is of paramount importance. Data needs to be encrypted at all times, with clearly defined roles when it comes to who will be managing the encryption keys. In most cases, the only way to truly ensure the confidentiality of encrypted data that resides on a cloud provider's storage servers is for the client to own and manage the data encryption keys.
User Authentication
Data resting in the cloud needs to be accessible only by those authorized to do so, making it critical to both restrict and monitor who will be accessing the company's data through the cloud. In order to ensure the integrity of user authentication, companies need to be able to view data access logs and audit trails to verify that only authorized users are accessing the data. These access logs and audit trails additionally need to be secured and maintained for as long as the company needs or legal purposes require. As with all cloud computing security challenges, it's the responsibility of the customer to ensure that the cloud provider has taken all necessary security measures to protect the customer's data and access to that data.
Contingency Planning
With the cloud serving as a single centralized repository for a company's mission-critical data, the risks of having that data compromised due to a data breach or temporarily made unavailable due to a natural disaster are real concerns. Much of the liability for the disruption of data in a cloud ultimately rests with the company whose mission-critical operations depend on that data, although liability can and should be negotiated in a contract with the services provider prior to commitment. A comprehensive security assessment from a neutral third-party is strongly recommended as well.
Companies need to know how their data is being secured and what measures the service provider will be taking to ensure the integrity and availability of that data should the unexpected occur. Additionally, companies should also have contingency plans in place in the event their cloud provider fails or goes bankrupt. Can the data be easily retrieved and migrated to a new service provider or to a non-cloud strategy if this happens? And what happens to the data and the ability to access that data if the provider gets acquired by another company?
123. Write short note on Infrastructure security in cloud Computing.
Cloud infrastructure refers to a virtual infrastructure that is delivered or accessed via a network or the internet. This usually refers to the on-demand services or products being delivered through the model known as infrastructure as a service (IaaS), a basic delivery model of cloud computing. This is a highly automated offering where computing resources complemented with storage and networking services are provided to the user. In essence, users have an IT infrastructure that they can use for themselves without ever having to pay for the construction of a physical infrastructure.
Cloud Infrastructure
Cloud infrastructure is one of the most basic products delivered by cloud computing services through the IaaS model. Through the service, users can create their own IT infrastructure complete with processing, storage, and networking fabric resources that can be configured in any way, just as with a physical data center enterprise infrastructure. In most cases, this provides more flexibility in infrastructure design, as it can be easily set up, replaced, or deleted as opposed to a physical one, which requires manual work, especially when network connectivity needs to be modified or reworked.
Cloud infrastructure includes virtual machines and components such as:
- Virtual servers
- Virtual PCs
- Virtual network switches/hubs/routers
- Virtual memory
- Virtual storage clusters
All of these elements combine to create a full IT infrastructure that works just as well as a physical one, but boasts such benefits as:
- Low barrier to entry
- Low capital requirement
- The low total cost of ownership
- Flexibility
- Scalability
124. Explain Identity Access management.
Security in any system involves primarily ensuring that the right entity gets access to only the authorized data in the authorized format at an authorized time and from an authorized location. Identity and access management (IAM) is of prime importance in this regard as far as Indian businesses are concerned. This effort should be complemented by the maintenance of audit trails for the entire chain of events from users logging in to the system, getting authenticated, and accessing files or running applications as authorized.
Even in a closed, internal environment with a well-established “trust boundary”, managing an Active Directory server, an LDAP server or other alternatives is no easy task. And for IAM in the cloud, the challenges and problems are magnified many times over. An Indian organization moving to the cloud could typically have applications hosted on the cloud and a database maintained internally, with users logging on and getting authenticated internally on a local Active Directory server. Just imagine attempting single sign-on (SSO) functionality in such a scenario! Cloud delivery models comprising mainly SaaS, PaaS and IaaS require seamless integration between cloud services and the organization’s IAM practices, processes, and procedures, in a scalable, effective and efficient manner.
Identity provisioning challenges
The biggest challenge for cloud services is identity provisioning. This involves secure and timely management of onboarding (provisioning) and off-boarding (de-provisioning) of users in the cloud.
When a user has successfully authenticated to the cloud, a portion of the system resources in terms of CPU cycles, memory, storage, and network bandwidth is allocated. Depending on the capacity identified for the system, these resources are made available on the system even if no users have been logged on. Based on projected capacity requirements, cloud architects may decide on a 1:4 scale or even 1:2 or lower ratios. If projections are exceeded and more users log on, the system performance may be affected drastically. Simultaneously, adequate measures need to be in place to ensure that as usage of the cloud drops, system resources are made available for other objectives; else they will remain unused and constitute a dead investment.
125. What are the steps for creating a simple cloud application using Azure. Explain with the help of an example.
- Installation of Windows Azure SDK
- Developing First Windows Azure Web Application
- Deploying application locally in Development Storage Fabric
- Registration for free Windows Azure Trial
- Deployment of the Application in Microsoft Data Center
I will start fresh with installation of Windows Azure SDK and I will conclude this post with deployment of simple application in Windows Azure Hosted Service. I am not going to create a complex application since purpose of this post is to walkthrough with all the steps from installation, development, debugging to deployment. In further post we will get into more complex applications. Proceed through rest of the post to create your first application for Windows Azure.