Which of the following is a primary characteristic of 'Auto-scaling'?
- Automatically adding or removing compute instances based on defined triggers.
- A cloud that automatically moves its physical location based on the season.
- Manually adjusting the server's RAM every morning.
- A system that automatically re-writes the application's code to be more efficient.
Explanation: Auto-scaling ensures that an application has exactly the resources it needs to handle current traffic, improving performance and reducing cost.
With reference to 'Disaster Recovery' in the cloud, what does 'RPO' (Recovery Point Objective) represent?
- The maximum duration for which a service can remain offline after a failure.
- The maximum amount of data loss measured in time that an organization can tolerate.
- The cost associated with restoring a single gigabyte of data from a cold backup.
- The physical distance required between the primary data center and the backup site.
Explanation: RPO defines how far back in time a backup must go to restore data (e.g., an RPO of 1 hour means no more than 1 hour of data can be lost).
Which of the following describes a 'Hybrid Cloud' deployment model?
- A mix of public and private cloud environments.
- A server located in a moving vehicle or aircraft.
- A complex infrastructure that combines traditional on-premise hardware with satellite-based internet to provide services in remote areas.
- A cloud shared by multiple competing companies.
Explanation: Hybrid cloud allows data and applications to be shared between private and public clouds, providing greater flexibility and optimization.
What does 'Sovereign Cloud' primarily address?
- Using renewable energy to power data centers.
- Data residency and compliance with local laws.
- A cloud infrastructure that is legally owned by a reigning monarch and is exempt from all national and international data protection and privacy regulations.
- High availability across all seven continents.
Explanation: Sovereign clouds ensure that data is stored and processed within a specific jurisdiction, complying with local data sovereignty and privacy laws.
Which of the following is a core benefit of 'Microservices' architecture in the cloud?
- It ensures that the entire application is written in a single programming language to avoid any compatibility issues between different software modules.
- It makes the application easier to deploy as one file.
- It allows individual components to scale independently.
- It reduces the total number of APIs required.
Explanation: Microservices break an application into small, independent services, allowing teams to scale and update parts of the system without affecting the whole.
Consider the following statements regarding 'Cloud Data Sovereignty':
1. It is the principle that data is subject to the laws of the country where it is physically located.
2. The US CLOUD Act allows US law enforcement to access data stored abroad by US companies.
3. Data Residency refers only to the legal jurisdiction, regardless of physical location.
Which of the statements given above is/are correct?
- 1, 2 and 3
- 1 and 2 only
- 1 only
- 2 and 3 only
Explanation: Statement 3 is incorrect; Data Residency refers specifically to the physical/geographical location of the data, while Sovereignty refers to the legal jurisdiction.
In cloud computing, what is 'Fog Computing'?
- An intermediate layer between the edge and the cloud.
- A cloud service that only operates in high humidity.
- A cooling technology that uses artificial fog to maintain the temperature of high-performance computing clusters in desert environments.
- A method of obscuring data to prevent hacking.
Explanation: Fog computing extends cloud computing to the edge of an enterprise's network, reducing the data sent to the cloud for processing.
The 'Cold Start' problem is a specific challenge associated with:
- Traditional on-premise servers.
- Public cloud data centers in winter.
- Serverless (FaaS) functions.
- A phenomenon where a cloud database takes several hours to become operational after being shut down for more than thirty consecutive days.
Explanation: A cold start happens when a serverless function is triggered after being idle, causing a delay while the provider initializes a new container.
The 'Cold Start' problem is a performance challenge most commonly associated with which cloud technology?
- Traditional Infrastructure as a Service (IaaS) virtual machines.
- Serverless (Function as a Service) functions.
- Hybrid cloud connections via satellite links.
- Hard disk drives used in archival object storage.
Explanation: A 'cold start' occurs in serverless computing when a function is triggered after a period of inactivity, requiring the provider to initialize a new environment, causing delay.
What is 'Object Storage' (like Amazon S3) best suited for?
- Executing real-time operating system commands.
- Running high-performance relational databases.
- Storing unstructured data like photos and videos.
- A specialized storage method that only allows for the archival of physical objects that have been scanned into a three-dimensional digital format.
Explanation: Object storage manages data as objects (including metadata and a unique ID) and is highly scalable for unstructured data like media files.
The term 'Cloud-Native' refers to applications that are:
- Owned by the government of the user's country.
- A software suite that is physically pre-installed on every computer manufactured within the borders of a specific nation to promote digital sovereignty.
- Specifically designed for cloud environments.
- Migrated from on-premise to the cloud exactly as is.
Explanation: Cloud-native apps are built from the ground up to leverage cloud features like microservices, containers, and automated scaling.
The 'Shared Responsibility Model' in cloud security typically dictates that:
- Security is shared between provider and user.
- The customer is responsible for data security.
- The provider is responsible for everything.
- A third-party government agency is legally required to monitor every single packet of data that moves between the user and the cloud server.
Explanation: Providers usually secure the 'infrastructure' while customers are responsible for securing their 'data' and 'access management' within that infrastructure.
In 'Blue-Green Deployment' used in cloud-native apps, the 'Green' environment represents:
- The new version of the application being tested before going live.
- The version of the app that uses the least amount of electricity.
- A backup system that is only activated when the main environment fails.
- The legacy version of the application that is being retired.
Explanation: In this model, two identical environments are used. 'Blue' is the current live version, while 'Green' is the new version being prepared for release.
Consider the following statements regarding 'Containers' (e.g., Docker) in cloud infrastructure:
1. They are lighter than Virtual Machines because they share the host's operating system kernel.
2. Each container requires its own dedicated guest operating system to function correctly.
3. They are highly portable, allowing applications to run consistently across different cloud environments.
Which of the statements given above is/are correct?
- 1 and 3 only
- 1 only
- 2 and 3 only
- 1, 2 and 3
Explanation: Statement 2 is incorrect; unlike Virtual Machines, containers do not require a full guest OS, which is why they are much lighter and faster.
Which NIST characteristic of cloud computing allows users to provision resources without human interaction from the provider?
- On-demand self-service.
- Resource pooling.
- Measured service.
- Broad network access.
Explanation: On-demand self-service allows users to unilaterally provision computing capabilities, such as server time and network storage, as needed.
The Government of India's 'MeghRaj' initiative is primarily aimed at:
- Providing free Wi-Fi to all rural households.
- Creating a localized GI Cloud for government use.
- Establishing a massive network of physical weather stations to predict monsoon patterns using advanced satellite telemetry and ground sensors.
- Banning all foreign cloud service providers.
Explanation: MeghRaj is the GI Cloud initiative by the Government of India to speed up delivery of e-services while optimizing ICT spending.
Which of the following is an example of 'SaaS'?
- Google Workspace
- Docker Desktop
- Amazon EC2
- Microsoft Azure SQL
Explanation: Google Workspace (formerly G Suite) is Software as a Service, where the application is accessed via a web browser and managed entirely by the provider.
What is 'Vertical Scaling' (Scaling Up) in a cloud environment?
- Increasing the CPU or RAM of an existing server.
- A process of physically stacking server racks on top of each other to save floor space in a densely populated urban data center facility.
- Adding more servers to a network cluster.
- Moving data from a lower to a higher floor in a center.
Explanation: Vertical scaling means adding more power (RAM, CPU) to your existing machine, whereas horizontal scaling (scaling out) means adding more machines.
In 'Blue-Green Deployment', what is the purpose of the 'Green' environment?
- It is the legacy version that is about to be deleted.
- It is the environment for eco-friendly computing.
- It is the new version being tested before going live.
- It is a specialized backup system that only activates when the main blue environment is physically destroyed by a catastrophic event like a fire.
Explanation: Blue-Green deployment involves two identical environments; one (Blue) handles live traffic while the other (Green) is used for testing new releases.
In 'Microservices' architecture, applications are built as a collection of small, independent services. How does cloud computing primarily support this?
- By ensuring that the entire application is stored on a single physical hard drive.
- By forcing all services to be written in the same programming language.
- By allowing every individual service to scale independently of the others.
- By reducing the total number of APIs required to run a complex application.
Explanation: The cloud's modularity and elasticity are perfect for microservices, allowing teams to update or scale one part of an app without affecting the whole.
What is the primary objective of 'Fog Computing' in relation to Cloud and Edge computing?
- To obscure data using artificial intelligence to prevent government surveillance.
- To cool the data centers using artificial mist to reduce energy consumption.
- To provide a backup cloud that only activates during cloudy or rainy weather.
- To provide an intermediate layer that brings processing closer to the edge network.
Explanation: Fog computing acts as a bridge between the cloud and the edge, allowing for localized processing, storage, and networking.
In 'Auto-scaling', what is a 'Cool-down Period'?
- A mandatory forty-eight hour period where all cloud services are suspended to perform physical maintenance on the cooling systems of the data center.
- The time the server takes to physically cool down.
- A pause between scaling actions to allow stabilization.
- The time a user must wait after their trial expires.
Explanation: A cool-down period prevents the auto-scaler from triggering additional scaling actions before the previous ones have taken effect and stabilized.
What is the primary function of a 'Type 1 Hypervisor' in cloud infrastructure?
- Providing a sophisticated graphical interface for end-users to manage their personal cloud storage and file sharing.
- Operating as an application within a traditional OS.
- Running directly on the host's physical hardware.
- Managing the billing and subscription cycles of users.
Explanation: Type 1 (bare-metal) hypervisors run directly on hardware to manage guest OSs, making them more efficient and secure for enterprise cloud environments.
With reference to 'Edge Computing', consider the following statements:
1. It centralizes all data processing into massive regional data centers to improve security.
2. It is characterized by low latency, making it essential for autonomous vehicles and IoT applications.
3. It reduces the bandwidth load on the core network by processing data locally.
Which of the statements given above are correct?
- 1 and 2 only
- 1 and 3 only
- 1, 2 and 3
- 2 and 3 only
Explanation: Statement 1 is incorrect; Edge computing is the opposite of centralization—it moves processing away from the center to the 'edge' of the network.
What does the term 'Cloud Elasticity' specifically refer to in a technical context?
- The physical flexibility of the fiber optic cables connecting the data centers.
- The ability to transfer data between different cloud vendors without any downtime.
- The legal framework allowing for data to move across international borders.
- The dynamic scaling of resources up or down based on real-time demand.
Explanation: Elasticity allows a cloud system to automatically provision and de-provision resources to match the workload, ensuring cost-efficiency and performance.
In cloud terminology, 'Vendor Lock-in' refers to:
- The inability of a provider to accept new customers due to capacity limits.
- The high cost of maintaining a physical lock on server racks.
- A security feature that prevents a user from logging in from multiple devices.
- The difficulty of migrating data or services from one provider to another.
Explanation: Vendor lock-in happens when a customer becomes dependent on a provider's proprietary APIs, formats, or services, making a move elsewhere very costly.
With reference to the Digital Personal Data Protection (DPDP) Act, 2023, consider the following statements regarding cloud data:
1. It mandates strict hard data localization for all personal data, prohibiting any cross-border transfers.
2. The Central Government has the power to notify 'blacklisted' countries where data cannot be transferred.
3. It distinguishes between a Data Fiduciary and a Data Processor.
Which of the statements given above is/are correct?
- 3 only
- 2 and 3 only
- 1 and 2 only
- 2 only
Explanation: Statement 1 is incorrect; the DPDPA 2023 allows for cross-border data flow except to countries specifically blacklisted/notified by the government.
What does 'Serverless Computing' (FaaS) imply for the developer?
- They must manually patch the server's OS.
- There are no physical servers involved at all.
- A specialized programming environment where the developer is not allowed to use any functions or variables that require memory allocation.
- Infrastructure management is hidden from them.
Explanation: Serverless doesn't mean there are no servers; it means the cloud provider manages the server allocation and scaling, so the developer only writes code.
Consider the following statements regarding 'Data Egress' in cloud billing:
1. Cloud providers typically charge for data entering the cloud from an external source.
2. Egress charges refer to the cost of moving data out of the cloud provider's network.
3. High egress fees can contribute significantly to vendor lock-in.
Which of the statements given above is/are correct?
- 2 and 3 only
- 1, 2 and 3
- 1 and 2 only
- 2 only
Explanation: Statement 1 is incorrect; data ingress (moving data in) is usually free. Egress (moving data out) is what providers typically charge for.
What is the primary advantage of 'Containers' (e.g., Docker) over traditional Virtual Machines?
- They are physically more difficult to hack.
- They share the host OS kernel and are lighter.
- They provide a permanent physical backup of all data on a specialized encrypted disc that is stored in a secure offshore government facility.
- They include a full guest operating system.
Explanation: Containers share the host OS kernel, making them much smaller and faster to start than VMs, which require a full OS for every instance.
Which cloud service model provides the highest level of control over the underlying hardware and operating systems?
- PaaS
- IaaS
- SaaS
- A comprehensive managed database service that handles all backend configurations automatically for the user.
Explanation: Infrastructure as a Service (IaaS) provides virtualized computing resources, giving users control over OS, storage, and deployed applications, unlike PaaS or SaaS.
In cloud terminology, 'Vendor Lock-in' refers to the difficulty of:
- Accessing the server during a power outage.
- Hiring developers who know a specific language.
- Switching from one cloud provider to another.
- Physically locking the server racks in a data center to prevent unauthorized personnel from touching the hardware components.
Explanation: Vendor lock-in occurs when a customer becomes dependent on a provider's proprietary tools and APIs, making migration expensive and complex.
What is 'Multi-tenancy' in cloud computing?
- A legal arrangement where a single company is allowed to rent out its excess cloud capacity to other smaller firms in the same geographical area.
- Multiple users sharing the same physical resources.
- Using multiple cloud providers for one application.
- One user having multiple cloud accounts.
Explanation: Multi-tenancy is an architecture where a single instance of software or hardware serves multiple customers (tenants) while keeping data isolated.
The 'Shared Responsibility Model' in cloud security typically dictates that the Cloud Service Provider (CSP) is responsible for:
- Managing the user's identity and access management (IAM) policies.
- Encrypting all sensitive data stored within the user's application.
- Physical security of the data centers and the underlying host hardware.
- Determining the legal jurisdiction of the data based on the user's physical location.
Explanation: Security 'of' the cloud (infrastructure, hardware, facilities) is the CSP's job. Security 'in' the cloud (data, access, encryption) is the user's responsibility.
Which of the following is a key characteristic of a 'Community Cloud' deployment model?
- It is hosted on a mobile platform to serve remote rural communities.
- It is a cloud that uses peer-to-peer computing from citizens' home computers.
- It is shared by organizations that have similar requirements (e.g., security, compliance).
- It is a free cloud service provided by non-profit organizations to the general public.
Explanation: A community cloud is a collaborative effort where infrastructure is shared by several organizations from a specific community (like banking or healthcare).
In the context of Disaster Recovery, what does 'RPO' (Recovery Point Objective) measure?
- The time it takes to restore a service.
- The maximum tolerable data loss (in time).
- The cost of the backup software license.
- The physical distance between the primary data center and the backup facility to ensure that a single natural disaster cannot destroy both.
Explanation: RPO defines the maximum age of files that must be recovered from backup storage for normal operations to resume after a disaster.
With reference to the 'CAP Theorem' in distributed cloud systems, which three properties are involved?
- Capacity, Anonymity, Privacy
- Connectivity, Authenticity, Portability
- Consistency, Availability, Partition Tolerance
- Cost, Accessibility, Performance
Explanation: The CAP theorem states that a distributed system can only provide two out of these three guarantees at the same time.
Which of the following is a 'Public Cloud' characteristic?
- Hardware is exclusively dedicated to one organization.
- Users must physically own the data center building.
- Services are owned and operated by a third-party.
- A deployment model where the government provides free cloud storage to every citizen as a fundamental right under the national digital constitution.
Explanation: In a public cloud, the provider (like AWS, Google, or Azure) owns the hardware and resources, which are shared by multiple organizations.
Which of the following best describes 'VPC' (Virtual Private Cloud) in a public cloud environment?
- A specialized encrypted laptop provided by cloud companies to access their sensitive databases.
- An isolated, private network space logically defined within a public cloud provider's infrastructure.
- A government-owned cloud that is inaccessible to any private corporation or startup.
- A physical server rack that is locked and dedicated to a single customer in a data center.
Explanation: A VPC provides logical isolation, allowing a user to define their own subnets and IP ranges while still using the shared physical hardware of a public cloud.
Which cloud model is specifically built for a group of organizations with shared concerns (e.g., security, compliance)?
- Public Cloud
- Multi-Cloud
- Community Cloud
- Hybrid Cloud
Explanation: A community cloud is shared by several organizations with similar requirements, such as a group of banks or government agencies.
The term 'Sovereign Cloud' is primarily concerned with:
- High-speed connectivity between different continents.
- Ensuring data residency and compliance with a specific nation's laws.
- Providing free cloud services to the royal families of specific nations.
- A cloud that is physically immune to any form of electromagnetic pulse.
Explanation: A sovereign cloud ensures that data is stored and processed within a specific jurisdiction, following local laws on data protection and privacy.
The term 'Cloud Federation' refers to:
- The merger of major cloud providers into a single global entity.
- Interoperability and resource sharing between different cloud providers.
- The constitutional right of states to manage their own cloud databases.
- A centralized government body that regulates the pricing of all public cloud services.
Explanation: Cloud Federation allows different cloud environments to collaborate, allowing a workload to move or scale across different provider platforms.
What is the primary purpose of an 'API Gateway' in a cloud-native application?
- To encrypt the hard drives of the cloud servers.
- To act as a physical entrance to the data center.
- To manage and route requests to various microservices.
- To provide a single point of contact for the user to call a human technician in case the automated cloud services fail to function correctly.
Explanation: An API gateway acts as a reverse proxy to accept all API calls, aggregate the services required to fulfill them, and return the appropriate result.
What is 'Data Egress' in cloud billing?
- A specialized tax imposed by the government on the deletion of data that has been stored in a public cloud for more than five consecutive years.
- The cost of moving data into the cloud.
- The cost of encrypting data while at rest.
- The cost of moving data out of the cloud.
Explanation: Most cloud providers offer free data ingress (data in) but charge for data egress (data out) to discourage users from leaving their platform.
Consider the following statements regarding 'FinOps' (Cloud Financial Management):
1. It is a cultural practice that brings financial accountability to the variable spend model of the cloud.
2. It aims to eliminate all cloud spending to maximize corporate profit.
3. It involves cross-functional collaboration between engineering, finance, and business teams.
Which of the statements given above is/are correct?
- 2 and 3 only
- 1, 2 and 3
- 1 only
- 1 and 3 only
Explanation: Statement 2 is incorrect; FinOps is not about spending 'zero', but about aligning cloud spending with business value and optimizing investment.
What is the role of an 'API Gateway' in a cloud-native architecture?
- To translate the cloud's code into a language that the user can understand.
- To provide a secure portal for the cloud provider's employees to access the building.
- To act as a single entry point that routes requests to various back-end microservices.
- To provide a physical firewall for the data center's main entrance.
Explanation: The API Gateway manages the interface between the user and the backend, handling routing, security, and rate limiting for API calls.
What is 'Shadow IT' in an organizational cloud context?
- A backup cloud that mirrors the primary cloud in real-time shadows.
- Using IT systems or cloud services without explicit organizational approval.
- Using cloud services after the sun sets to save on energy costs.
- A secret government project that uses the cloud to track the move of criminals.
Explanation: Shadow IT happens when employees use personal accounts or unauthorized SaaS apps to do their work, often creating security risks.
With reference to the 'MeghRaj' initiative of the Government of India, consider the following statements:
1. It is a GI Cloud initiative aimed at optimizing ICT spending while speeding up the delivery of e-services.
2. The National Informatics Centre (NIC) serves as the primary provider for this unified infrastructure.
3. It is exclusively limited to Central Government departments to ensure data security.
Which of the statements given above is/are correct?
- 1, 2 and 3
- 1 and 3 only
- 2 and 3 only
- 1 and 2 only
Explanation: Statement 3 is incorrect because MeghRaj is designed for use by both Central and State Government departments to ensure a harmonized digital architecture across India.
In cloud computing, the term 'Elasticity' refers to the ability to:
- Automatically scale resources up or down.
- Encrypt data using flexible length keys.
- Physically stretch the fiber optic cables to accommodate higher bandwidth without increasing the total cost of the physical infrastructure.
- Store data in multiple geographical regions.
Explanation: Elasticity allows a cloud provider to dynamically allocate or de-provision resources in real-time based on current demand.
With reference to the 'Hybrid Cloud', consider the following statements:
1. It allows data and applications to move between a private and a public cloud.
2. It is primarily used by organizations to handle 'Cloud Bursting' during peak traffic.
3. It eliminates the need for any on-premise infrastructure.
- 1 and 2 only
- 2 and 3 only
- 1 only
- 1, 2 and 3
Explanation: Statement 3 is incorrect; a Hybrid Cloud by definition often includes on-premise (private) infrastructure combined with public cloud resources.
What is 'Edge Computing' in relation to Cloud Computing?
- Processing data closer to the source (IoT).
- Storing data on the edge of a physical disc.
- A method of increasing the physical sharp edges of a server rack to improve the cooling and airflow within a densely packed data center.
- A cloud that only operates in coastal regions.
Explanation: Edge computing moves computation and data storage closer to the devices where it's being gathered, rather than relying on a central cloud location.
Consider the following statements regarding 'Multi-tenancy' in cloud computing:
1. It allows multiple customers to share the same physical hardware resources while keeping data isolated.
2. It leads to the 'Noisy Neighbor' effect, where one tenant's high resource usage impacts another.
3. It is the core architecture that makes public clouds economically viable and scalable.
Which of the statements given above are correct?
- 1, 2 and 3
- 1 and 3 only
- 1 and 2 only
- 2 and 3 only
Explanation: All statements are correct. Multi-tenancy provides the economies of scale that define public cloud computing but introduces risks like resource contention.
In the context of Cloud Service Models, consider the following comparisons:
1. IaaS provides the highest level of abstraction, removing all hardware management from the user.
2. PaaS is specifically designed to provide a framework for developers to build and deploy applications.
3. SaaS is the most 'user-ready' model, where the service provider manages all underlying infrastructure and software updates.
Which of the statements given above are correct?
- 1 and 3 only
- 2 and 3 only
- 1 and 2 only
- 1, 2 and 3
Explanation: Statement 1 is incorrect because IaaS actually provides the lowest level of abstraction (highest control); it is SaaS that provides the highest level of abstraction.
Which of the following is a core characteristic of 'NIST' (National Institute of Standards and Technology) defined cloud computing?
- Local-only network access
- Resource Pooling
- Fixed pricing regardless of usage
- Manual provisioning by a technician
Explanation: Resource pooling is one of the five essential characteristics of cloud computing, where the provider's resources are pooled to serve multiple consumers.
What is the primary goal of 'Cloud Federation'?
- A political agreement where different nations agree to share all their classified intelligence data on a single, unified global cloud platform.
- Interoperability between different cloud providers.
- Merging all cloud companies into one giant firm.
- Setting a global tax rate for all cloud services.
Explanation: Cloud federation allows the connection and collaboration of different cloud computing environments to share resources and workloads.
A 'Cloud Access Security Broker' (CASB) is used primarily to:
- Enforce security policies between users and cloud.
- Increase the physical speed of the internet connection.
- Acts as a human mediator who negotiates the legal terms of service between a large corporation and a public cloud service provider.
- Reduce the cost of monthly cloud subscriptions.
Explanation: CASBs are security policy enforcement points placed between cloud service consumers and providers to combine and interject enterprise security policies.
Consider the following statements regarding 'Hypervisors':
1. Type 1 Hypervisors run directly on the host's physical hardware without an underlying operating system.
2. Type 2 Hypervisors are generally more efficient and are the standard for enterprise-level public clouds.
3. They enable multiple virtual machines to share the same physical CPU and RAM resources.
Which of the statements given above is/are correct?
- 2 and 3 only
- 1 and 3 only
- 3 only
- 1 only
Explanation: Statement 2 is incorrect; Type 1 (bare-metal) hypervisors are more efficient and are the standard for enterprise clouds. Type 2 hypervisors run on top of an existing OS.
What is a 'VPC' (Virtual Private Cloud)?
- A cloud that can only be accessed via a VPN.
- A complex system where the cloud provider gives the user a physical key to their own dedicated room inside a global data center.
- A physical server dedicated to one user.
- An isolated private network within a public cloud.
Explanation: A VPC is a private, isolated section of a public cloud where users can launch resources in a virtual network they define.
In the context of 'Serverless Computing' (FaaS), consider the following statements:
1. The developer does not need to manage the underlying server or infrastructure.
2. The user is billed only for the time the code is actually executing.
3. It eliminates the need for physical servers in the cloud provider's data center.
Which of the statements given above is/are correct?
- 1 and 2 only
- 1, 2 and 3
- 2 and 3 only
- 1 only
Explanation: Statement 3 is incorrect; servers still exist in 'serverless' computing, but the management and scaling are entirely handled by the provider, hidden from the developer.
In cloud security, 'Micro-segmentation' involves:
- Splitting a cloud bill into smaller, more manageable payments.
- Dividing a single file into millions of tiny pieces for storage.
- Using many small physical servers instead of one large one.
- Creating granular security zones to isolate workloads from each other.
Explanation: Micro-segmentation allows IT to define security policies for individual workloads, preventing an attacker from moving laterally within a network.