| Acknowledgments |
|
xix | |
| Introduction |
|
xxi | |
| Chapter 1 Cloud Computing Concepts, Models, and Terminology |
|
1 | (28) |
|
|
|
1 | (6) |
|
Infrastructure as a Service |
|
|
2 | (1) |
|
|
|
3 | (1) |
|
|
|
4 | (1) |
|
|
|
4 | (1) |
|
Communications as a Service |
|
|
5 | (1) |
|
Business Process as a Service |
|
|
5 | (1) |
|
|
|
6 | (1) |
|
Accountability and the Shared Responsibility Model |
|
|
6 | (1) |
|
Cloud Deployment Models and Services |
|
|
7 | (4) |
|
|
|
7 | (1) |
|
|
|
8 | (1) |
|
|
|
9 | (1) |
|
|
|
10 | (1) |
|
|
|
10 | (1) |
|
On-Premises vs. Off-Premises Hosting |
|
|
10 | (1) |
|
|
|
11 | (1) |
|
|
|
11 | (1) |
|
Cloud Characteristics and Terms |
|
|
11 | (7) |
|
|
|
12 | (1) |
|
|
|
12 | (1) |
|
|
|
12 | (1) |
|
|
|
12 | (1) |
|
|
|
13 | (1) |
|
|
|
13 | (1) |
|
|
|
13 | (1) |
|
|
|
13 | (2) |
|
|
|
15 | (1) |
|
|
|
16 | (1) |
|
|
|
16 | (1) |
|
|
|
16 | (2) |
|
|
|
18 | (6) |
|
Machine Learning and Artificial Intelligence |
|
|
18 | (1) |
|
|
|
19 | (4) |
|
Exercise 1-1: Creating a Basic Serverless Application on AWS Lambda |
|
|
19 | (4) |
|
|
|
23 | (1) |
|
|
|
24 | (5) |
|
|
|
24 | (3) |
|
|
|
27 | (2) |
| Chapter 2 Disk Storage Systems |
|
29 | (22) |
|
Disk Types and Configurations |
|
|
29 | (9) |
|
|
|
30 | (1) |
|
|
|
30 | (3) |
|
|
|
33 | (1) |
|
|
|
33 | (1) |
|
|
|
34 | (1) |
|
|
|
34 | (1) |
|
Redundant Array of Independent Disks (RAID) |
|
|
35 | (2) |
|
Write Once, Read Many (WORM) |
|
|
37 | (1) |
|
|
|
38 | (2) |
|
Performance Levels of Each Tier |
|
|
38 | (2) |
|
|
|
40 | (1) |
|
|
|
40 | (7) |
|
|
|
40 | (1) |
|
|
|
41 | (1) |
|
File Allocation Table File System |
|
|
41 | (1) |
|
New Technology File System |
|
|
42 | (3) |
|
Exercise 2-1: Formatting a Disk with the NTFS Partition in Windows |
|
|
42 | (3) |
|
|
|
45 | (1) |
|
Virtual Machine File System |
|
|
46 | (1) |
|
|
|
46 | (1) |
|
|
|
47 | (4) |
|
|
|
47 | (3) |
|
|
|
50 | (1) |
| Chapter 3 Storage Networking |
|
51 | (30) |
|
Storage Types and Technologies |
|
|
51 | (10) |
|
|
|
52 | (1) |
|
|
|
52 | (2) |
|
|
|
54 | (1) |
|
|
|
55 | (5) |
|
Exercise 3-1: Creating Object Storage |
|
|
57 | (3) |
|
Deduplication Technologies |
|
|
60 | (1) |
|
|
|
60 | (1) |
|
|
|
61 | (1) |
|
|
|
61 | (3) |
|
|
|
61 | (1) |
|
|
|
61 | (1) |
|
Fibre Channel over Ethernet |
|
|
62 | (1) |
|
|
|
62 | (1) |
|
|
|
62 | (1) |
|
Internet Fibre Channel Protocol |
|
|
63 | (1) |
|
Internet Small Computer System Interface |
|
|
63 | (1) |
|
Nonvolatile Memory Express Over Fabrics |
|
|
64 | (1) |
|
|
|
64 | (7) |
|
|
|
64 | (2) |
|
|
|
66 | (1) |
|
|
|
67 | (1) |
|
|
|
67 | (1) |
|
|
|
68 | (1) |
|
|
|
69 | (1) |
|
|
|
70 | (1) |
|
|
|
71 | (1) |
|
|
|
71 | (4) |
|
|
|
72 | (1) |
|
|
|
72 | (3) |
|
|
|
75 | (6) |
|
|
|
76 | (3) |
|
|
|
79 | (2) |
| Chapter 4 Network Infrastructure |
|
81 | (32) |
|
|
|
81 | (2) |
|
|
|
82 | (1) |
|
|
|
82 | (1) |
|
|
|
83 | (1) |
|
|
|
83 | (10) |
|
|
|
84 | (1) |
|
|
|
84 | (3) |
|
|
|
87 | (2) |
|
|
|
89 | (1) |
|
|
|
89 | (3) |
|
Exercise 4-1: Configuring Network Service Tiers in Google Cloud |
|
|
91 | (1) |
|
|
|
92 | (1) |
|
|
|
93 | (1) |
|
|
|
93 | (7) |
|
Network Address Translation |
|
|
94 | (2) |
|
|
|
96 | (1) |
|
Subnetting and Supernetting |
|
|
96 | (1) |
|
|
|
97 | (1) |
|
Network Segmentation and Micro-segmentation |
|
|
97 | (3) |
|
Network Ports and Protocols |
|
|
100 | (8) |
|
Hypertext Transfer Protocol and Hypertext Transfer Protocol Secure |
|
|
101 | (1) |
|
File Transfer Protocol and FTP over SSL |
|
|
101 | (2) |
|
Secure Shell File Transfer Protocol |
|
|
103 | (1) |
|
|
|
103 | (2) |
|
Dynamic Host Configuration Protocol |
|
|
105 | (1) |
|
|
|
106 | (1) |
|
Simple Mail Transfer Protocol |
|
|
106 | (1) |
|
|
|
106 | (1) |
|
|
|
107 | (1) |
|
|
|
108 | (5) |
|
|
|
109 | (2) |
|
|
|
111 | (2) |
| Chapter 5 Virtualization Components |
|
113 | (44) |
|
|
|
114 | (3) |
|
|
|
114 | (1) |
|
|
|
115 | (1) |
|
|
|
116 | (1) |
|
|
|
116 | (1) |
|
|
|
117 | (1) |
|
|
|
117 | (4) |
|
Hardware-Assisted Virtualization |
|
|
118 | (1) |
|
Single Root Input/Output Virtualization |
|
|
119 | (1) |
|
|
|
119 | (1) |
|
|
|
120 | (1) |
|
|
|
120 | (1) |
|
Hyperconverged Systems and Infrastructure |
|
|
120 | (1) |
|
|
|
121 | (12) |
|
|
|
121 | (4) |
|
|
|
125 | (2) |
|
|
|
127 | (3) |
|
|
|
130 | (3) |
|
Exercise 5-1: Creating a Virtual Switch in Hyper-V |
|
|
131 | (2) |
|
|
|
133 | (14) |
|
|
|
134 | (1) |
|
|
|
135 | (2) |
|
|
|
137 | (1) |
|
|
|
137 | (2) |
|
|
|
139 | (1) |
|
|
|
140 | (7) |
|
Exercise 5-2: Creating a Virtual Machine in Hyper-V |
|
|
141 | (6) |
|
Virtualized Infrastructure Service Elements |
|
|
147 | (5) |
|
|
|
148 | (1) |
|
|
|
148 | (1) |
|
|
|
149 | (1) |
|
|
|
150 | (1) |
|
|
|
150 | (1) |
|
|
|
150 | (1) |
|
Multifactor Authentication |
|
|
151 | (1) |
|
|
|
151 | (1) |
|
|
|
151 | (1) |
|
|
|
152 | (5) |
|
|
|
152 | (3) |
|
|
|
155 | (2) |
| Chapter 6 Virtualization and the Cloud |
|
157 | (34) |
|
Benefits of Virtualization in a Cloud Environment |
|
|
157 | (4) |
|
|
|
158 | (1) |
|
|
|
158 | (1) |
|
Network and Application Isolation |
|
|
159 | (1) |
|
Infrastructure Consolidation |
|
|
160 | (1) |
|
Virtual Data Center Creation |
|
|
161 | (1) |
|
\Virtual Resource Migrations |
|
|
161 | (15) |
|
Virtual Machine Templates |
|
|
161 | (2) |
|
|
|
163 | (1) |
|
|
|
164 | (1) |
|
|
|
165 | (1) |
|
|
|
165 | (1) |
|
|
|
166 | (1) |
|
Virtual Machine Snapshots |
|
|
166 | (1) |
|
|
|
167 | (1) |
|
|
|
167 | (1) |
|
Host Clustering and HA/DR |
|
|
168 | (1) |
|
Cloud Provider Migrations |
|
|
169 | (7) |
|
Exercise 6-1: Creating a Cloud Firewall on Azure |
|
|
172 | (4) |
|
|
|
176 | (8) |
|
|
|
176 | (1) |
|
|
|
177 | (1) |
|
|
|
178 | (3) |
|
|
|
181 | (1) |
|
|
|
182 | (2) |
|
|
|
184 | (2) |
|
|
|
185 | (1) |
|
|
|
185 | (1) |
|
Software Defined Data Center |
|
|
185 | (1) |
|
|
|
186 | (5) |
|
|
|
186 | (3) |
|
|
|
189 | (2) |
| Chapter 7 Cloud Adoption |
|
191 | (40) |
|
|
|
191 | (16) |
|
|
|
192 | (2) |
|
|
|
194 | (9) |
|
|
|
203 | (1) |
|
|
|
204 | (3) |
|
|
|
207 | (1) |
|
|
|
207 | (15) |
|
|
|
208 | (2) |
|
|
|
210 | (2) |
|
Deploying Virtual Systems |
|
|
212 | (2) |
|
|
|
214 | (6) |
|
Exercise 7-1: Creating a Virtual Network in Azure |
|
|
214 | (2) |
|
Exercise 7-2: Creating a Default Route on Azure |
|
|
216 | (4) |
|
|
|
220 | (2) |
|
Post-Deployment Validation |
|
|
222 | (1) |
|
|
|
222 | (4) |
|
|
|
223 | (1) |
|
|
|
223 | (2) |
|
|
|
225 | (1) |
|
|
|
225 | (1) |
|
|
|
226 | (1) |
|
|
|
226 | (5) |
|
|
|
226 | (2) |
|
|
|
228 | (3) |
| Chapter 8 DevOps |
|
231 | (24) |
|
|
|
231 | (10) |
|
|
|
232 | (1) |
|
|
|
232 | (3) |
|
|
|
235 | (1) |
|
|
|
236 | (2) |
|
|
|
238 | (1) |
|
|
|
239 | (2) |
|
|
|
241 | (2) |
|
|
|
241 | (1) |
|
|
|
242 | (1) |
|
|
|
243 | (1) |
|
Application Feature Use (Increase/Decrease) |
|
|
243 | (1) |
|
|
|
243 | (5) |
|
Avoid Hardcoded Passwords |
|
|
244 | (1) |
|
Service Account Best Practices |
|
|
244 | (1) |
|
|
|
245 | (1) |
|
|
|
246 | (2) |
|
Exercise 8-1: Setting Up SSH Keys for Key-Based Authentication |
|
|
247 | (1) |
|
DevOps Cloud Transformation |
|
|
248 | (4) |
|
|
|
248 | (2) |
|
Continuous Integration/Continuous Delivery |
|
|
250 | (1) |
|
|
|
251 | (1) |
|
|
|
252 | (3) |
|
|
|
252 | (2) |
|
|
|
254 | (1) |
| Chapter 9 Performance Tuning |
|
255 | (26) |
|
|
|
255 | (3) |
|
|
|
255 | (1) |
|
|
|
256 | (1) |
|
|
|
257 | (1) |
|
|
|
257 | (1) |
|
|
|
258 | (1) |
|
Guest Resource Allocation |
|
|
258 | (4) |
|
|
|
258 | (1) |
|
|
|
259 | (1) |
|
|
|
259 | (1) |
|
Physical Resource Redirection |
|
|
260 | (1) |
|
|
|
261 | (1) |
|
Dynamic Resource Allocation |
|
|
261 | (1) |
|
|
|
262 | (12) |
|
Configuration Best Practices |
|
|
262 | (6) |
|
Exercise 9-1: Setting CPU Affinity and Anti-Affinity Rules in VMWare Cloud |
|
|
265 | (3) |
|
|
|
268 | (1) |
|
|
|
268 | (3) |
|
|
|
271 | (3) |
|
Common Performance Issues |
|
|
274 | (3) |
|
|
|
274 | (2) |
|
|
|
276 | (1) |
|
|
|
276 | (1) |
|
Physical Processor Issues |
|
|
277 | (1) |
|
|
|
277 | (4) |
|
|
|
278 | (2) |
|
|
|
280 | (1) |
| Chapter 10 Systems Management |
|
281 | (58) |
|
|
|
281 | (6) |
|
Standard Operating Procedures |
|
|
282 | (1) |
|
|
|
282 | (1) |
|
|
|
283 | (1) |
|
|
|
284 | (3) |
|
Systems Management Best Practices |
|
|
287 | (8) |
|
|
|
287 | (2) |
|
|
|
289 | (1) |
|
|
|
290 | (1) |
|
|
|
291 | (4) |
|
|
|
295 | (1) |
|
|
|
295 | (22) |
|
|
|
295 | (2) |
|
|
|
297 | (2) |
|
|
|
299 | (2) |
|
|
|
301 | (12) |
|
Exercise 10-1: Configuring Group Policy for Automatic Updates |
|
|
304 | (9) |
|
|
|
313 | (2) |
|
|
|
315 | (2) |
|
|
|
317 | (15) |
|
Collector Protocols and Methods |
|
|
318 | (2) |
|
|
|
320 | (1) |
|
|
|
320 | (5) |
|
|
|
325 | (1) |
|
|
|
326 | (1) |
|
|
|
326 | (1) |
|
Automated Event Responses |
|
|
327 | (3) |
|
|
|
330 | (1) |
|
Verification of Continuous Monitoring Activities |
|
|
330 | (1) |
|
|
|
331 | (1) |
|
|
|
332 | (7) |
|
|
|
333 | (3) |
|
|
|
336 | (3) |
| Chapter 11 Security in the Cloud |
|
339 | (46) |
|
|
|
339 | (14) |
|
|
|
340 | (1) |
|
Public Key Infrastructure |
|
|
341 | (6) |
|
|
|
347 | (1) |
|
|
|
347 | (2) |
|
|
|
349 | (2) |
|
|
|
351 | (1) |
|
|
|
352 | (1) |
|
|
|
353 | (7) |
|
|
|
353 | (2) |
|
|
|
355 | (2) |
|
|
|
357 | (1) |
|
|
|
358 | (1) |
|
|
|
358 | (1) |
|
|
|
358 | (1) |
|
|
|
359 | (1) |
|
|
|
359 | (1) |
|
Effects of Cloud Service Models on Security Implementation |
|
|
359 | (1) |
|
|
|
360 | (11) |
|
|
|
360 | (1) |
|
|
|
361 | (1) |
|
Endpoint Detection and Response |
|
|
362 | (1) |
|
|
|
362 | (6) |
|
Exercise 11-1: Creating a DLP Policy for Office 365 |
|
|
362 | (6) |
|
|
|
368 | (1) |
|
|
|
369 | (2) |
|
|
|
371 | (1) |
|
Impact of Security Tools to Systems and Services |
|
|
371 | (1) |
|
|
|
371 | (9) |
|
|
|
372 | (1) |
|
|
|
372 | (1) |
|
|
|
372 | (2) |
|
|
|
374 | (1) |
|
|
|
374 | (1) |
|
|
|
375 | (2) |
|
Access Control Methodologies |
|
|
377 | (2) |
|
Multifactor Authentication |
|
|
379 | (1) |
|
|
|
380 | (5) |
|
|
|
381 | (2) |
|
|
|
383 | (2) |
| Chapter 12 Security Best Practices |
|
385 | (48) |
|
Cloud Security Engineering |
|
|
386 | (5) |
|
Implementing Layered Security |
|
|
386 | (1) |
|
Protecting Against Availability Attacks |
|
|
387 | (1) |
|
|
|
387 | (1) |
|
|
|
388 | (1) |
|
|
|
388 | (3) |
|
Security Governance and Strategy |
|
|
391 | (15) |
|
Developing Company Security Policies |
|
|
391 | (2) |
|
Account Management Policies |
|
|
393 | (2) |
|
Documenting Security Procedures |
|
|
395 | (1) |
|
|
|
395 | (2) |
|
Leveraging Established Industry Standards and Regulations |
|
|
397 | (3) |
|
Applying Platform-Specific Security Standards |
|
|
400 | (1) |
|
|
|
400 | (1) |
|
|
|
401 | (4) |
|
Exercise 12-1: Creating a Legal Hold for a Mailbox in Office 365 |
|
|
401 | (4) |
|
Keeping Employees and Tools Up to Date |
|
|
405 | (1) |
|
Roles and Responsibilities |
|
|
406 | (1) |
|
|
|
406 | (13) |
|
|
|
407 | (1) |
|
|
|
408 | (6) |
|
|
|
414 | (3) |
|
Roles and Responsibilities |
|
|
417 | (1) |
|
Considerations Before You Scan or Test |
|
|
418 | (1) |
|
|
|
419 | (10) |
|
|
|
419 | (6) |
|
|
|
425 | (1) |
|
Incident Response Procedures |
|
|
426 | (3) |
|
|
|
429 | (4) |
|
|
|
430 | (2) |
|
|
|
432 | (1) |
| Chapter 13 Business Continuity and Disaster Recovery |
|
433 | (44) |
|
Business Continuity Methods |
|
|
433 | (12) |
|
|
|
434 | (1) |
|
|
|
434 | (2) |
|
|
|
436 | (1) |
|
|
|
437 | (7) |
|
Service-Level Agreements for BCP and HA |
|
|
444 | (1) |
|
Disaster Recovery Methods |
|
|
445 | (8) |
|
Corporate Guidelines/Documentation |
|
|
445 | (6) |
|
|
|
451 | (2) |
|
|
|
453 | (1) |
|
Service-Level Agreements for DR |
|
|
453 | (1) |
|
|
|
453 | (19) |
|
|
|
454 | (7) |
|
|
|
461 | (7) |
|
Exercise 13-1: Cross-Region Replication |
|
|
461 | (7) |
|
Other Backup Considerations |
|
|
468 | (3) |
|
|
|
471 | (1) |
|
|
|
472 | (1) |
|
|
|
472 | (5) |
|
|
|
473 | (2) |
|
|
|
475 | (2) |
| Chapter 14 Testing, Automation, and Changes |
|
477 | (36) |
|
|
|
478 | (17) |
|
|
|
478 | (8) |
|
Exercise 14-1: Collecting Windows Metrics with Performance Monitor |
|
|
481 | (5) |
|
|
|
486 | (2) |
|
|
|
488 | (2) |
|
Testing in the Cloud Landscape |
|
|
490 | (1) |
|
|
|
490 | (1) |
|
|
|
491 | (1) |
|
|
|
491 | (1) |
|
|
|
492 | (1) |
|
|
|
492 | (1) |
|
Testing High Availability |
|
|
493 | (1) |
|
|
|
493 | (1) |
|
|
|
494 | (1) |
|
|
|
494 | (1) |
|
|
|
494 | (1) |
|
Automation and Orchestration |
|
|
495 | (5) |
|
|
|
496 | (1) |
|
|
|
496 | (1) |
|
|
|
497 | (1) |
|
Runbook Management for Single Nodes |
|
|
498 | (1) |
|
Orchestration for Multiple Nodes and Runbooks |
|
|
499 | (1) |
|
|
|
499 | (1) |
|
Change and Configuration Management |
|
|
500 | (9) |
|
|
|
500 | (6) |
|
|
|
506 | (3) |
|
|
|
509 | (4) |
|
|
|
509 | (1) |
|
|
|
510 | (3) |
| Chapter 15 Troubleshooting |
|
513 | (66) |
|
Troubleshooting Methodology |
|
|
513 | (4) |
|
|
|
517 | (45) |
|
|
|
518 | (13) |
|
Exercise 15-1: Using the Google Cloud Policy Troubleshooter |
|
|
528 | (3) |
|
|
|
531 | (11) |
|
|
|
542 | (10) |
|
|
|
552 | (2) |
|
|
|
554 | (5) |
|
Automation and Orchestration Issues |
|
|
559 | (3) |
|
Documentation and Analysis |
|
|
562 | (4) |
|
|
|
563 | (1) |
|
|
|
564 | (2) |
|
|
|
566 | (9) |
|
|
|
566 | (3) |
|
|
|
569 | (3) |
|
|
|
572 | (1) |
|
Remote Administration Tools |
|
|
573 | (2) |
|
|
|
575 | (4) |
|
|
|
575 | (2) |
|
|
|
577 | (2) |
| Appendix A Objective Map |
|
579 | (10) |
|
|
|
579 | (10) |
| Appendix B About the Online Content |
|
589 | (4) |
|
|
|
589 | (1) |
|
Your Total Seminars Training Hub Account |
|
|
589 | (1) |
|
|
|
589 | (1) |
|
Single User License Terms and Conditions |
|
|
589 | (2) |
|
|
|
591 | (1) |
|
Performance-Based Questions |
|
|
591 | (1) |
|
|
|
591 | (2) |
| Index |
|
593 | |
Lisainfo e-raamatute kohta