Which component acquires and uses cloud products and services in the NIST Cloud Computing Reference Architecture?

Which of the following best defines this service in the case that Amazon’s EC2 provides virtual machines that can be controlled through a service API?

IaaS

Amazon's EC2 service provides resizable computational capacity in the cloud via VMs that can be controlled via an API, thereby meeting the definition of IaaS.

What best describes a wrapping attack?

A SOAP message is intercepted, data in the envelope is changed, and then the data is sent/replayed.

Wrapping attacks entail interfering with SOAP messages and masquerading them as legitimate.

Which of the following is the best choice in the security principle that applies to cloud security if there are many benefits to cloud computing?

Separation of duties

While using cloud computing does not entirely resolve the separation of duties, it is the only option available. By definition, the cloud may separate the data owner from the data custodian (the cloud provider assumes the role).

The cloud computing attacks can be best described as a CSRF attacks is which of the following?

Session riding

Instead of traditional data centers, session riding is simply CSRF under a different name and deals with cloud services.

Which component acts to manage the use, performance, and delivery of cloud services, as well as the relationships between providers and subscribers in the NIST Cloud Computing Reference Architecture?

Cloud broker

The broker “serves as an intermediary between the consumer and the provider, guiding consumers through the complexities of cloud service offerings and perhaps creating value-added cloud services.”

The best represents SOA is which of the following?

An API that allows different components to communicate

The best available option is Service Oriented Architecture (SOA), which is all about software components giving information to one another through a network.

Which cloud computing model are two examples of Google Docs and Salesforce CRM?

SaaS

Software as a Service best describes this. SaaS is simply a software distribution model in which the provider provides subscribers with on-demand applications.

The cloud computing model is geared toward software development is which of the following?

PaaS

PaaS is a development platform that allows subscribers to construct apps without having to establish the infrastructure required to develop and publish software.

Which of the following has the responsibility of transmitting the data in the NIST Cloud Computing Reference Architecture?