Skip to content

✍ 07: Cloud Computing & Remote Access — Exercises

Network Systems

Module 07: Cloud Computing and Remote Access 12 questions

Home Notes All Exercises Quiz

Tip

Practice — try each question first, then expand the answer to check your reasoning.

Work through each question, then click ▶ Show answer to check yourself. Review the notes if you get stuck.

🔹 Q1. Classify each as IaaS, PaaS, or SaaS: (a) Microsoft 365, (b) AWS EC2 VMs, (c) Azure App Service for deploying code.

Show answer - (a) Microsoft 365 → **SaaS** - (b) EC2 VMs → **IaaS** - (c) Azure App Service → **PaaS**

🔹 Q2. In IaaS, what does the customer secure vs. the provider?

Show answer - **Provider** — physical data center, hardware, virtualization/host. - **Customer** — the **guest OS, applications, data, and access** (patching and configuration). Responsibility shifts more to the provider as you move IaaS → PaaS → SaaS.

☁ Q3. A hospital and clinics share a compliance-focused cloud dedicated to healthcare orgs. Which deployment model?

Show answer **Community cloud** — shared by organizations with common needs/compliance.

🔹 Q4. Compare a Type 1 and a Type 2 hypervisor, with an example of each.

Show answer - **Type 1 (bare-metal)** — runs directly on hardware (ESXi, Hyper-V, KVM); used for servers. - **Type 2 (hosted)** — runs on a host OS (VirtualBox, VMware Workstation); used on desktops/labs.

💡 Q5. Why are containers lighter than virtual machines?

Show answer Containers **share the host OS kernel** and package only the app + dependencies, so they're smaller and faster to start. Each VM runs a **full guest OS**.

🔹 Q6. Define elasticity and multitenancy.

Show answer - **Elasticity** — resources scale up/down automatically with demand. - **Multitenancy** — many customers securely share the same pooled physical infrastructure, logically isolated.

🔹 Q7. A remote admin needs one secure entry point to manage internal servers. Name the design element and one hardening measure.

Show answer A **jump box / bastion host**. Harden with **MFA**, least privilege, patching, and full logging/auditing of access.
Show answer **Risk:** brute-force and ransomware entry via 3389. **Fix:** place RDP behind a **VPN or RD Gateway**, require **MFA**, and restrict source IPs — never expose it directly.

🔹 Q9. Compare a site-to-site VPN with a client-to-site VPN.

Show answer - **Site-to-site** — connects entire **networks** (e.g., branch ↔ HQ), usually IPsec on routers/firewalls. - **Client-to-site (remote-access)** — connects an **individual user's device** into the corporate network.

❓ Q10. What is the difference between a full-tunnel and a split-tunnel VPN?

Show answer - **Full tunnel** — **all** client traffic goes through the VPN (more secure, more load). - **Split tunnel** — only corporate-bound traffic uses the VPN; the rest goes direct.

❓ Q11. What is out-of-band management, and why is it valuable?

Show answer A **separate management path** (console/serial port, dedicated interface, or cellular) to reach devices **even when the production network is down** — essential for recovery.

🌍 Q12. What problem does SD-WAN solve, and how?

Show answer It improves WAN performance/cost by **centrally managing and intelligently steering** traffic across multiple transports (MPLS, broadband, LTE) based on application policy and link quality — reducing reliance on costly MPLS.

⬅️ Prev: Module 06 · 📚 All Exercises · Next: Module 08 — Subnets & VLANs ➡️