Page 599 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide

the cloud” and thus the complexity is isolated from them.

Cloud computing is a natural extension and evolution of virtualization,
the internet, distributed architecture, and the need for ubiquitous

access to data and resources. However, it does have some issues,
including privacy concerns, regulation compliance difficulties, use of
open- versus closed-source solutions, adoption of open standards, and
whether or not cloud-based data is actually secured (or even
securable). The hypervisor, also known as the virtual machine

monitor (VMM), is the component of virtualization that creates,
manages, and operates the virtual machines. The computer running
the hypervisor is known as the host OS, and the OSs running within a
hypervisor-supported virtual machine are known as guest OSs.

A type I hypervisor is a native or bare-metal hypervisor. In this
configuration, there is no host OS; instead, the hypervisor installs
directly onto the hardware where the host OS would normally reside.

Type 1 hypervisors are often used to support server virtualization. This
allows for maximization of the hardware resources while eliminating
any risks or resource reduction caused by a host OS.

A type II hypervisor is a hosted hypervisor. In this configuration, a
standard regular OS is present on the hardware, and then the
hypervisor is installed as another software application. Type II
hypervisors are often used in relation to desktop deployments, where

the guest OSs offer safe sandbox areas to test new code, allow the
execution of legacy applications, support apps from alternate OSs, and
provide the user with access to the capabilities of a host OS.

Cloud storage is the idea of using storage capacity provided by a cloud
vendor as a means to host data files for an organization. Cloud storage
can be used as form of backup or support for online data services.
Cloud storage may be cost effective, but it is not always high speed or

low latency. Most do not yet consider cloud storage as a replacement
for physical backup media solutions but rather as a supplement for
organizational data protection. Additionally, using cloud storage may
involve additional risk because your organization’s data is residing on
equipment in another facility and under third-party control.

Elasticity refers to the flexibility of virtualization and cloud solutions