Overview

13 Data Centers and Cloud Infrastructure

The chapter explains that modern digital services ultimately depend on physical data centers, whether an organization keeps systems on-site or uses cloud infrastructure. It contrasts the older model of buying, hosting, and maintaining all technology internally with the cloud approach, where computing power and storage are rented on demand from third-party providers. This shift changes the balance of cost, flexibility, and control, and it also changes how cybersecurity responsibilities are divided.

A major focus is data center reliability and protection. Because data centers must support continuous operations, they rely on redundancy in power, networking, and physical facilities, along with strong environmental controls such as cooling, fire suppression, and monitoring for heat, water, and other hazards. The chapter also explains how virtualization and containerization allow one physical server to support many isolated workloads more efficiently, while still introducing security concerns such as hypervisor compromise and VM escape.

The chapter also lays out cloud computing concepts in detail, including the shared responsibility model, service models, and deployment models. It distinguishes between IaaS, PaaS, and SaaS, and between public, private, community, and hybrid clouds, emphasizing how each affects control, access, and security obligations. Finally, it covers outsourced support through MSPs and MSSPs, as well as the role of SLAs, MOUs, and MOAs in defining expectations, accountability, and continuity when organizations rely on external providers.

Fully redundant power supply setup for a data center with diverse utility pathways, fuel-diverse backup generators and UPS buffering
Energy efficient CRAC airflow in a raised-floor Data Center
Virtual machines and containerization virtualization strategies side-by-side
Comparison of responsibilities of users and vendors for the distinct service models
Comparison the distinct cloud deployment models

Answers to Review Questions

  1. The correct answer is C. Installing redundant power supplies would be the best option to maintain network functionality during a power outage.
  2. The correct answer is A. Containerization allows multiple applications to run on a single operating system kernel while remaining logically isolated from one another. By sharing the host system’s OS, containers eliminate the need for a full operating system per instance. Containers are lighter and faster to start than virtual machines, and they make a more optimal use of available hardware resources.
  3. The correct answer is B. Gas-based fire suppression systems are better for electronics but can be toxic to humans.
  4. The correct answer is C. IaaS is a cloud services model that delivers virtualized computing resources over the Internet. Customers have significant control over these resources, including the ability to install and manage their own operating systems, applications, and middleware.
  5. The correct answer is A. A hybrid cloud deployment model combines public and private cloud storage. For example: an organization might use private cloud storage for sensitive or proprietary data that needs to be kept confidential, while at the same time using public cloud storage for less sensitive data or workloads, which are more suited to a shared infrastructure.

FAQ

What is a data center in cybersecurity and cloud infrastructure?A data center is a physical facility that houses computer resources such as servers, storage systems, and networking equipment. It supports online platforms, sensitive data, and services that must remain available 24/7.
Why are data centers designed with redundancy?Redundancy helps ensure high availability by providing backup components or alternate paths if a failure occurs. Common examples include dual power feeds, UPS batteries, backup generators, redundant internet access, and extra servers.
What does “99.99% availability” mean in a data center?99.99% availability, also called “four nines,” means a system can be unavailable for only about 52 minutes per year. Achieving higher availability requires more complex and costly infrastructure.
How do power redundancy systems protect data centers?Power redundancy reduces the risk of downtime from outages. It may include dual power supplies, uninterruptible power supplies (UPS), backup generators, automatic transfer switches (ATS), and redundant power pathways.
What is the difference between on-premises infrastructure and cloud infrastructure?On-premises infrastructure is owned and managed by the organization, giving it full control but also full responsibility. Cloud infrastructure is provided by a third party and allows organizations to rent computing resources on demand.
What is virtualization and why is it important in cloud computing?Virtualization allows one physical server to host multiple isolated virtual environments. It improves hardware utilization, reduces cost, supports scalability, and is a foundation of cloud computing.
What is the difference between virtual machines and containers?Virtual machines run full operating systems and provide strong isolation, but they use more resources. Containers share the host operating system kernel, start faster, and are lighter, but provide less isolation than VMs.
What are the five essential characteristics of cloud computing?The five essential characteristics are on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. Together, they make cloud computing flexible, scalable, and pay-as-you-go.
What is the shared responsibility model in cloud computing?The shared responsibility model defines how security duties are divided between the cloud service provider and the cloud customer. The provider secures the cloud infrastructure, while the customer secures what they put in the cloud, such as data, applications, and configurations.
What is the role of an SLA, and how is it different from an MOU or MOA?An SLA is a contractual agreement that defines measurable service expectations like uptime, response time, and support levels. An MOU is generally non-binding and sets mutual understanding, while an MOA is more detailed and may be legally binding.

pro $24.99 per month

  • access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
  • choose one free eBook per month to keep
  • exclusive 50% discount on all purchases
  • renews monthly, pause or cancel renewal anytime

lite $19.99 per month

  • access to all Manning books, including MEAPs!

team

5, 10 or 20 seats+ for your team - learn more


choose your plan

team

monthly
annual
$49.99
$499.99
only $41.67 per month
  • five seats for your team
  • access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
  • choose another free product every time you renew
  • choose twelve free products per year
  • exclusive 50% discount on all purchases
  • renews monthly, pause or cancel renewal anytime
  • renews annually, pause or cancel renewal anytime
  • Fundamentals of Cybersecurity ebook for free
choose your plan

team

monthly
annual
$49.99
$499.99
only $41.67 per month
  • five seats for your team
  • access to all Manning books, MEAPs, liveVideos, liveProjects, and audiobooks!
  • choose another free product every time you renew
  • choose twelve free products per year
  • exclusive 50% discount on all purchases
  • renews monthly, pause or cancel renewal anytime
  • renews annually, pause or cancel renewal anytime
  • Fundamentals of Cybersecurity ebook for free