Cisco CCST - IT Support - Practice Exams 2025

4.4. Virtualization and cloud terminology

Virtualization refers to the creation of a virtual version of something, particularly in computing where it allows multiple operating systems to run on a single hardware platform. The software, which is responsible for this task, is known as a hypervisor or virtual machine monitor (VMM). Hypervisors can be type 1 (bare-metal) or type 2 (hosted), with type 1 being more common in production environments due to their performance advantages.

Key Terms:

• Cloud Providers: These are companies that offer cloud computing services and infrastructure. The three most prominent ones are:

  • Amazon Web Services (AWS): A subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments.
  • Microsoft Azure: Microsoft's public cloud computing service which provides software as a service (SaaS), platform as a service (PaaS) and infrastructure as a service (IaaS) services.
  • Google Cloud Platform (GCP): Google's suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, file storage, and YouTube.

• Virtual Machines (VMs): An emulation of a computer system that provides the functionality of a physical computer. They allow multiple operating systems to run concurrently on a single physical machine.

• Hypervisors: A type of virtual machine monitor (VMM) that creates and runs virtual machines (VMs). It presents each VM with its own virtualized hardware, making each guest OS believe it has its own processor, memory, and other resources.

• Cloud Models: There are three primary service models in cloud computing:

  • Infrastructure as a Service (IaaS): Provides virtualized computing resources over the internet. Users can provision resources as needed without the complexity of building and maintaining the underlying network, servers, and storage infrastructure.
  • Platform as a Service (PaaS): Delivers a platform allowing customers to develop, run, and manage applications without the complexity of building and maintaining the infrastructure typically associated with developing and launching an app.
  • Software as a Service (SaaS): Provides a software application delivered over the internet, on a subscription basis. SaaS eliminates the need for organizations to install and run applications on their own computers or in their own data centers.

By understanding these concepts, you can direct incidents to the appropriate team within an organization that deals with cloud services or virtualization. This ensures that the issue is addressed by experts with the right skill set and resources.

5.0 - Common Threats and Preventions

To protect end users from various security threats, it's crucial to be knowledgeable about common vulnerabilities and how to address them:

• Phishing: A technique used to trick users into providing sensitive information by masquerading as a trusted entity in an electronic communication.

  • Educate users on recognizing suspicious emails, links, and attachments.
  • Advise users to verify the authenticity of requests for sensitive information.
  • Encourage the use of anti-phishing tools and browser security features.

• Malware: Malicious software designed to disrupt, damage, or gain unauthorized access to computers and networks.

  • Guide users on how to run antivirus/antimalware scans.
  • Inform users about the importance of keeping their systems updated with the latest security patches.

• Spam: Unwanted messages sent in large quantities over the internet, often containing malicious content or attempts to defraud recipients.

  • Recommend the use of spam filters and email management practices.

• Unauthorized Access Attempts: Efforts by malicious actors to gain access to systems, data, or services without authorization.

  • Ensure that users are following best practices for strong passwords and authentication measures.

• Spoofing: The act of disguising one's identity by falsifying data or masquerading as another entity.

  • Educate users on recognizing signs of spoofing, such as mismatched URLs or inconsistent contact information.

5.2. Recognize how to avoid becoming a victim of social engineering attacks. Social engineering involves manipulating individuals into divulging confidential or personal information that may be used for fraudulent purposes. Helping users recognize and respond to these tactics is key to their security:

• Baiting: Offering something desirable in exchange for sensitive information or access.
• Pretexting: Gaining information under false pretenses.
• Phishing (as mentioned above).
• Tailgating or Piggybacking: Physically tailgating an employee into a facility or gaining access to systems by exploiting human nature and the natural tendency to be helpful.
• Spear Phishing: A targeted attack where the perpetrator sends emails that appear to be from reputable sources, often personalized with names and titles, to trick individuals into revealing sensitive data or clicking on a malicious link.

By staying informed about these threats and understanding how they operate, you can better educate end users and help protect them against falling victim to such attacks. Always recommend following security best practices and utilizing available security tools and features.