Guests: Aaron Lord, Abhi Arora, Dominique Righetto (Technical editor of the book)

Questions to be answered:

  1. What does the term “shared responsibility” mean?

  2. What is the difference between Infrastructure as a Service (IaaS) and Platform as a Service (PaaS)? Which one(s) do you have to patch and maintain yourself?

  3. Why is there (or is there not) more risk to online storage? Which of the CIA Triad can apply to online storage?

  4. Name one new risk that the cloud has that a traditional or on-premises data center does not have.

  5. What is the difference between a container, a virtual machine, and a physical server?

  6. Name one advantage of Infrastructure as Code.

  7. Name one advantage of DevOps over Waterfall SDLC.

  8. Which of the modern tooling options sounded most interesting to you? Why?

  9. Which of the modern tactics sounded most interesting to you? Why?

  10. After reading this chapter, what do you see missing in your organization? What can you improve, and how can you do it?

Buy the book https://www.amazon.ca/Alice-Bob-Learn...

Take the course: https://academy.wehackpurple.com/ #tanyajanca #AppSec #devsecops #applicationsecurity #cloudsecurity