Important Questions

CSC481 · Exam intelligence

Introduction to Cloud Computing important questions

From 3 past TU papers: which questions keep coming back, how much they carry, and what is most likely to show up next. Every question links to a model answer.

Most likely in the next examStatistical

Ranked by how often a topic is asked, its marks weight, and whether it is due after skipping the 2081 paper. No guarantees; study the whole syllabus.

1asked 2xavg 5 marks · due (skipped 2081) · Load balancing
Answer

What is load balancing? How is load balancing done? [5]

Load Balancing

Definition

Load balancing refers to the process of distributing a set of tasks over a set of resources with the aim of making their overall processing more efficient. It optimizes the response time and avoids unevenly overloading some compute nodes while other nodes are left idle. In the context of networking and cloud computing, it refers to distributing incoming network traffic across a group of backend servers.


How Load Balancing is Done

Load balancing is typically performed using the following approaches and techniques:

1. Load Balancer (Hardware/Software)

A dedicated load balancer sits between the client and the backend server pool. It receives all incoming requests and forwards them to an appropriate server based on a chosen algorithm.

Client Requests
      |
  [Load Balancer]
   /     |      \
[S1]   [S2]   [S3]   <-- Backend Servers

2. Common Load Balancing Algorithms

AlgorithmDescription
Round RobinRequests are distributed to each server in turn, one after another
Least ConnectionNew request is sent to the server with the fewest active connections
IP HashClient IP address is used to determine which server receives the request
Weighted Round RobinServers with higher capacity are assigned more requests proportionally
RandomRequests are assigned to servers randomly

3. Health Monitoring

The load balancer continuously monitors the health of backend servers. If a server goes down or becomes unresponsive, the load balancer stops sending traffic to it and redirects requests to healthy servers.

4. Session Persistence (Sticky Sessions)

In some cases, the load balancer ensures that a particular client is always directed to the same server during a session, maintaining session continuity.

5. DNS-Based Load Balancing

Multiple IP addresses are associated with a single domain name. DNS resolves the domain to different IPs for different clients, distributing the load geographically.


Benefits of Load Balancing

  • Improves response time and performance
  • Prevents any single server from becoming a bottleneck
  • Provides high availability and fault tolerance
  • Enables scalability by adding more servers to the pool
  • Keeps idle nodes from wasting resources

Summary: Load balancing distributes workloads evenly across multiple servers using algorithms like Round Robin or Least Connection, managed by a load balancer, ensuring efficiency, reliability, and optimal resource utilization.

2asked 2xavg 5 marks · due (skipped 2081) · AppEngine
Answer

Discuss the core components of AppEngine. [5]

AppEngine (Google App Engine / GAE) is a cloud computing Platform as a Service (PaaS) that allows developers to create and run web applications on Google-managed data centers. It supports multiple languages including Go, PHP, Java, Pytho...

3asked 2xavg 5 marks · due (skipped 2081) · Azures Platform
Answer

Explain the storage services provided by Windows Azure. [5]

Windows Azure (now known as Microsoft Azure Platform) is a public cloud computing platform developed by Microsoft that provides IaaS, PaaS, and SaaS solutions including storage, networking, analytics, and virtual computing. Azure offers ...

4asked 3xavg 5 marks · Cloud Security issues, challenges and Risks
Answer

Describe the cloud security threat issues. [5]

Cloud Security Threat Issues

Cloud security threat issues refer to the various vulnerabilities, risks, and challenges that can compromise the confidentiality, integrity, and availability of data and services in a cloud computing environment.


1. Inadequate Identity and Access Management

Weak identity and access management practices can lead to unauthorized access to cloud resources. This includes issues like:

  • Poor password policies
  • Insufficient authentication mechanisms
  • Lack of multi-factor authentication

If proper access controls are not enforced, malicious users can gain entry to sensitive cloud resources.


2. Shared Infrastructure Vulnerabilities

Cloud environments are built on shared infrastructure. This means vulnerabilities affecting one customer's data or application can potentially impact other customers as well. This is closely related to the multi-tenancy model where multiple customers share the same computing resources.


3. Account Hijacking

If an attacker gains control over a user's cloud account credentials, they can:

  • Misuse the account to manipulate resources
  • Access sensitive data
  • Launch further attacks against other users or systems

4. Data Privacy and Security Risks

Organizations must ensure compliance with applicable data protection laws and regulations when storing data in the cloud. Key concerns include:

  • Where data is stored
  • Who has access to the data
  • What security protections the cloud provider offers
  • Cross-border data transfer issues, where data may be subject to laws of multiple countries

5. Trust and Reputation Issues

  • Customers entrust sensitive data to businesses using cloud services. A data breach or security incident can erode customer trust.
  • A security breach can also damage a company's reputation in the market, leading to customer churn and loss of business.

6. Effect on Company's ROI

A security breach or data loss can have a significant impact on a company's Return on Investment (ROI):

  • Direct costs: Legal fees, regulatory fines
  • Indirect costs: Reputational damage, customer churn, loss of business opportunities

7. Compatibility Issues

Migration to the cloud may cause compatibility issues with an organization's existing IT infrastructure, security needs, and organizational regulations. If not studied properly, this can introduce new security gaps.


8. Lack of Control

  • Lack of control over performance: The system quality may be unable to deliver excellent services at all times.
  • Lack of control over quality: Organizations must trust the quality standards that a cloud provider supplies over time, which may not always meet security expectations.

Summary Table

Threat IssueKey Risk
Inadequate IAMUnauthorized access
Shared InfrastructureCross-tenant vulnerabilities
Account HijackingCredential theft and misuse
Data PrivacyLegal non-compliance
Trust and ReputationCustomer loss
ROI ImpactFinancial and legal losses
CompatibilitySecurity gaps during migration
Lack of ControlPerformance and quality failures

In short, cloud security threat issues span technical, legal, financial, and organizational dimensions, all of which must be carefully addressed when adopting cloud services.

5asked 2xavg 8 marks · Platform as service
Answer

Define cloud computing service. Describe each of PaaS, SaaS and IaaS with suitable examples.[10]

Cloud Computing Service and Its Types (PaaS, SaaS, IaaS)


Definition of Cloud Computing Service

Cloud computing service refers to the delivery of hardware and software resources made available over the Internet as managed third-party services. Cloud services provide users access to advanced software applications, high-end networks, and server computers without requiring them to own or maintain physical infrastructure.

Cloud computing services are characterized by:

  • On-Demand Service: Users can arrange computing resources (processing power, storage, applications) without human intervention.
  • Broad Network Access: Services are accessible over the Internet from anywhere using various devices.
  • Measured Service: Services follow a pay-per-use pricing model; users pay only for what they consume.
  • Scalable Architecture: Users can scale up storage and hardware requirements according to need.
  • Location Independence: Services can be accessed from anywhere with an internet connection.

Examples of cloud computing services include virtual IT, software hosting, and network storage.


Types of Cloud Computing Services

Cloud computing is broadly categorized into three service models:


1. Infrastructure as a Service (IaaS)

Definition: IaaS provides virtualized computing resources over the internet. It allows users to rent and manage virtual machines (VMs), storage, and networking infrastructure on demand.

Key Characteristics:

  • Users have full control over the operating systems, applications, and configurations of the virtualized infrastructure.
  • The cloud provider manages the underlying physical hardware.
  • Resources are provisioned on a pay-per-use basis.
  • Highly scalable; users can increase or decrease resources as needed.

What the Provider Manages:

  • Physical servers, networking hardware, data centers

What the User Manages:

  • Virtual machines, operating systems, middleware, applications, data

Architecture Diagram:

User Controls:
  [Applications] --> [OS] --> [Virtual Machines]
Provider Controls:
  [Physical Servers] --> [Networking] --> [Storage]

Examples:

  • Amazon Web Services (AWS) - EC2 (Elastic Compute Cloud)
  • Microsoft Azure Virtual Machines
  • Google Compute Engine

Use Case: A startup company needs servers to host its web application but does not want to invest in physical hardware. It rents virtual machines from AWS, installs its preferred OS, and deploys its application.


2. Platform as a Service (PaaS)

Definition: PaaS provides a platform and environment that allows developers to build, test, deploy, and manage applications without worrying about the underlying infrastructure (servers, storage, networking).

Key Characteristics:

  • Provides a ready-to-use development environment.
  • The cloud provider manages the infrastructure AND the platform (OS, runtime, middleware).
  • Users focus only on writing and deploying their application code.
  • Supports the complete software development lifecycle (coding, testing, deployment).

What the Provider Manages:

  • Physical hardware, OS, runtime environment, middleware, databases

What the User Manages:

  • Application code and data only

Architecture Diagram:

User Controls:
  [Application Code] --> [Data]
Provider Controls:
  [Runtime] --> [Middleware] --> [OS] --> [Infrastructure]

Examples:

  • Microsoft Azure Platform (MAP) - formerly Windows Azure
  • Google App Engine
  • Heroku
  • AWS Elastic Beanstalk

Use Case: A software development team wants to build and deploy a web application quickly. Using Google App Engine (PaaS), they write their code and deploy it directly without managing servers or configuring operating systems.


3. Software as a Service (SaaS)

Definition: SaaS delivers fully functional software applications over the Internet on a subscription or pay-per-use basis. Users access the software through a web browser without installing or maintaining anything locally.

Key Characteristics:

  • The cloud provider manages everything: infrastructure, platform, and the application itself.
  • Users only interact with the software through a user interface (typically a browser).
  • Accessible from anywhere with an internet connection.
  • Updates and maintenance are handled by the provider.

What the Provider Manages:

  • Everything: hardware, OS, middleware, application, data storage

What the User Manages:

  • Only their own data and user settings

Architecture Diagram:

User Controls:
  [User Interface / Browser Access]
Provider Controls:
  [Application] --> [Data] --> [Runtime] --> [OS] --> [Infrastructure]

Examples:

  • Google Workspace (Gmail, Google Docs)
  • Microsoft Office 365
  • Salesforce CRM
  • Dropbox
  • Zoom

Use Case: A company uses Salesforce to manage its customer relationships. Employees log in through a browser and use the CRM software without installing anything. The provider handles all updates, security, and maintenance.


Comparison Table

FeatureIaaSPaaSSaaS
What is providedVirtualized infrastructureDevelopment platformReady-to-use software
User managesOS, apps, dataApps and data onlyOnly user data/settings
Provider managesHardware onlyHardware + OS + runtimeEverything
Target usersIT administratorsDevelopersEnd users
FlexibilityHighestMediumLowest
ExampleAWS EC2, Azure VMsGoogle App Engine, HerokuGmail, Office 365

Summary

Cloud computing services are delivered in three primary models. IaaS gives maximum control by providing raw virtualized infrastructure. PaaS abstracts the infrastructure and provides a development platform so developers can focus on code. SaaS provides complete, ready-to-use applications accessible via the internet. Microsoft Azure, for example, supports all three models, offering solutions for analytics, virtual computing, storage, and networking.

Most repeated questions

Topics asked at least twice, most-asked first.

asked 3xavg 5 marks · 2081, 2080
Answer

Describe the cloud security threat issues. [5]

Cloud Security Threat Issues

Cloud security threat issues refer to the various vulnerabilities, risks, and challenges that can compromise the confidentiality, integrity, and availability of data and services in a cloud computing environment.


1. Inadequate Identity and Access Management

Weak identity and access management practices can lead to unauthorized access to cloud resources. This includes issues like:

  • Poor password policies
  • Insufficient authentication mechanisms
  • Lack of multi-factor authentication

If proper access controls are not enforced, malicious users can gain entry to sensitive cloud resources.


2. Shared Infrastructure Vulnerabilities

Cloud environments are built on shared infrastructure. This means vulnerabilities affecting one customer's data or application can potentially impact other customers as well. This is closely related to the multi-tenancy model where multiple customers share the same computing resources.


3. Account Hijacking

If an attacker gains control over a user's cloud account credentials, they can:

  • Misuse the account to manipulate resources
  • Access sensitive data
  • Launch further attacks against other users or systems

4. Data Privacy and Security Risks

Organizations must ensure compliance with applicable data protection laws and regulations when storing data in the cloud. Key concerns include:

  • Where data is stored
  • Who has access to the data
  • What security protections the cloud provider offers
  • Cross-border data transfer issues, where data may be subject to laws of multiple countries

5. Trust and Reputation Issues

  • Customers entrust sensitive data to businesses using cloud services. A data breach or security incident can erode customer trust.
  • A security breach can also damage a company's reputation in the market, leading to customer churn and loss of business.

6. Effect on Company's ROI

A security breach or data loss can have a significant impact on a company's Return on Investment (ROI):

  • Direct costs: Legal fees, regulatory fines
  • Indirect costs: Reputational damage, customer churn, loss of business opportunities

7. Compatibility Issues

Migration to the cloud may cause compatibility issues with an organization's existing IT infrastructure, security needs, and organizational regulations. If not studied properly, this can introduce new security gaps.


8. Lack of Control

  • Lack of control over performance: The system quality may be unable to deliver excellent services at all times.
  • Lack of control over quality: Organizations must trust the quality standards that a cloud provider supplies over time, which may not always meet security expectations.

Summary Table

Threat IssueKey Risk
Inadequate IAMUnauthorized access
Shared InfrastructureCross-tenant vulnerabilities
Account HijackingCredential theft and misuse
Data PrivacyLegal non-compliance
Trust and ReputationCustomer loss
ROI ImpactFinancial and legal losses
CompatibilitySecurity gaps during migration
Lack of ControlPerformance and quality failures

In short, cloud security threat issues span technical, legal, financial, and organizational dimensions, all of which must be carefully addressed when adopting cloud services.

asked 2xavg 5 marks · 2080, 2079
Answer

What is load balancing? How is load balancing done? [5]

Load Balancing

Definition

Load balancing refers to the process of distributing a set of tasks over a set of resources with the aim of making their overall processing more efficient. It optimizes the response time and avoids unevenly overloading some compute nodes while other nodes are left idle. In the context of networking and cloud computing, it refers to distributing incoming network traffic across a group of backend servers.


How Load Balancing is Done

Load balancing is typically performed using the following approaches and techniques:

1. Load Balancer (Hardware/Software)

A dedicated load balancer sits between the client and the backend server pool. It receives all incoming requests and forwards them to an appropriate server based on a chosen algorithm.

Client Requests
      |
  [Load Balancer]
   /     |      \
[S1]   [S2]   [S3]   <-- Backend Servers

2. Common Load Balancing Algorithms

AlgorithmDescription
Round RobinRequests are distributed to each server in turn, one after another
Least ConnectionNew request is sent to the server with the fewest active connections
IP HashClient IP address is used to determine which server receives the request
Weighted Round RobinServers with higher capacity are assigned more requests proportionally
RandomRequests are assigned to servers randomly

3. Health Monitoring

The load balancer continuously monitors the health of backend servers. If a server goes down or becomes unresponsive, the load balancer stops sending traffic to it and redirects requests to healthy servers.

4. Session Persistence (Sticky Sessions)

In some cases, the load balancer ensures that a particular client is always directed to the same server during a session, maintaining session continuity.

5. DNS-Based Load Balancing

Multiple IP addresses are associated with a single domain name. DNS resolves the domain to different IPs for different clients, distributing the load geographically.


Benefits of Load Balancing

  • Improves response time and performance
  • Prevents any single server from becoming a bottleneck
  • Provides high availability and fault tolerance
  • Enables scalability by adding more servers to the pool
  • Keeps idle nodes from wasting resources

Summary: Load balancing distributes workloads evenly across multiple servers using algorithms like Round Robin or Least Connection, managed by a load balancer, ensuring efficiency, reliability, and optimal resource utilization.

asked 2xavg 5 marks · 2080, 2079
Answer

Discuss the core components of AppEngine. [5]

AppEngine (Google App Engine / GAE) is a cloud computing Platform as a Service (PaaS) that allows developers to create and run web applications on Google-managed data centers. It supports multiple languages including Go, PHP, Java, Pytho...

asked 2xavg 5 marks · 2080, 2079
Answer

Explain the storage services provided by Windows Azure. [5]

Windows Azure (now known as Microsoft Azure Platform) is a public cloud computing platform developed by Microsoft that provides IaaS, PaaS, and SaaS solutions including storage, networking, analytics, and virtual computing. Azure offers ...

asked 2xavg 8 marks · 2081, 2079
Answer

Define cloud computing service. Describe each of PaaS, SaaS and IaaS with suitable examples.[10]

Cloud Computing Service and Its Types (PaaS, SaaS, IaaS)


Definition of Cloud Computing Service

Cloud computing service refers to the delivery of hardware and software resources made available over the Internet as managed third-party services. Cloud services provide users access to advanced software applications, high-end networks, and server computers without requiring them to own or maintain physical infrastructure.

Cloud computing services are characterized by:

  • On-Demand Service: Users can arrange computing resources (processing power, storage, applications) without human intervention.
  • Broad Network Access: Services are accessible over the Internet from anywhere using various devices.
  • Measured Service: Services follow a pay-per-use pricing model; users pay only for what they consume.
  • Scalable Architecture: Users can scale up storage and hardware requirements according to need.
  • Location Independence: Services can be accessed from anywhere with an internet connection.

Examples of cloud computing services include virtual IT, software hosting, and network storage.


Types of Cloud Computing Services

Cloud computing is broadly categorized into three service models:


1. Infrastructure as a Service (IaaS)

Definition: IaaS provides virtualized computing resources over the internet. It allows users to rent and manage virtual machines (VMs), storage, and networking infrastructure on demand.

Key Characteristics:

  • Users have full control over the operating systems, applications, and configurations of the virtualized infrastructure.
  • The cloud provider manages the underlying physical hardware.
  • Resources are provisioned on a pay-per-use basis.
  • Highly scalable; users can increase or decrease resources as needed.

What the Provider Manages:

  • Physical servers, networking hardware, data centers

What the User Manages:

  • Virtual machines, operating systems, middleware, applications, data

Architecture Diagram:

User Controls:
  [Applications] --> [OS] --> [Virtual Machines]
Provider Controls:
  [Physical Servers] --> [Networking] --> [Storage]

Examples:

  • Amazon Web Services (AWS) - EC2 (Elastic Compute Cloud)
  • Microsoft Azure Virtual Machines
  • Google Compute Engine

Use Case: A startup company needs servers to host its web application but does not want to invest in physical hardware. It rents virtual machines from AWS, installs its preferred OS, and deploys its application.


2. Platform as a Service (PaaS)

Definition: PaaS provides a platform and environment that allows developers to build, test, deploy, and manage applications without worrying about the underlying infrastructure (servers, storage, networking).

Key Characteristics:

  • Provides a ready-to-use development environment.
  • The cloud provider manages the infrastructure AND the platform (OS, runtime, middleware).
  • Users focus only on writing and deploying their application code.
  • Supports the complete software development lifecycle (coding, testing, deployment).

What the Provider Manages:

  • Physical hardware, OS, runtime environment, middleware, databases

What the User Manages:

  • Application code and data only

Architecture Diagram:

User Controls:
  [Application Code] --> [Data]
Provider Controls:
  [Runtime] --> [Middleware] --> [OS] --> [Infrastructure]

Examples:

  • Microsoft Azure Platform (MAP) - formerly Windows Azure
  • Google App Engine
  • Heroku
  • AWS Elastic Beanstalk

Use Case: A software development team wants to build and deploy a web application quickly. Using Google App Engine (PaaS), they write their code and deploy it directly without managing servers or configuring operating systems.


3. Software as a Service (SaaS)

Definition: SaaS delivers fully functional software applications over the Internet on a subscription or pay-per-use basis. Users access the software through a web browser without installing or maintaining anything locally.

Key Characteristics:

  • The cloud provider manages everything: infrastructure, platform, and the application itself.
  • Users only interact with the software through a user interface (typically a browser).
  • Accessible from anywhere with an internet connection.
  • Updates and maintenance are handled by the provider.

What the Provider Manages:

  • Everything: hardware, OS, middleware, application, data storage

What the User Manages:

  • Only their own data and user settings

Architecture Diagram:

User Controls:
  [User Interface / Browser Access]
Provider Controls:
  [Application] --> [Data] --> [Runtime] --> [OS] --> [Infrastructure]

Examples:

  • Google Workspace (Gmail, Google Docs)
  • Microsoft Office 365
  • Salesforce CRM
  • Dropbox
  • Zoom

Use Case: A company uses Salesforce to manage its customer relationships. Employees log in through a browser and use the CRM software without installing anything. The provider handles all updates, security, and maintenance.


Comparison Table

FeatureIaaSPaaSSaaS
What is providedVirtualized infrastructureDevelopment platformReady-to-use software
User managesOS, apps, dataApps and data onlyOnly user data/settings
Provider managesHardware onlyHardware + OS + runtimeEverything
Target usersIT administratorsDevelopersEnd users
FlexibilityHighestMediumLowest
ExampleAWS EC2, Azure VMsGoogle App Engine, HerokuGmail, Office 365

Summary

Cloud computing services are delivered in three primary models. IaaS gives maximum control by providing raw virtualized infrastructure. PaaS abstracts the infrastructure and provides a development platform so developers can focus on code. SaaS provides complete, ready-to-use applications accessible via the internet. Microsoft Azure, for example, supports all three models, offering solutions for analytics, virtual computing, storage, and networking.

asked 2xavg 8 marks · 2081, 2079
Answer

Discuss the various types of virtualizations. [5]

Virtualization in cloud computing refers to the technique of creating virtual versions or representations of various computing resources, such as servers, storage devices, networks, and operating systems. It involves abstracting the phys...

asked 2xavg 5 marks · 2081, 2080
Answer

What are the challenges while adapting to the cloud computing environment? [5]

Challenges While Adapting to the Cloud Computing Environment

Cloud adoption, Involves several steps such as judging the existing environment, identifying suitable cloud solutions, planning the migration strategy, and executing the migration process. However, this process comes with several significant challenges:


1. Security and Privacy Concerns

One of the most critical challenges is ensuring the security and privacy of data stored in the cloud. When organizations move sensitive data to a cloud environment, they lose direct physical control over it. Threats such as unauthorized access, data breaches, and compliance violations become major concerns. Even though cloud providers employ robust security measures, public clouds are "not the safest option" for sensitive data.


2. Data Migration and Integration

Migrating existing data, applications, and workloads from on-premises infrastructure to the cloud is a complex and time-consuming process. Organizations must carefully plan the migration strategy to avoid data loss, downtime, or compatibility issues. Integrating legacy systems with new cloud-based services adds further complexity.


3. Cost Management

While cloud computing offers a pay-per-use pricing model, managing and optimizing costs can be challenging. Without proper monitoring, organizations may face unexpected expenses due to over-provisioning or underutilization of resources. Balancing cost efficiency with performance requirements requires careful planning.


4. Vendor Lock-in

Organizations that heavily rely on a single cloud provider's tools, APIs, and services may find it difficult to switch providers or move back to on-premises infrastructure in the future. This dependency on a specific vendor limits flexibility and can lead to increased costs over time.


5. Compliance and Regulatory Issues

Different industries and regions have specific legal and regulatory requirements regarding data storage and processing (e.g., GDPR, HIPAA). Ensuring that cloud services comply with these regulations is a major challenge, especially when data is stored across multiple geographic locations, as cloud services are location independent by nature.


Summary Table

ChallengeKey Issue
Security and PrivacyData breaches, unauthorized access
Data MigrationComplexity, downtime, compatibility
Cost ManagementUnexpected expenses, over-provisioning
Vendor Lock-inLimited flexibility, dependency
ComplianceLegal and regulatory requirements

Successful cloud adoption requires thorough planning, collaboration, and continuous monitoring to overcome these challenges and fully leverage the benefits of cloud computing.

asked 2xavg 5 marks · 2081, 2080
Answer

How and why cloud applications are designed using loosely coupled components? [5]

Loose coupling is an architectural principle where individual components (services) of an application interact with each other through well-defined interfaces and contracts, with minimal dependency on each other's internal implementation...

asked 2xavg 5 marks · 2081, 2079
Answer

Describe the various scientific applications of cloud computing. [5]

Cloud computing has become a powerful platform for scientific research and discovery due to its scalability, on-demand resources, and broad network access. The major scientific applications are described below: --- Cloud computing enable...

Study every one of these with model answers, flashcards, and MCQs.

Open CSC481 study modes