Other Infrastructure Concepts - CompTIA Security+ SY0-701 - 3.1

Security+ Infrastructure Concepts

This Security+ lesson reviews infrastructure choices and technologies, focusing on their security implications.

Cloud and On-Premises Infrastructure

Cloud services can centralize services and reduce the need to maintain local hardware and facilities. On-premises systems offer more direct control over data, equipment, and security decisions, but require organizations to purchase, install, maintain, and staff their own systems. Neither location is inherently safe from attackers.

Centralized Security Management

Organizations with systems spread across sites, cloud providers, and operating systems may use a single console to monitor users, devices, applications, alerts, and logs. This can improve visibility and simplify maintenance. However, the console can become a single point of failure and may require more computing and storage resources as the organization grows.

Virtualization and Containers

• Virtualization: A hypervisor runs on physical infrastructure and manages virtual machines (VMs). Each VM has its own guest operating system and applications, which can create overhead when multiple VMs run the same operating system.
• Containerization: Container software, such as Docker, runs isolated applications that share a host operating system. Containers can be added, removed, or replaced efficiently, but applications must be compatible with the host operating system.

Both approaches can be useful. The right choice depends on the applications and deployment needs.

Internet of Things (IoT)

Connected devices can provide automation and monitoring at home and work. Examples include thermostats, lighting, video doorbells, wearables, and air-quality sensors. Their convenience brings security risks: a compromised IoT device may give an attacker a path into other networked systems.

SCADA and Industrial Control Systems

SCADA connects and monitors industrial equipment, allowing technicians to operate it from a centralized control room. Because a compromise could disrupt critical services, such as power generation or refining, these systems should be strongly protected and segmented from outside networks.

Real-Time Operating Systems (RTOS)

Unlike general-purpose, non-deterministic operating systems, deterministic systems are designed to respond predictably to time-sensitive events. Vehicle braking is one example. Because delays or compromise can have immediate consequences, these systems tend to be self-contained and difficult to access.

Embedded Systems

Embedded systems combine purpose-built hardware and software to perform a specific function, such as controlling traffic lights or operating medical monitoring equipment. They generally are not designed to accept arbitrary applications or provide the broad access found in general-purpose computers.

High Availability (HA)

High availability keeps services running through component failures, often by using systems that fail over automatically. Redundancy means a backup is available, but it may require manual setup or activation. HA can also use active systems that continue handling traffic if another system fails.

Greater availability generally requires more equipment and infrastructure, so organizations must weigh the cost against the risk of downtime.

Reviews, Guides, or Tutorials

This is an instructional overview for CompTIA Security+ SY0-701. It explains infrastructure concepts and security trade-offs; it does not review a specific product.

Main Speaker or Source

Professor Messer, presenting the Security+ training lesson.