Cyberstudy
PDF p.112 In progress

Architecture and Infrastructure Concepts

Open PDF at p.112 20 flashcards

Summary

PDF p.112

Network architecture involves selecting and placing media, devices, protocols/services, and data assets. Network infrastructure supports basic connectivity, while network applications run on this infrastructure to support business activities. Data assets are created, stored, and transferred as a result of business activities. Secure network infrastructure and application architecture support secure business workflows, ensuring confidentiality, integrity, and availability.

In plain words

Supplementary — not from your PDF

Network architecture is the plan for which cables, devices, protocols, services and data go where. The infrastructure provides basic connectivity, applications run on top of it, and data assets are what the business creates and moves. A secure architecture supports business workflows while protecting confidentiality, integrity and availability.

Detailed explanation

PDF p.112
  • Network Architecture
    • Definition: Selection and placement of media, devices, protocols/services, and data assets.
    • Components
      • Network Infrastructure: Media, appliances, and addressing/forwarding protocols supporting basic connectivity.
      • Network Applications: Services running on the infrastructure to support business activities (e.g., processing invoices, sending email).
      • Data Assets: Information created, stored, and transferred due to business activities.
  • Secure Network Infrastructure and Application Architecture
    • Purpose: Support secure business workflows, ensuring confidentiality, integrity, and availability.
    • Example Workflow: Accepting customer orders from a web store.
  • Email Provisioning Systems
    • Access
      • Client Device: Must access the network via a physical channel and obtain a logical address.
      • User Authentication: Users must be authenticated and authorized to use the email application.
      • Unauthorized Access: Unauthorized users and devices must be denied access.
    • Email Mailbox Server
      • Data Storage: Stores data assets and must be accessed only by authorized clients.
      • Availability: Must be fully available and fault-tolerant to support genuine users.
      • Dependencies: Must run with minimal dependencies over resilient network infrastructure.
    • Mail Transfer Server
      • Untrusted Hosts: Connects with untrusted Internet hosts, requiring controlled communications between untrusted networks and trusted LAN.
      • Policy-Based Controls: Data or software leaving or entering the network must be subject to policy-based controls.

Important terms

taken from the text above
Network Architecture
Selection and placement of media, devices, protocols/services, and data assets.
Network Infrastructure
Media, appliances, and addressing/forwarding protocols supporting basic connectivity.
Network Applications
Services running on the infrastructure to support business activities (e.g., processing invoices, sending email).
Data Assets
Information created, stored, and transferred due to business activities.
Example Workflow
Accepting customer orders from a web store.
Client Device
Must access the network via a physical channel and obtain a logical address.
User Authentication
Users must be authenticated and authorized to use the email application.
Unauthorized Access
Unauthorized users and devices must be denied access.
Data Storage
Stores data assets and must be accessed only by authorized clients.
Availability
Must be fully available and fault-tolerant to support genuine users.
Dependencies
Must run with minimal dependencies over resilient network infrastructure.
Untrusted Hosts
Connects with untrusted Internet hosts, requiring controlled communications between untrusted networks and trusted LAN.
Policy-Based Controls
Data or software leaving or entering the network must be subject to policy-based controls.

Examples & real-world scenarios

Supplementary — not from your PDF
  • A web store: customers reach the site, orders go to a database, and staff process them.
  • An email system: clients, a mailbox server, and a mail transfer server facing the Internet.
  • Placing a database server where only application servers can reach it.

Scenario

A company plans a new email service. Clients need network access and must authenticate. The mailbox server must be fault-tolerant and reachable only by authorized clients. The transfer server talks to untrusted Internet hosts, so traffic in and out is policy-controlled.

Common mistakes

Supplementary — not from your PDF
  • Thinking of architecture as just hardware. It also covers protocols, services and data placement.
  • Designing connectivity first and adding security later, instead of designing it around the workflow from the start.

Practical skills

Supplementary — not from your PDF
  • Break a business workflow into infrastructure, applications and data assets.

What I should remember

Key Points PDF p.112
  • Network Architecture
    • Selection and Placement: Media, devices, protocols/services, data assets.
    • Components: Infrastructure, applications, data assets.
  • Secure Network Infrastructure
    • Support Workflows: Ensures confidentiality, integrity, availability.
    • Example: Customer order processing.
  • Email Provisioning Systems
    • Access
      • Client Device: Physical channel, logical address.
      • User Authentication: Authorized access.
      • Unauthorized Access: Denied access.
    • Email Mailbox Server
      • Data Storage: Authorized access only.
      • Availability: Fault-tolerant, minimal dependencies.
    • Mail Transfer Server
      • Untrusted Hosts: Controlled communications.
      • Policy-Based Controls: Data/software control.