The document discusses common myths surrounding cloud security, emphasizing that users share responsibility for data protection rather than solely relying on cloud providers. It highlights misconceptions such as the belief that cloud environments are inherently secure and overlooks the necessity of implementing security measures like backups and robust access controls. Additionally, the text stresses the importance of understanding the complex nature of cloud infrastructure and the necessity for informed engagement with cloud services to counteract misinformation.

1. Please read the below discussion post and provide response in
75 to 100 words
Post#1
Cloud security plays an important role in every field like
business and personal world. With a large number of benefits it
has some myths also. Cloud security is solely the cloud
provider’s responsibility: a standard misconception is that the
cloud provider automatically takes care of all the safety needs
of the customer’s data and process while in the cloud. Password
policies, release management for software patches, management
of user roles, security training of staff, and data management
policies are all responsibilities of the purchasers and a minimum
of as critical because the security is done by the general public
cloud provider. While users are hardening internal security,
don’t assume that cloud provider backs up data and will be able
to restore it just in case of a security breach. It is instrumental
and important that users simply implement a backup solution
that backs up data that's hosted on the cloud to an onsite backup
or to a different cloud provider. In addition, in case of a
security breach, user will get to restore data from backups.
“There is indeed a good case to make for fair taxation and that
uneven effective tax rates can distort competition and lead to
smaller tax revenues” (Bauer, 2018).
Don’t get to manage the cloud: many people believe that since
the cloud infrastructure is usually basically just a managed
service, that the safety of the services is additionally managed.
Many cloud based systems are left inadvertently unsecured
because the customer doesn't know that they have to try to
something to secure them, as they assume that the provider has

2. done what an in-house staff would traditionally have done by
default. Cloud security requires an equivalent discipline for
security of any data center. Cloud data centers are as resilient as
any, but the weakness comes if the policies, processes and tools
aren’t regularly monitored by the IT operations staff responsible
(Determann, 2016).
Ignore BYOD and be more secure: not supporting and
implementing a BYOD policy does not mean an enterprise will
be less at risk of a data breach, SVP of cloud and hosting sales.
The BYOD movement is here to stay. Some experts recommend
deploying a mobile content management (MCM) solution, as
protecting the data will be what ultimately defines business’
security and compliance requirements. “Despite the Australian
Federal Government's ‘cloud-first’ strategy and policies, and
the Queensland State Government's ‘digital-first’ strategy,
cloud services adoption at local government level has been
limited—largely due to data security concerns” (Ali, Shrestha,
Chatfield, & Murray, 2020). Cloud data isn’t saved on mobile
devices: I still hear people speaking about cloud deployment as
if using this service means users are not saving any enterprise
data on mobile devices, which this might make device data
protection a moot point. Apps that are connecting to devices are
always caching data, which cached data is stored on your
employees' mobile devices. This data can be breached and
hacked and therefore must be protected.
Single tenant systems are more secured than multi-tenant:
Multitenant systems ensure that software updates, including
security patches, are applied to all customers simultaneously.
With single-tenant systems, software vendors are required to
update individual customers’ virtual machines. Cloud security
provides an additional level of security to the network and
protects data of personal and professional network (Martinez,
Cano, & Vilajosana, 2020). Multi-tenant systems are safer than
single tenant: there are not any absolutes in cloud security. The

3. complete opposite statement regarding cloud tenancy also can
be viewed as a myth. “Blockchain is an eccentric technology, at
the same time, the most vaunted, least understood and most
disrupting technology of the current era” (Chitranshi, &
Chawla, 2020).
Post#2
Cloud computing is one of the most innovative development in
the field of computer science. Cloud computing although covers
variety of services but software as a service, platform as a
service and infrastructure as a service are the three most widely
used and known. However the list contains many other such as
function as a service, backend as a service and container as a
service and the designer, developer and related professionals
use the service as per need. “While moving towards the concept
of on-demand service, resource pooling, shifting everything on
the distributive environment, security is the major obstacle for
this new dreamed vision of computing capability” (Singh,
2016).
The outside view of the cloud IT infrastructure looks simple and
easily understandable but the background of it is very complex
and requires efficient knowledge about the cloud to deal with
the complex infrastructure. With the advances in technology the
demand for serverless function and facility increases.
Organizations move from on-site to the cloud and while doing
so the security is compromised and not given enough attention
which results in a decline in the security of the cloud service.
Cloud security tools use various steps like access control,
permission control, audit, authorities, etc.
“Cloud computing enables cost-effective and scalable growth of

4. IT services that can enhance government services” (Ali, 2020).
Those who are well aware of cloud service and have proper
knowledge about the same don’t indulge in any myths but those
who lack information make false statements about the cloud
which it gets known as the cloud security myths. The major
myth is that the cloud is not secure and the reason why people
believe in this myth is because of the cases of cloud
compromise and attack. After taking appropriate measures and
implementation security tools along with the security
management from the provider side it can be stated that the
cloud is secure. Some people on the other hand believe that the
cloud is perfectly secure, which is again a false myth. No
security tool or precaution can guarantee perfect security in any
case.
Another myth states that on-site organization is more secure
than the cloud, however depends upon the security steps taken
on-premise and on cloud both. When moving to the cloud,
special care needs to be taken to ensure the information is
secure from any attack. Cloud service providers are the
organizations that indulge in providing the concerned cloud
service to those who sign for it. Cloud service providers are
many in number and have their headquarters based in different
locations thus the statement that all cloud service providers are
the same is a false myth. Lack of knowledge about cloud
computing and fake statements being made by people has
resulted in cloud security myths. “Trust is another security issue
in the cloud, the establishment of trust might become a key
establishment of the better relationship among the users and
service provider in the cloud computing” (Seemakurti, n.d.).