Which of the following is the most closely associated with segmenting compute resources within a single cloud account?

A Virtual Private Cloud (VPC) is a logically isolated section of a public cloud where an organization can launch resources in a defined virtual network. It is the fundamental construct for creating network segments, typically through the use of subnets, to isolate and organize compute resources like virtual machines. This segmentation is a core security and management practice, allowing for granular control over traffic flow and resource access within a single cloud account. The VPC provides the overarching boundary for this segmentation.

A. Network security group: This is a virtual firewall that applies traffic filtering rules to resources within network segments; it does not create the segments themselves.

B. IaaS: Infrastructure as a Service is a cloud service model that provides virtualized computing resources, not the specific method used to segment them.

D. Hybrid cloud: This is a deployment model combining public and private clouds, not a technique for segmenting resources within a single public cloud account.

1. Amazon Web Services (AWS) Documentation. "What is Amazon VPC?" Amazon VPC enables you to launch AWS resources into a virtual network that you've defined. You have complete control over your virtual networking environment

including selection of your own IP address range

creation of subnets

and configuration of route tables and network gateways. (Retrieved from AWS VPC User Guide

"VPC basics" section).

2. Microsoft Azure Documentation. "What is Azure Virtual Network?" Azure Virtual Network (VNet) is the fundamental building block for your private network in Azure... VNet enables many types of Azure resources... to securely communicate with each other... You can segment your virtual network into one or more subnets and allocate a portion of your virtual network's address space to each subnet. (Retrieved from Microsoft Azure Virtual Network documentation

"Overview" and "Communicate between Azure resources" sections).

3. Cornell University

Department of Computer Science. CS 5412: Cloud Computing

Lecture 10: Virtual Networks. This courseware explains that Virtual Private Clouds (VPCs) provide logical isolation and are segmented into subnets. "A VPC is a logically isolated portion of the cloud provider’s network... Within a VPC

we can create one or more subnets

each corresponding to a range of IP addresses." (Slide 12-15).

4. Mell

P.

& Grance

T. (2011). The NIST Definition of Cloud Computing (NIST Special Publication 800-145). While this document defines IaaS (B) and Hybrid Cloud (D)

it implicitly supports the role of VPCs by describing the need for network control and isolation which VPCs provide within the IaaS model. It does not

however

describe VPCs as a deployment or service model themselves. (Section: "Service Models" and "Deployment Models").