Courseiva
CV0-004Chapter 1 of 18Objective 1.1

Introduction to Cloud Computing Concepts

Cloud computing lets you use computing resources — servers, storage, databases, and networking — over the internet, paying only for what you use. Before cloud computing, every business had to buy and maintain its own physical hardware, which was expensive and inflexible. Understanding cloud computing concepts is crucial for the CV0-004 exam because the entire test focuses on managing and deploying cloud environments, not on running a traditional data centre.

12 min read
Beginner
Updated Jul 23, 2026
Reviewed by Johnson Ajibi· Senior Network & Security Engineer · MSc IT Security

A simple way to picture Introduction to Cloud Computing Concepts

The Personal Chef Analogy

A personal chef is a service you hire to handle all your cooking needs. You don't own the kitchen, the pots, or the pans; you just tell the chef what you want to eat and when. The chef manages everything else: shopping for ingredients, chopping vegetables, cooking, and even cleaning up. This is exactly how cloud computing works. With a personal chef, you pay a monthly fee instead of buying a stove, fridge, and all the cookware yourself. You get exactly the meals you ask for, and if you want a bigger dinner party next week, the chef scales up the amount of food without you needing to buy a bigger kitchen. You don't have to worry about fixing a broken oven or scrubbing greasy pans.

In the old IT world, every company had to build its own 'kitchen' — its own physical servers, storage, and networking equipment. They had to hire a team to maintain everything, just like a restaurant owner might. With cloud computing, that company becomes the restaurant customer: it pays a provider (like Amazon Web Services or Microsoft Azure) to handle the infrastructure, and it just uses what it needs. If the company needs double the computing power for one afternoon, the provider makes it available instantly, just like a chef can cook for thirty people on short notice. The company doesn't care where the servers are, how they are patched, or when the hard drives fail; it just uses the compute power on demand. That is the heart of the cloud model: someone else owns the kitchen, you just order the meals.

How It Actually Works

Cloud computing is a model for delivering on-demand IT resources over the internet. Instead of buying, owning, and maintaining physical data centres and servers, you access technology services from a cloud provider as you need them. Think of it as renting a house instead of buying one: you avoid the big upfront cost, you do not have to fix the roof, and you can move out whenever you want. The key characteristics, defined by the National Institute of Standards and Technology (NIST), are essential to understand for the CV0-004 exam. They are: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

On-demand self-service means you can provision computing resources like virtual machines (VMs) or storage without needing to talk to a human at the provider. You log into a web portal, click a few buttons, and the resource is ready in minutes. Broad network access simply means those resources are available over the network — typically the internet — and can be accessed from any device: a laptop, a phone, a tablet. Resource pooling is the provider's ability to serve many customers from the same physical hardware, using something called multi-tenancy. Multi-tenancy means your virtual server lives on the same physical machine as other customers' virtual servers, but your data is completely isolated from theirs. This is what drives down costs: the provider buys one big server and splits it among hundreds of customers.

Rapid elasticity is the ability to scale resources up or down automatically based on demand. If your website gets a sudden spike in visitors, cloud resources can add more virtual servers to handle the load, and then remove them when traffic drops. This is often called auto-scaling. Measured service means that usage is metered, like a utility bill. You pay for exactly how much CPU time, storage space, or network bandwidth you consume. Cloud providers can be divided into three main service models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).

IaaS gives you the most control. You rent virtual machines, storage, and networks, but you are responsible for managing the operating system, applications, and middleware. It is like renting an empty apartment: you bring your own furniture and you paint the walls yourself. PaaS provides a platform to develop and run applications without worrying about the underlying infrastructure. The provider manages the operating system, runtime, and middleware. You just deploy your code. This is like renting a fully furnished office: you bring your laptop and your work files, but the desks, chairs, and internet connection are already set up. SaaS delivers a complete application that you access through a browser. You do not manage anything; you just use the software. Examples include Gmail, Microsoft 365, and Salesforce.

Another critical concept is the deployment model. The three primary models are public cloud, private cloud, and hybrid cloud. A public cloud means the provider's infrastructure is shared among many different customers over the public internet. A private cloud is used exclusively by a single organisation, either hosted on-premises or by a third party. A hybrid cloud combines both, allowing data and applications to move between them. For example, a bank might keep sensitive customer data in a private cloud but use public cloud resources for less sensitive development work.

Why does cloud computing exist? It replaces the traditional model where every company ran its own data centre. Traditional data centres required huge upfront capital expenditure (CAPEX) to buy servers, networking gear, and cooling systems. They also needed a team of IT staff to patch, maintain, and troubleshoot hardware. This was wasteful: most servers sat at 15-30% utilisation because you had to buy enough capacity for peak demand, even though most of the time you needed far less. Cloud computing flips this model to operational expenditure (OPEX): you pay as you go, and the provider handles utilisation by pooling resources across thousands of customers. This is known as economies of scale, where the provider's massive purchasing power and efficiency make computing cheaper for everyone.

Finally, the concept of the shared responsibility model is vital. In cloud computing, security and management are a partnership. The cloud provider is responsible for security of the cloud — protecting the physical data centres, networking infrastructure, and hypervisors. The customer is responsible for security in the cloud — configuring firewalls, managing identity and access, and patching their own operating systems in IaaS. In PaaS and SaaS, the provider takes on more of that responsibility. The CV0-004 exam will test your understanding of this split, especially for scenarios involving compliance and data protection.

A top-down view of cloud computing concepts: the three main branches are the NIST essential characteristics, the three service models (IaaS, PaaS, SaaS), and the four deployment models (public, private, hybrid, community).

Walk-Through

1

Identify the Business Need

Before using the cloud, you must define what you need: do you need virtual machines (IaaS) to run a legacy application, a platform to build new software (PaaS), or a ready-to-use application (SaaS)? This decision determines which service model and deployment model you choose.

2

Choose a Cloud Provider and Service Model

Select a provider such as AWS, Microsoft Azure, or Google Cloud Platform. Then decide whether you will use IaaS, PaaS, or SaaS based on the level of control and management you want. For example, if you want full OS control, choose IaaS; if you only want to deploy code, choose PaaS.

3

Provision Resources via a Management Console or API

You log into the provider's web portal (like the AWS Management Console) or use their application programming interface (API) to create resources. You define the virtual machine size, storage amount, network settings, and security rules. This step replaces the old process of ordering, racking, and cabling physical servers.

4

Configure Security and Access Controls

You set up identity and access management (IAM) to define who can access what. For example, you create user accounts with specific permissions, configure virtual firewall rules (security groups), and encrypt data at rest and in transit. This step is critical because the cloud is accessible from anywhere, so misconfigured security is a common risk.

5

Monitor Usage, Optimise Cost, and Scale

Use the provider's monitoring tools (like AWS CloudWatch) to track CPU usage, memory, and network traffic. Set up auto-scaling rules to add or remove resources automatically. Regularly review billing dashboards to identify idle resources and right-size instances. This continuous optimisation is what keeps the cloud cost-effective and aligned with demand.

6

Backup and Implement Disaster Recovery

Configure automated backups for databases and storage volumes. Enable multi-region replication if your application requires high availability. Test a disaster recovery plan by simulating a failure and confirming that your resources fail over to a secondary region. This step ensures business continuity, which is a core reason companies move to the cloud.

What This Looks Like on the Job

Imagine a mid-sized e-commerce company called 'Urban Quill' that sells handmade notebooks and pens. Up until last year, Urban Quill ran its own on-premises data centre in a small room at its office. The company had a rack of servers, a storage area network (SAN), and a firewall. The IT team of two people spent their days patching servers, replacing failed hard drives, and managing backups. Then the company launched a new product line, and a viral TikTok video drove 50,000 visitors to the website in one hour. The on-premises servers could not handle the load; the website crashed, and Urban Quill lost thousands of pounds in sales.

The company decided to migrate to the cloud. Here is what the IT team actually did, step by step. First, they chose Amazon Web Services (AWS) as their provider and set up a cloud account. They used the AWS Management Console to create a virtual private cloud (VPC), which is a logically isolated section of the AWS cloud where they define their own IP address range and subnets. This is the virtual equivalent of plugging a cable into their network. Next, they launched a series of Amazon EC2 instances, which are virtual machines. They selected an operating system (Ubuntu Linux), chose a VM size with 4 virtual CPUs and 16 GB of RAM, and configured a security group — think of it as a virtual firewall — to allow only HTTP and HTTPS traffic from the internet.

Then they installed their web application software on the virtual machines and connected them to an Elastic Load Balancer (ELB). The load balancer distributes incoming traffic across multiple VMs automatically. Urban Quill also set up auto-scaling: they configured a rule that says if the average CPU utilisation across all VMs exceeds 70% for five minutes, the cloud automatically spins up two additional EC2 instances. When traffic drops below 30% utilisation, it automatically terminates the extra instances. This eliminated the crashing problem entirely. They moved their database to Amazon RDS (Relational Database Service), a managed PaaS solution. Instead of patching the database server themselves, they chose a maintenance window and let AWS apply updates automatically. They also enabled automated backups with point-in-time recovery, which means they can restore the database to any second within the last 35 days.

The key work the IT team now does is no longer about racking servers. Their daily tasks shifted to:\ - Configuring IAM (Identity and Access Management) policies to control who can launch or terminate instances.\ - Setting up CloudWatch alarms to monitor instance health and cost anomalies.\ - Writing Infrastructure as Code (IaC) templates using AWS CloudFormation to define all resources in a reusable, version-controlled text file.\ - Reviewing cost reports to optimise reservations and right-size instances.\ The result: Urban Quill saved 40% on IT costs in the first year, saw zero downtime during the next viral event, and the two IT staff now focus on developing new features instead of replacing dead hard drives.

How CV0-004 Actually Tests This

The CV0-004 exam objective 1.1, 'Explain cloud computing concepts', is foundational. Do not skip it, because later objectives build on this vocabulary. The exam expects you to know the NIST definitions cold. You will see questions that give a scenario and ask which characteristic it describes. For example: 'A company can provision a virtual server in minutes without contacting the provider. Which cloud characteristic is this?' The answer is on-demand self-service. The most common trap is confusing rapid elasticity with scalability. Elasticity is the automatic scaling up and down to match demand in real time; scalability is the ability to grow over time, often manually. The exam loves to compare IaaS, PaaS, and SaaS. You will get a question like: 'A developer wants to deploy a web app without managing the underlying OS. Which service model should they choose?' The correct answer is PaaS.

Another heavy focus area is the deployment models: public, private, hybrid, and community cloud. Community cloud is a less common but testable point where infrastructure is shared by several organisations with a common goal (e.g., a group of government agencies). The exam will try to trick you by describing a hybrid cloud when the answer is actually a public cloud, or vice versa. Memorise this: hybrid cloud always involves at least two distinct cloud types (e.g., public and private) that are connected. A single private cloud is not hybrid. The shared responsibility model is guaranteed to appear in at least one question. They will list a task like 'patching the operating system' and ask who is responsible in each model. In IaaS it is the customer; in PaaS it is the provider (for the platform layer); in SaaS it is always the provider.

Specific exam topics to memorise:\ - The five NIST essential characteristics.\ - The three service models (IaaS, PaaS, SaaS) and what each manages.\ - The four deployment models (public, private, hybrid, community).\ - The difference between CAPEX and OPEX, and why the cloud shifts spending to OPEX.\ - Economies of scale and how multi-tenancy reduces costs.\ - The definition of measured service and the 'pay-as-you-go' billing model.

Traps: They often include 'vertical scaling' as a wrong answer when they mean 'horizontal scaling'. Vertical scaling means making a single VM more powerful (more CPU/RAM). Horizontal scaling means adding more VMs. Cloud computing's real power is horizontal scaling, but the exam knows beginners confuse the two. Also, watch out for questions that ask about 'cloud bursting' — this is a hybrid cloud technique where an application normally runs in a private cloud but bursts into a public cloud during peak demand. That is distinct from load balancing within a single public cloud. Finally, do not forget the term 'metering' — measured service means usage is metered, not just monitored. The correct answer pattern is almost always the most standard definition from NIST, not a vendor-specific feature.

Key Takeaways

The five essential characteristics of cloud computing are on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service.

Infrastructure as a Service (IaaS) provides virtualised computing resources where you manage the OS and applications; the provider manages the physical hardware.

Platform as a Service (PaaS) provides a managed platform so you can deploy code without managing the underlying servers, OS, or middleware.

Software as a Service (SaaS) delivers a complete application that you access via a browser; you manage nothing except your data and user settings.

The shared responsibility model means the provider secures the cloud infrastructure, and the customer secures their data, configurations, and access within the cloud.

Cloud computing shifts IT spending from capital expenditure (CAPEX) to operational expenditure (OPEX), enabling pay-as-you-go pricing.

Hybrid cloud combines two or more distinct cloud environments (e.g., public and private) that remain unique but are connected for data and application portability.

Rapid elasticity allows cloud resources to scale automatically in response to demand, while scalability refers to the ability to increase capacity over time.

Resource pooling and multi-tenancy let providers serve many customers from shared physical hardware, achieving economies of scale that lower costs for everyone.

Community cloud is a multi-tenant cloud infrastructure shared by several organisations with a shared mission or compliance requirements.

Easy to Mix Up

These come up on the exam all the time. Here's how to tell them apart.

IaaS

You manage the operating system, middleware, and applications.

You have full control over the virtual machine configuration.

You are responsible for patching the OS and managing security at the OS level.

PaaS

The provider manages the OS, middleware, and runtime environment.

You only deploy and manage your application code.

You are responsible for application-level security only; the provider handles OS patching.

Public Cloud

Infrastructure is owned by a third-party provider and shared among multiple tenants.

Accessible over the public internet.

Lower upfront cost; pay-as-you-go pricing.

Private Cloud

Infrastructure is used exclusively by a single organisation.

Can be hosted on-premises or by a third party, but not shared.

Higher upfront cost but greater control over data residency and compliance.

Elasticity

Automatic, real-time resource adjustment based on current demand.

Best for unpredictable or spiky workloads.

Resources are added and removed dynamically, often by the cloud provider's auto-scaling features.

Scalability

Planned or manual increase of capacity over time.

Best for predictable growth, such as adding more users over months.

Resources are added permanently or for a long period, not automatically removed.

On-Premises Data Centre

Requires significant capital expenditure for hardware.

Hardware utilisation is typically low (15-30%) because you must provision for peak demand.

Maintenance, patching, and cooling are the customer's full responsibility.

Cloud Data Centre

Operational expenditure model; pay only for what you use.

High utilisation (80-90%) due to multi-tenancy and resource pooling.

Maintenance and physical security are the provider's responsibility.

Watch Out for These

Mistake

The cloud is just another name for the internet, so cloud computing means using Google or sending emails.

Correct

Cloud computing is a specific model for delivering on-demand IT resources over the internet, not a synonym for the internet itself. It involves renting compute, storage, and networking services from a provider.

People hear 'the cloud' and mentally map it to 'the internet' because marketing uses the term loosely. The nuance of utility computing is lost in everyday language.

Mistake

If I migrate to the cloud, I do not need any IT staff anymore.

Correct

Cloud computing reduces the need for hardware maintenance staff, but it increases the need for cloud architects, security engineers, and cost optimisation specialists. The role shifts, but does not disappear.

The shared responsibility model means the customer still manages operating systems, identity, network configurations, and application security. Many beginners think the cloud is a fully managed solution across all layers.

Mistake

Cloud computing is always cheaper than on-premises data centres.

Correct

Cloud computing can be cheaper for variable workloads and when you optimise usage, but for predictable, steady-state workloads it can be more expensive than buying your own hardware over a three-year period.

Vendors heavily market cost savings. Beginners forget that using the cloud inefficiently — leaving idle VMs running 24/7 — can cost more than owning the same hardware.

Mistake

Multi-tenancy means my data is shared with other customers, which is a security risk.

Correct

Multi-tenancy means your virtual resources run on the same physical hardware as other customers, but they are logically isolated through hypervisor separation and network virtualisation. Your data is not intermingled.

The word 'tenancy' sounds like sharing a room. People imagine their files sitting next to strangers' files. The actual implementation uses strict isolation mechanisms that make this safe.

Mistake

Public cloud and community cloud are the same thing because both involve multiple organisations.

Correct

Public cloud is open to the general public; community cloud is shared by a specific group of organisations with common concerns (e.g., regulatory compliance). The key difference is the membership requirement.

Both models involve multiple tenants. Beginners see 'shared' and assume they are identical, missing the nuance of the community cloud's restricted membership.

Do You Actually Know This?

Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.

Frequently Asked Questions

What is the difference between public, private, and hybrid cloud?

A public cloud is owned by a third-party provider and serves many customers over the internet. A private cloud is used exclusively by one organisation, either on-premises or hosted. A hybrid cloud connects a public and a private cloud, allowing data and applications to move between them.

Do I need to know how to manage physical servers to work with cloud computing?

Not for most cloud roles. You focus on configuring virtual resources through software interfaces. However, understanding the underlying hardware concepts (CPU, RAM, storage, networking) helps you make better decisions about instance sizes and performance.

Is cloud computing secure?

Security depends on the shared responsibility model. The provider secures the physical data centres and hypervisors. You are responsible for securing your data, configuring firewalls, managing access, and patching your operating systems. Misconfigurations by customers are the leading cause of cloud security breaches, not provider failures.

What is the difference between IaaS, PaaS, and SaaS?

IaaS provides virtual machines and storage that you manage. PaaS provides a managed platform where you deploy code without managing servers. SaaS provides fully managed software you use through a browser, like Gmail or Salesforce.

What does 'elasticity' mean in cloud computing?

Elasticity is the ability of a cloud system to automatically add or remove resources in real time to match the current demand. For example, if your website traffic triples, the cloud automatically launches more virtual servers, and when traffic drops, it removes them. This is different from scalability, which is the manual or planned ability to grow over time.

How does cloud computing save money?

Cloud computing replaces large upfront hardware purchases (CAPEX) with a pay-as-you-go model (OPEX). You only pay for what you use, and the provider achieves economies of scale by sharing hardware across many customers, which lowers the per-unit cost. This is most cost-effective for variable workloads, not for steady-state, predictable usage.

What is multi-tenancy?

Multi-tenancy is a principle where the cloud provider's physical hardware runs virtual resources for many different customers simultaneously. Each customer's data and processes are isolated by the hypervisor and network virtualisation, so they cannot access each other's resources. This is how providers achieve resource pooling and lower costs.

Terms Worth Knowing

Keep going

You've finished Introduction to Cloud Computing Concepts. Continue through the CV0-004 study guide to build a complete picture of the exam.

Done with this chapter?