🚧 Under construction — VoTechWorks is being built. A free tech program — complimentary, as our commitment to get America working.
voTechWorksGrade 13 · a vocational technology learning center, by urbanicity
newSchoolWorks.com › VoTechWorks › Technology & Design › IT Support / Networking › Cloud Basics for IT Support and Networking › Lesson 1
TEC-ITS43-05 · Lesson 1 · 10.5 clock hours · theory

Cloud Computing Fundamentals and NIST Definitions

Objective. Students will accurately define the five essential characteristics, three service models, and four deployment models of cloud computing as described in NIST SP 800-145, and match each to a workplace scenario.

⚠ Pending professional review

This lesson, its worked examples and its practice questions has not yet been verified by an industry-certified professional or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.

VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.

What Is Cloud Computing?

Cloud computing means delivering computing resources—servers, storage, databases, networking, software, and more—over the internet ("the cloud") on demand. Instead of buying and maintaining physical hardware in a back room, organizations rent what they need and pay only for what they use. To avoid confusion caused by marketing hype, the National Institute of Standards and Technology (NIST) published a concise, authoritative definition in NIST Special Publication 800-145. This two-page document is the accepted industry baseline, and both CompTIA A+, Network+, and the Cisco CCST/CCNA exams expect you to know it.

---

The Five Essential Characteristics

NIST SP 800-145 states that a true cloud service must exhibit all five of the following characteristics.

1. On-Demand Self-Service

A user can provision computing capabilities—such as server time or storage—automatically, without requiring human interaction from the service provider. Example: a technician spins up a virtual machine in a web portal at 2 a.m. without calling anyone.

2. Broad Network Access

Capabilities are available over the network and accessed through standard mechanisms (web browsers, mobile apps, command-line tools) that work across a wide variety of client devices. This is why a salesperson can reach company files from a laptop in a hotel or a smartphone on the road.

3. Resource Pooling

The provider pools computing resources to serve multiple customers using a multi-tenant model. Physical and virtual resources are dynamically assigned and reassigned based on demand. Individual customers generally do not know or control exactly which physical machine they are using at any moment.

4. Rapid Elasticity

Capabilities can be scaled out or in quickly—sometimes automatically—to match demand. From the user's perspective, the resources often appear unlimited and can be purchased in any quantity at any time. A retail website that scales up on Black Friday and scales back down in January is a classic example.

5. Measured Service

Cloud systems automatically monitor and report resource use, providing transparency for both the provider and the customer. Storage, processing, bandwidth, and active user accounts can all be metered. This is the basis for pay-as-you-go billing.

---

The Three Service Models

NIST defines three layers of cloud service, often shown as a stack.

Infrastructure as a Service (IaaS)

The provider delivers fundamental computing resources: virtual machines, storage, and networking. The customer installs and manages the operating system, middleware, and applications. Example: Amazon EC2 or a raw storage bucket in AWS S3.

Platform as a Service (PaaS)

The provider delivers a ready-made environment where developers deploy applications without managing the underlying infrastructure or operating system. The customer controls the application and its configuration but not the servers below it. Example: Google App Engine or Microsoft Azure App Service.

Software as a Service (SaaS)

The provider delivers a complete, ready-to-use application over the internet. The customer uses the software but manages nothing below the application layer. Example: Microsoft 365 (Word, Teams, Exchange Online) or Google Workspace.

A helpful memory device: IaaS = I manage the OS; PaaS = Platform handles the OS; SaaS = Software only, hands off.

---

The Four Deployment Models

Deployment models describe who owns, operates, and has access to the cloud infrastructure.

Public Cloud

Infrastructure is owned and operated by a third-party provider and shared among many customers over the internet. Cost is typically lowest; physical control is lowest. Examples: AWS, Microsoft Azure, Google Cloud Platform.

Private Cloud

Infrastructure is provisioned for the exclusive use of a single organization. It may be owned, managed, and operated by the organization itself, a third party, or both, and it may exist on or off the organization's premises. A corporate VMware farm hosted in the company's own data center is a common example.

Community Cloud

Infrastructure is shared by several organizations that have common concerns—such as regulatory requirements, security needs, or a shared mission. Example: a cloud environment shared among several hospitals that must all comply with HIPAA.

Hybrid Cloud

A combination of two or more distinct cloud infrastructures (private, community, or public) that remain unique but are bound together by technology that enables data and application portability. Example: a company keeps sensitive payroll data on a private cloud but hosts its public website on a public cloud provider.

---

Why This Matters for IT Support and Networking

As an IT support technician or network specialist, you will encounter cloud services every day: configuring email through Microsoft 365 (SaaS), provisioning virtual servers on a public IaaS platform, or supporting users who access a company application hosted in a private VMware environment. Knowing the NIST vocabulary lets you:

---

Safety and Professional Responsibility Note

Cloud environments do not involve the same physical electrical hazards as hardware work, but professional responsibilities still apply. Accessing cloud consoles with administrative credentials requires the same discipline as physical access to a server room: use strong, unique passwords and multi-factor authentication (MFA), follow your organization's acceptable-use policy, and never provision resources or access data beyond your authorization level. Misconfigurations in cloud platforms—such as leaving a storage bucket publicly accessible—can expose sensitive data to the entire internet. Treat every cloud console action with the same care you would give to working inside a live server.

Key terms10

NIST SP 800-145A two-page National Institute of Standards and Technology publication that provides the accepted industry definition of cloud computing, including five essential characteristics, three service models, and four deployment models.
On-Demand Self-ServiceA cloud characteristic in which a user can provision computing resources automatically without requiring human interaction from the service provider.
Rapid ElasticityA cloud characteristic in which resources can be scaled up or down quickly—often automatically—so that capacity appears unlimited to the user.
Infrastructure as a Service (IaaS)A cloud service model in which the provider supplies virtualized computing infrastructure (servers, storage, networking); the customer manages the operating system and everything above it.
Platform as a Service (PaaS)A cloud service model in which the provider supplies a managed runtime environment; the customer deploys and manages applications but not the underlying operating system or hardware.
Software as a Service (SaaS)A cloud service model in which the provider delivers a fully functional application over the internet; the customer only uses the software and manages no infrastructure.
Private CloudA cloud deployment model in which infrastructure is provisioned for the exclusive use of one organization; it may be on-premises or hosted by a third party.
Hybrid CloudA cloud deployment model combining two or more distinct cloud infrastructures (private, community, or public) linked by technology that allows data and application portability.
Resource PoolingA cloud characteristic in which a provider serves multiple customers from a shared pool of physical and virtual resources that are dynamically assigned based on demand.
Measured ServiceA cloud characteristic in which resource usage is automatically monitored, controlled, and reported, enabling transparent, usage-based billing for both provider and customer.
In class: Guided reading of NIST SP 800-145 (two pages); students annotate the five essential characteristics and discuss each with a partner using provided scenario cards. · Whole-class concept mapping: students place AWS S3, Microsoft 365, and a corporate on-premises VMware farm onto a service-model / deployment-model matrix on the whiteboard. · Individual written exercise: given five fictional company descriptions, students classify each company's cloud use and justify the classification in two to three sentences.
Materials: NIST SP 800-145 (free PDF), CompTIA A+ Core 2 and Network+ study guides (current edition), whiteboard, scenario card set, student notebooks
Check: Exit ticket: five multiple-choice questions covering NIST definitions; students must answer four of five correctly before moving to Lesson 2.

Practice check8

Answer each question, then check it. Nothing is recorded; this is your own practice.

CompTIA A+ Core 2 / CompTIA Network+ — Cloud Computing Concepts
1. According to NIST SP 800-145, which essential characteristic allows a user to provision a virtual machine at midnight without calling the cloud provider's support team?
CompTIA Network+ — Cloud Concepts / Cisco CCST Networking
2. A retail company automatically adds 50 virtual servers during a holiday sale and removes them in January. Which NIST essential characteristic best describes this behavior?
CompTIA A+ Core 2 — Cloud Computing
3. An organization's monthly AWS bill itemizes every gigabyte of storage and every hour of compute time used. Which NIST essential characteristic does this billing practice reflect?
CompTIA A+ Core 2 / CompTIA Network+ — Cloud Concepts
4. A developer deploys a web application to Google App Engine. She does not configure the operating system, apply OS patches, or manage the physical servers. Which cloud service model is she using?
CompTIA Network+ — Cloud Concepts / Cisco CCNA — Cloud and Virtualization
5. A company stores sensitive financial records on its own VMware servers in its corporate data center using a cloud-like self-service portal. Several government hospitals share a separate cloud environment to meet HIPAA requirements. Which deployment models do these two scenarios represent, in order?
CompTIA Network+ — Cloud Concepts / Cisco CCST Networking
6. Which of the following BEST describes the Hybrid cloud deployment model as defined by NIST SP 800-145?
CompTIA A+ Core 2 — Cloud Computing
7. An IT support technician is helping a user access Microsoft 365 Word and Teams from a personal tablet at home. Under the NIST service model framework, Microsoft 365 is classified as which type of service?
CompTIA A+ Core 2 — Security / CompTIA Network+ — Network Security
8. A network administrator notices that a cloud storage bucket belonging to her company is configured to allow public read access, exposing internal documents to anyone on the internet. Which professional responsibility concept does this misconfiguration violate?
Record this lesson on my transcript. Sign in with your key and enrollment email to record lessons (enroll free if you have no key). This page stays open to read and practise.
Program planNext lesson →