A healthcare clinic adopts a cloud-based practice management platform delivered as a Software as a Service (SaaS) solution. The clinic needs to define the security boundaries for its IT staff under the shared responsibility model. Which of the following security tasks is the sole responsibility of the clinic?
- AUpdating the database engine version used by the scheduling application.
- Classifying patient data and configuring user access permissions for the staff.Answer
- CDeploying security updates to the virtual machines that host the web service.
- DConfiguring network firewalls at the cloud provider's physical datacenter boundaries.
Answer
Classifying patient data and configuring user access permissions for the staff.
In a Software as a Service (SaaS) model, the cloud provider is responsible for maintaining all physical infrastructure, operating systems, and applications. The customer, however, always retains responsibility for the security and classification of their own data, as well as managing user identities and access permissions.
Step-by-Step Solution
Key Concept
Under the Software as a Service (SaaS) model, the cloud provider manages the entire application stack, while the customer maintains responsibility for data classification, endpoints, and identity access management.
Estimated Time:1m 0s