Examkin

Question

Difficulty: HardSoftware as a Service (SaaS)

A company is implementing a new cloud-based Human Resources (HR) portal for employee self-service. The company subscribes to a fully functional cloud solution where the cloud provider hosts, maintains, and updates the application software, operating systems, and underlying hardware. The company is evaluating the shared responsibility model for this deployment.

Which of the following responsibilities is retained by the company under this cloud service model?

  1. A
    Configuring and maintaining the database middleware and application runtime environment
  2. B
    Performing operating system maintenance and applying software security patches to the servers
  3. Managing user identities, device access permissions, and the information stored within the applicationAnswer
  4. D
    Allocating capital expenditure (CapEx) to acquire the application software licenses and hardware hosting resources

Answer

Managing user identities, device access permissions, and the information stored within the application
Under the shared responsibility model for Software as a Service (SaaS), the customer always retains sole responsibility for managing and securing their own data, configuring user identities/accounts, and managing device access. The cloud provider handles all other layers, including physical infrastructure, virtual machines, operating systems, and application software.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario describes a subscription to a fully functional cloud application where the provider manages all underlying layers (hardware, OS, middleware, application code). This corresponds to Software as a Service (SaaS).
Determining the correct service model is essential to applying the correct shared responsibility framework.
2
Apply the shared responsibility model rules for Software as a Service (SaaS).
In SaaS, the cloud provider manages the physical security, host hardware, hypervisor, operating system, network controls, and application software. The customer remains responsible only for information/data, devices (mobile and PC), and accounts/identities.
Mapping responsibilities ensures correct identification of customer obligations.
3
Evaluate the choices to find which responsibility belongs to the customer under SaaS.
Managing user identities, device access permissions, and data is a customer responsibility. Other choices involve managing middleware, OS patching, or CapEx, which are incorrect.
Verifying the correct responsibility leads to the final selection.

Key Concept

Shared responsibility model in Software as a Service (SaaS)
Estimated Time:1m 30s
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic