Question

Difficulty: MediumSoftware as a Service (SaaS)

A digital marketing agency adopts a cloud-based customer relationship management (CRM) platform under a Software as a Service (SaaS) model. As the agency configures the platform, which task remains the responsibility of the agency rather than the cloud provider?

  1. Managing user identities and access permissions for the CRM application.Answer
  2. B
    Deploying security updates to the virtual machines hosting the CRM software.
  3. C
    Modifying the underlying application code to implement minor bug fixes.
  4. D
    Financing the CRM subscription as a upfront capital expenditure.

Answer

Managing user identities and access permissions for the CRM application.
The correct option is correct because managing user identities, accounts, and access permissions is a customer responsibility across all cloud service models, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS). Even though the cloud provider hosts and maintains the application and infrastructure, they do not manage who is permitted to access the customer's tenant or data.

Step-by-Step Solution

1
Analyze the cloud deployment model specified in the scenario.
The scenario specifies a Software as a Service (SaaS) model.
This determines the dividing line in the shared responsibility model between the customer and the provider.
2
Recall the shared responsibility boundaries for the SaaS model.
Under SaaS, the cloud provider manages the physical infrastructure, virtualization, operating system, middleware, and the application itself.
This helps filter out responsibilities that are fully handled by the cloud provider.
3
Identify the responsibilities that always remain with the customer in all cloud models.
The customer is always responsible for data, endpoints (devices), and accounts/identities.
This points directly to the management of user identities and access permissions as the correct choice.

Key Concept

Under the cloud shared responsibility model, the customer is always responsible for managing user accounts, identities, and data, even when utilizing a fully managed Software as a Service (SaaS) application.
Estimated Time:1m 0s
Rate this question