Examkin

Question

Difficulty: HardSoftware as a Service (SaaS)

A company is migrating its custom client-facing applications and an off-the-shelf customer relationship management (CRM) tool to Microsoft Azure. For the CRM tool, the company chooses a cloud-hosted solution where Microsoft manages all infrastructure, runtime environments, and application updates. The company's security team needs to document the cloud service model and the customer's security boundaries for this CRM solution. Which cloud service model represents the CRM solution, and what is a primary security responsibility of the company under this model?

  1. A
    Platform as a Service (PaaS); the customer must patch the operating system and configure the database middleware.
  2. B
    Software as a Service (SaaS); the customer must manage the network firewalls and physical server virtualization layers.
  3. Software as a Service (SaaS); the customer must manage user identities and protect the data stored within the CRM.Answer
  4. D
    Platform as a Service (PaaS); the customer must secure the endpoints and configure access control lists for the CRM users.

Answer

Software as a Service (SaaS); the customer must manage user identities and protect the data stored within the CRM.
The correct option is the one stating 'Software as a Service (SaaS); the customer must manage user identities and protect the data stored within the CRM.' This is because a fully hosted CRM where Microsoft manages all application updates and infrastructure represents SaaS. Under the Shared Responsibility Model, the customer always retains ownership of their data and user identities.

Step-by-Step Solution

1
Evaluate the management and hosting characteristics of the CRM solution where Microsoft manages infrastructure, runtime, and updates.
Determine that a ready-made application fully hosted and updated by the provider represents the Software as a Service (SaaS) model.
SaaS applications require no management of underlying operating systems, middleware, or hardware by the consumer.
2
Determine the user's security responsibilities under the Shared Responsibility Model for SaaS.
Identify that the customer is responsible for user accounts, identities, and the data uploaded to the service.
Regardless of the cloud model (IaaS, PaaS, or SaaS), data governance and identity/access management always remain the customer's responsibility.

Key Concept

Shared Responsibility Model and SaaS boundaries
Estimated Time:2m 0s
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic