Examkin

Question

Difficulty: MediumSoftware as a Service (SaaS)

A law firm subscribes to a cloud-based document collaboration and legal discovery application. To ensure the security of this deployment, which task remains the responsibility of the law firm?

  1. Configuring user accounts and assigning access permissions for the lawyers and paralegalsAnswer
  2. B
    Applying security patches to the operating system hosting the document application
  3. C
    Configuring database replication and automatic failover for the backend storage
  4. D
    Deploying additional virtual machines to scale the application during peak litigation periods

Answer

Configuring user accounts and assigning access permissions for the lawyers and paralegals
In a Software as a Service (SaaS) deployment, the cloud provider manages the physical infrastructure, operating system, and application software. The customer remains responsible only for their data, devices, and user access. Therefore, managing user accounts and configuring access permissions for the lawyers and paralegals is a customer responsibility.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The law firm is subscribing to a complete, cloud-hosted application (document collaboration and legal discovery), which represents a Software as a Service (SaaS) model.
Determining the service model is necessary to apply the correct shared responsibility boundaries.
2
Determine the customer's responsibilities under the shared responsibility model for SaaS.
In a SaaS model, the cloud provider manages almost the entire stack (physical infrastructure, virtualization, operating systems, middleware, and application software). The customer retains responsibility for their data, devices, and user accounts/identities.
This isolates what tasks the customer's IT team must perform versus what the provider handles.
3
Evaluate the choices to find the task that matches customer responsibilities.
Configuring user accounts and access permissions aligns with identity and access management, which remains the customer's responsibility in SaaS. Operating system patching, database replication, and scaling virtual machines are managed by the SaaS provider.
This selects the correct option based on SaaS shared responsibility principles.

Key Concept

Shared Responsibility Model in SaaS
Estimated Time:1m 0s
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic