Examkin

Question

Difficulty: MediumSoftware as a Service (SaaS)

A construction firm subscribes to a cloud-based project scheduling tool to track build phases and coordinate subcontractor timelines. The application is hosted, patched, and maintained entirely by the cloud provider, and employees access it via a web browser.

Under the cloud shared responsibility model, which of the following responsibilities are retained by the construction firm? Select two.

  1. Configuring user identities and access permissions for the project teamAnswer
  2. Managing and securing the project scheduling data entered into the applicationAnswer
  3. C
    Applying software patches to the application's underlying operating system
  4. D
    Configuring database auto-scaling parameters to handle traffic spikes

Answer

Configuring user identities and access permissions for the project team, and managing and securing the project scheduling data entered into the application
In a Software as a Service (SaaS) model, the cloud provider manages all underlying infrastructure, including virtual machines, operating systems, database engines, and the software itself. The customer retains responsibility for managing their own data (such as project scheduling data entered into the application) and user identities/access permissions (such as assigning access to the project team).

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The project scheduling tool is a Software as a Service (SaaS) application because it is hosted, patched, and maintained entirely by the provider, with users accessing it via a web browser.
Determining the service model (SaaS) is necessary to correctly apply the shared responsibility model.
2
Differentiate customer versus provider responsibilities under SaaS.
In a SaaS model, the provider manages the physical infrastructure, virtualization, operating systems, database engine, and the application itself. The customer remains responsible for their own data, devices, and user identities/accounts.
This establishes the boundaries of the shared responsibility model for SaaS.
3
Match the options against the customer's SaaS responsibilities.
Configuring user identities/permissions and managing the project data are customer responsibilities. Operating system patching and database scaling are handled completely by the SaaS provider.
This identifies the correct responsibilities retained by the construction firm.

Key Concept

SaaS Shared Responsibility Model
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic