Question

Difficulty: HardSoftware as a Service (SaaS)

A manufacturing company adopts a cloud-based supply chain forecasting application delivered under a Software as a Service (SaaS) model. Which of the following responsibilities are managed solely by the cloud provider? (Select TWO.)

  1. Applying security patches and updates to the forecasting application softwareAnswer
  2. B
    Managing and securing the endpoint devices used by employees to access the forecasting system
  3. C
    Configuring user accounts and managing access credentials for the manufacturing team
  4. Maintaining the physical servers and virtualization infrastructure that host the applicationAnswer

Answer

Applying security patches and updates to the forecasting application software, and maintaining the physical servers and virtualization infrastructure that host the application
In a Software as a Service (SaaS) model, the cloud provider is responsible for maintaining the entire application stack, which includes applying software patches, security updates, and maintaining the underlying physical servers and virtualization infrastructure. This leaves the customer free from infrastructure management tasks.

Step-by-Step Solution

1
Identify the cloud deployment model described in the scenario.
The model is Software as a Service (SaaS).
The company is using a pre-built application (supply chain forecasting) managed and hosted by the provider.
2
Determine the boundary of the Shared Responsibility Model for SaaS.
In SaaS, the provider manages the physical infrastructure, virtualization, operating system, middleware, and the application itself. The customer is responsible for data, endpoints, and identities/accounts.
This allows the customer to focus purely on using the software without administrative or operational overhead.
3
Evaluate each option against these responsibilities to select the two managed by the provider.
Software patching and physical server maintenance are provider responsibilities, while endpoint management and user accounts configuration are customer responsibilities.
Selecting these ensures correct alignment with the SaaS responsibility matrix.

Key Concept

Shared Responsibility Model in Software as a Service (SaaS)
Rate this question