Question

Difficulty: EasySoftware as a Service (SaaS)

A medical clinic subscribes to a cloud-based calendar application to schedule patient appointments. The application is provided as a Software as a Service (SaaS) solution.

Which of the following is the medical clinic responsible for managing?

  1. Patient data and user access permissionsAnswer
  2. B
    The source code and updates of the calendar application
  3. C
    The underlying operating systems of the virtual servers hosting the application
  4. D
    The physical server hardware and datacenter facility

Answer

Patient data and user access permissions
In a Software as a Service (SaaS) model, the cloud provider handles almost all management responsibilities, including physical security, hardware, operating systems, and the application itself. The customer is only responsible for managing their own data, endpoints, and user access permissions.

Step-by-Step Solution

1
Analyze the cloud service model described in the scenario.
The application is a Software as a Service (SaaS) solution.
SaaS applications are fully hosted and managed by the cloud provider, and accessed by users via web browsers or light clients.
2
Determine the shared responsibility boundary for a SaaS model.
The customer is responsible for data, devices, and accounts/identities.
Under the shared responsibility model, the cloud provider manages the physical infrastructure, operating systems, and application software in SaaS, leaving data and access management to the customer.

Key Concept

Software as a Service (SaaS) Shared Responsibility
Rate this question