Examkin

Question

Difficulty: HardCloud Service Models (IaaS, PaaS, SaaS)

A healthcare organization is migrating its internal patient database application to a public cloud vendor using an Infrastructure as a Service (IaaS) solution. Which TWO of the following tasks remain the direct responsibility of the healthcare organization's internal IT staff? (Select TWO.)

  1. Configuring and applying security patches to the guest operating systems running on the virtual instancesAnswer
  2. B
    Applying firmware updates to the underlying physical server hardware and motherboard components
  3. Managing guest-level firewall rules and virtual network access control configurationsAnswer
  4. D
    Maintaining and patching the host hypervisor virtualization platform

Answer

The healthcare organization's internal IT staff is directly responsible for configuring guest operating system security patches and managing guest-level software firewall rules and virtual network access controls.
Under the Infrastructure as a Service (IaaS) shared responsibility model, the cloud service provider maintains the physical facilities, host servers, storage infrastructure, and hypervisor virtualization layer. The customer is responsible for everything installed on top of the hypervisor, including the guest operating systems, middleware, applications, data, and virtual network configuration. Therefore, patching the guest operating systems and managing guest firewall rules are responsibilities retained by the customer.

Step-by-Step Solution

1
Analyze the cloud service model specified in the scenario.
The organization uses Infrastructure as a Service (IaaS). Under the shared responsibility model, IaaS places physical hardware, facility security, power, and the hypervisor layer under cloud provider ownership.
IaaS abstracts only the physical infrastructure and hypervisor, granting the customer root/administrative control over virtual machines and software components.
2
Identify customer-managed responsibilities within an IaaS environment.
Patching guest operating systems and configuring guest-level firewall and access control rules fall under customer domain.
Since the customer installs or selects the guest OS and controls network access to their instances, maintaining OS stability, security updates, and access rules is their responsibility.
3
Eliminate provider-managed infrastructure tasks.
Updating physical server firmware and patching host hypervisors are vendor responsibilities.
The customer has no direct access to the underlying physical server hardware or bare-metal hypervisors in standard public cloud IaaS offerings.

Key Concept

Shared Responsibility Model in Infrastructure as a Service (IaaS)
Estimated Time:1m 30s
Rate this question

Topics

Cloud Service Models (IaaS, PaaS, SaaS)

More questions from this topic