Question

Difficulty: MediumCloud Service Models (IaaS, PaaS, SaaS)

A healthcare analytics company is deploying a custom patient-reporting tool using a Platform as a Service (PaaS) offering. The internal development team handles application code updates and database schema management. Which TWO of the following operational duties remain the direct responsibility of the cloud service provider in this PaaS deployment? (Select TWO.)

  1. Operating system security patching and kernel maintenanceAnswer
  2. B
    Application source code debugging and feature implementation
  3. Underlying physical server hardware maintenance and hypervisor managementAnswer
  4. D
    User account authorization and database record entry

Answer

In a Platform as a Service (PaaS) deployment, operating system security patching and kernel maintenance, as well as underlying physical server hardware maintenance and hypervisor management, are the direct responsibilities of the cloud service provider.
Under Platform as a Service (PaaS), the cloud service provider abstract away physical infrastructure, hypervisors, operating systems, and runtime execution environments. Consequently, tasks such as operating system security patching, kernel maintenance, physical hardware maintenance, and hypervisor management are handled entirely by the provider. The customer only manages the application source code, data schemas, and user access permissions.

Step-by-Step Solution

1
Analyze the cloud service model specified in the scenario
Identified the service model as Platform as a Service (PaaS).
PaaS provides a managed platform/environment (runtime, OS, infrastructure) so developers can focus strictly on applications and data.
2
Differentiate customer vs. provider responsibilities in PaaS
Customer manages Application and Data layers; Provider manages Hardware, Virtualization, OS, Middleware, and Runtime layers.
Applying the shared responsibility matrix for PaaS isolates application development from infrastructure management.
3
Evaluate the option choices against provider responsibilities
Selected operating system patching and physical hardware/hypervisor maintenance.
These tasks belong to the provider's managed platform, whereas code updates and data management belong to the customer.

Key Concept

PaaS Shared Responsibility Boundary
Rate this question