Examkin

Question

Difficulty: MediumCloud Service Models (IaaS, PaaS, SaaS)

A logistics company is migrating its legacy inventory management database to an Infrastructure as a Service (IaaS) cloud environment to maintain customized database configurations and complete operating system control. Which TWO of the following operational tasks remain the responsibility of the company's internal IT administration team under this cloud service model?

  1. Installing operating system security patches and software updates on virtual machinesAnswer
  2. Configuring guest operating system network firewall rules and access control policiesAnswer
  3. C
    Replacing failed physical storage drives and faulty memory modules on host servers
  4. D
    Updating bare-metal hypervisor software and host system firmware across server racks

Answer

The client is responsible for installing operating system security patches on virtual machines and configuring guest operating system network firewall rules.
Under the Infrastructure as a Service (IaaS) shared responsibility model, the cloud provider manages the physical facilities, hardware, and hypervisor virtualization layer. The customer retains administrative control over guest operating systems and application stacks. Consequently, applying operating system security patches and configuring guest firewall access policies are direct responsibilities of the internal IT team.

Step-by-Step Solution

1
Analyze the cloud service model provided (IaaS) and determine the administrative division of responsibility.
Infrastructure as a Service (IaaS) delivers virtualized computing resources over the internet. The provider manages physical hardware, facility security, cooling, storage arrays, and hypervisors.
Establishing what the provider owns establishes the boundary of customer control.
2
Identify specific customer responsibilities from the guest OS layer upward.
The customer controls the guest operating system, runtime environments, middleware, applications, data, and guest-level firewall rules. Operating system patch management and guest firewall policies are customer tasks.
Since the customer maintains root/administrator access to virtual machines in IaaS, maintaining OS security and virtual network security resides with the customer's IT team.

Key Concept

Shared Responsibility Model in Infrastructure as a Service (IaaS)
Rate this question

Topics

Cloud Service Models (IaaS, PaaS, SaaS)

More questions from this topic