Examkin

Question

Difficulty: Very hardCloud Service Models (IaaS, PaaS, SaaS)

A specialized healthcare software enterprise is migrating a custom electronic health record (EHR) analytics platform to a vendor's Platform as a Service (PaaS) framework. The organization's internal developers will deploy custom application code and query a cloud-managed SQL database service provided by the vendor. Based on the cloud shared responsibility model for a PaaS deployment, which of the following operational tasks remain the direct responsibility of the subscriber enterprise? (Select TWO.)

  1. Application source code security review, bug fixing, and custom module maintenanceAnswer
  2. Data classification, database schema design, and user access identity managementAnswer
  3. C
    Operating system kernel updates, security patching, and middleware runtime maintenance
  4. D
    Hypervisor host provisioning, physical storage array redundancy, and server hardware maintenance

Answer

Application source code maintenance and data governance/access management remain customer responsibilities under PaaS.
Under the cloud shared responsibility model for Platform as a Service (PaaS), the cloud provider manages and maintains all underlying infrastructure, including physical servers, hypervisors, storage networks, operating system kernels, and database runtime engines. The customer is strictly responsible for managing what runs on top of that platform—specifically application source code, custom configurations, database schemas, and data access control.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The scenario specifies a Platform as a Service (PaaS) environment.
Determining the service model establishes the boundaries of the shared responsibility matrix.
2
Analyze the customer versus provider division of responsibility for PaaS.
In PaaS, the provider handles physical hardware, hypervisors, OS patching, and middleware runtimes, while the customer manages application code and data/access governance.
PaaS abstracts lower-level infrastructure management to allow developers to focus exclusively on application code and data.
3
Evaluate each option against the customer domain of responsibility.
Application source code maintenance and data classification/user access design are customer tasks. Operating system patching and physical hypervisor maintenance belong to the cloud vendor.
Mistaking OS or hypervisor maintenance for customer duties confuses PaaS responsibilities with IaaS responsibilities.

Key Concept

PaaS Shared Responsibility Boundaries
Estimated Time:2m 0s
Rate this question

Topics

Cloud Service Models (IaaS, PaaS, SaaS)

More questions from this topic