Question

Difficulty: MediumCloud Service Models (IaaS, PaaS, SaaS)

An enterprise is migrating several internal workloads to an Infrastructure as a Service (IaaS) solution hosted by a cloud provider. Under the shared responsibility model for IaaS deployments, which of the following maintenance tasks remain the responsibility of the enterprise's internal IT staff? (Select TWO).

  1. Installing security updates and patches on the guest operating systemsAnswer
  2. Configuring and maintaining application software and user databasesAnswer
  3. C
    Replacing faulty hard drives in the cloud facility's storage area network
  4. D
    Updating and patching the Type 1 hypervisors running on the physical host servers

Answer

In an Infrastructure as a Service (IaaS) cloud model, the customer is responsible for managing the guest operating systems (including OS security patches) as well as installing and configuring application software and databases. The cloud provider retains responsibility for physical infrastructure, hardware, storage drives, and the hypervisor layer.
Under the IaaS shared responsibility model, the cloud vendor manages the physical facilities, hardware, and hypervisor layer, while the client maintains control over the software stack built on top of that infrastructure. Consequently, applying operating system security patches to virtual machines and configuring application software and database instances are direct customer responsibilities.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The scenario specifies Infrastructure as a Service (IaaS).
Different cloud models (IaaS, PaaS, SaaS) partition responsibilities differently between vendor and client.
2
Determine the boundary of responsibility for IaaS.
The cloud provider supplies physical hardware, facilities, network infrastructure, and hypervisors. The customer manages virtual machine operating systems, applications, data, and runtime configurations.
IaaS provides raw virtual computing resources, leaving everything from the guest operating system upwards under client control.
3
Evaluate each task against the customer responsibility boundary.
Operating system patching and application/database maintenance belong to the customer, while physical storage repair and hypervisor maintenance belong to the cloud provider.
This correctly identifies the two client-managed administrative tasks.

Key Concept

Cloud Shared Responsibility Model (IaaS)
Rate this question