Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

A fleet logistics company transitions its core routing engine to an Infrastructure as a Service (IaaS) environment provided by a public cloud vendor. The IT team deploys multiple virtual machines to host the application software. Which of the following operational security responsibilities remains exclusively with the logistics company?

  1. Configuring guest operating system firewall rules and applying system patches to the virtual machinesAnswer
  2. B
    Updating physical hypervisor firmware and maintaining underlying host hardware infrastructure
  3. C
    Assigning system permissions automatically by mistaking network access location for validated user identity
  4. D
    Assuming internal network traffic originating within the cloud subnet requires no microsegmentation or continuous verification

Answer

Configuring guest operating system firewall rules and applying system patches to the virtual machines
Under the Cloud Shared Responsibility Model for Infrastructure as a Service (IaaS), the cloud service provider manages the physical infrastructure, storage hardware, physical data center security, and the hypervisor layer. The subscriber retains full administrative control and operational responsibility for the guest operating systems, including patching, local host firewall configurations, installed software packages, and data governance.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The scenario specifies an Infrastructure as a Service (IaaS) deployment model.
Responsibilities in cloud computing depend directly on whether the service model is IaaS, PaaS, or SaaS.
2
Apply the Shared Responsibility Model to IaaS.
The cloud service provider (CSP) manages the physical facilities, host hardware, and virtualization hypervisor. The customer manages the guest operating system, network firewalls on instances, middleware, applications, and customer data.
IaaS provides maximum customer control over the virtualized operating environment, shifting OS and network control duties to the customer.
3
Evaluate the choices to determine which task belongs strictly to the customer.
Managing guest OS patches and host-based firewalls on virtual machines is a customer responsibility under IaaS.
The CSP cannot access or manage the internal guest OS configuration without customer authorization and access provision.

Key Concept

Cloud Shared Responsibility Model in IaaS Deployments
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic