Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

An e-commerce organization is transitioning its customer portal microservices from self-managed virtual machines running in an Infrastructure as a Service (IaaS) environment to a managed Platform as a Service (PaaS) application hosting engine. Which of the following security management tasks is transferred from the organization to the cloud service provider as a direct result of adopting this PaaS model?

  1. A
    Configuring custom application user authorization roles and data access rules inside the application.
  2. Applying security updates and security patches to the underlying operating system of the application hosting environment.Answer
  3. C
    Relying on the provider's perimeter security controls to implicitly trust all internal network traffic between application endpoints.
  4. D
    Classifying customer application audit logs as a compensating technical control managed by the cloud host.

Answer

Applying security updates and security patches to the underlying operating system of the application hosting environment.
In the Cloud Shared Responsibility Model for Platform as a Service (PaaS), the Cloud Service Provider (CSP) assumes full management of the hardware, hypervisor, operating system (OS), and middleware runtime. Moving from IaaS to PaaS transfers the burden of OS security patching and kernel updates from the customer to the provider.

Step-by-Step Solution

1
Analyze the scope of responsibility in Infrastructure as a Service (IaaS).
In IaaS, the customer manages the guest operating system, runtime software, network configurations, application code, and data.
IaaS provides raw virtualized compute infrastructure where the OS layer is customer-maintained.
2
Analyze the shift in scope when migrating to Platform as a Service (PaaS).
In PaaS, the Cloud Service Provider (CSP) manages the hardware, hypervisor, operating system, and execution runtime environment.
PaaS abstracts the underlying operating system and hardware platform so developers can focus solely on application code and data.
3
Identify the task transferred from the customer to the CSP.
Operating system patching and runtime engine maintenance are transferred to the CSP in PaaS.
Because the customer no longer manages or accesses the underlying OS in PaaS, OS update enforcement becomes a provider duty.

Key Concept

Cloud Shared Responsibility Model (IaaS vs. PaaS)
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic