A regional health insurance organization is migrating its claims processing engine to a cloud provider using a Serverless Function-as-a-Service (FaaS) execution model connected to a managed Database-as-a-Service (DBaaS) backend. During a compliance audit, the security team is asked to document control ownership across the deployment layers. Which of the following statements correctly identifies the customer's operational responsibility in this deployment architecture?
- Managing application source code security, data classification, and fine-grained identity and access policies.Answer
- BApplying operating system security patches and kernel hotfixes to the instances executing the serverless functions.
- CEstablishing physical perimeter defenses and microsegmentation for the physical hardware hosting the database service.
- DConfiguring hypervisor isolation boundaries to prevent cross-tenant memory leakage between function executions.
Answer
The customer is responsible for managing application source code security, data classification, and fine-grained identity and access policies.
Under the cloud shared responsibility model for serverless (FaaS) and managed database (PaaS) architectures, the cloud service provider manages all underlying hardware, hypervisors, OS patching, and engine runtimes. The customer retains full responsibility for securing their application logic/code, classifying their data, and configuring identity and access management permissions.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model in Serverless and PaaS Environments
Estimated Time:1m 40s