Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

An enterprise e-commerce organization is migrating its real-time product recommendation system to a serverless Function-as-a-Service (FaaS) architecture hosted by a public cloud service provider (CSP). Which TWO of the following security tasks remain the direct responsibility of the enterprise organization under the cloud shared responsibility model?

  1. Validating application source code security and implementing function-level API access authorization controls.Answer
  2. Configuring data classification tags and setting identity-based access policies for database repositories accessed by the function.Answer
  3. C
    Applying operating system patches and security updates to the underlying host infrastructure running the serverless containers.
  4. D
    Permitting implicit execution privileges to all function requests originating from within the internal virtual cloud network.

Answer

The enterprise customer is responsible for writing secure application source code, enforcing API access authorization logic, classifying sensitive data, and managing access policies for database repositories connected to the serverless function.
Under the cloud shared responsibility model for serverless Function-as-a-Service (FaaS) deployments, the cloud service provider abstracts and manages the underlying hardware, hypervisors, host operating systems, and execution runtimes. The enterprise customer retains full responsibility for securing their custom application code, implementing API authorization controls, classifying data, and setting granular access management policies for any connected data storage repositories.

Step-by-Step Solution

1
Analyze the cloud service model presented in the scenario.
The scenario specifies Function-as-a-Service (FaaS), which is a serverless execution model where the cloud provider manages infrastructure, hardware, OS patching, and execution runtime.
Identifying the cloud service model is essential for determining the scope of the shared responsibility boundary.
2
Differentiate provider responsibilities from customer responsibilities in FaaS.
The CSP manages host OS patching and serverless environment maintenance. The customer manages application code, data governance, API access control, and identity permission policies.
Applying the shared responsibility model shows that data protection and custom code security always remain with the customer.

Key Concept

Cloud Shared Responsibility Model in Function-as-a-Service (FaaS)
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic