Match each enterprise security management scenario to the cloud service model that reflects its allocation of customer responsibilities under the Shared Responsibility Model.
- Managing virtual machine operating system patches, guest firewall rules, and persistent storage volume encryptionInfrastructure as a Service (IaaS)
- Configuring application logic, database access controls, and custom API endpoints while the provider manages runtime binariesPlatform as a Service (PaaS)
- Managing user identity governance, role-based permissions, and data loss prevention policies for a vendor-hosted turn-key applicationSoftware as a Service (SaaS)
- Securing event-driven execution code and trigger definitions while the provider handles automatic container scaling and host OS managementFunction as a Service (FaaS)
Answer
Operating system patching and guest firewall configuration match Infrastructure as a Service (IaaS). Application logic and database access control configuration match Platform as a Service (PaaS). User identity governance and data loss prevention for pre-built applications match Software as a Service (SaaS). Event-driven code execution and trigger definitions match Function as a Service (FaaS).
Each cloud service model defines a distinct boundary of ownership under the Shared Responsibility Model: IaaS grants customer control over guest OS and virtual networking; PaaS isolates customer control to application logic and data schemas; SaaS restricts customer management to user access, data protection, and client devices; and FaaS delegates container scaling and OS maintenance to the provider while the customer provides serverless code functions.
Step-by-Step Solution
Key Concept
Cloud Shared Responsibility Model across Service Models