Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

A game development studio migrates its multiplayer matchmaking microservices to a managed Platform as a Service (PaaS) environment hosted by a public cloud provider. As part of defining the organization's cloud security baseline, the architecture team evaluates operational governance duties. Which of the following security responsibilities remains strictly with the game development studio under this cloud service model?

  1. Configuring application-level identity access management policies and user authentication controlsAnswer
  2. B
    Patching the underlying operating system kernels and managed runtime engine binaries
  3. C
    Maintaining physical access controls and environmental systems for the hosting data centers
  4. D
    Assuming internal platform virtual network traffic is implicitly trusted without enforcing endpoint verification

Answer

Configuring application-level identity access management policies and user authentication controls remains the customer's sole responsibility under Platform as a Service (PaaS).
Under the Platform as a Service (PaaS) shared responsibility model, the cloud provider assumes responsibility for host hardware, physical facility security, hypervisor management, operating system updates, and middleware engine maintenance. The cloud customer remains responsible for application code development, customer data management, and configuring application-level authentication and access control policies.

Step-by-Step Solution

1
Identify the cloud service model specified in the scenario.
The deployment uses Platform as a Service (PaaS).
Service models (IaaS, PaaS, SaaS) dictate how operational and security duties are partitioned between customer and vendor.
2
Analyze responsibility boundaries for PaaS environments.
The CSP manages physical data center security, hardware maintenance, hypervisor virtualization, operating system patching, and runtime stacks. The customer manages application logic, dataset configuration, and identity permissions.
PaaS abstracts underlying infrastructure management to allow developers to focus on software deployment and access management.
3
Determine which option represents a customer-retained security control.
Managing application-level user authentication and access control policies belongs to the customer.
Identity governance, application logic, and user access definitions remain the customer's duty regardless of the cloud service tier.

Key Concept

Cloud Shared Responsibility Model (PaaS)
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic