Question

Difficulty: MediumCloud Architecture and Deployment Models

An enterprise security architect is categorizing modern enterprise workloads according to cloud service models and deployment architectures. Match each system requirement on the left with its corresponding cloud model on the right.

  • Deploying a third-party customer relationship management portal where the vendor handles all infrastructure maintenance, operating system patching, and software updates.Software as a Service (SaaS)
  • Developing a microservices web API using managed runtime engines and databases, where internal developers manage application code while the provider handles OS maintenance.Platform as a Service (PaaS)
  • Migrating legacy database workloads to cloud virtual machines where the internal team manages guest OS hardening, middleware configuration, and firewall rules.Infrastructure as a Service (IaaS)
  • Hosting a shared threat intelligence dataset restricted exclusively to member financial regulatory agencies with identical compliance requirements.Community Cloud

Answer

The correct pairings are: 1) Vendor-managed software portal matches Software as a Service (SaaS). 2) Custom code on managed runtime engines matches Platform as a Service (PaaS). 3) Virtual machine migration with customer OS patching matches Infrastructure as a Service (IaaS). 4) Shared dataset restricted to industry peer agencies matches Community Cloud.
The correct pairings align with the cloud shared responsibility framework: fully outsourced software application delivery corresponds to SaaS, developer control over code on managed runtimes corresponds to PaaS, customer management of virtual machine operating systems and network settings corresponds to IaaS, and shared infrastructure among specific peer entities corresponds to Community Cloud.

Step-by-Step Solution

1
Analyze the operational responsibilities associated with each system requirement.
Differentiate between infrastructure control, application runtime control, software consumption, and tenant access scope.
Cloud service models define the division of maintenance responsibilities between provider and customer, whereas cloud deployment models specify resource sharing boundaries.
2
Pair complete vendor application administration with SaaS.
The requirement describing complete vendor software and infrastructure delivery maps to Software as a Service.
Under SaaS, users consume completed application features without managing lower-level technical components.
3
Pair custom application code running on abstracted environments with PaaS.
The requirement for managing code without maintaining the guest operating system maps to Platform as a Service.
PaaS isolates developers from system software administration while providing tools to deploy custom code.
4
Pair virtual machine guest OS hardening and firewall administration with IaaS.
The scenario where the internal team controls guest operating systems and middleware maps to Infrastructure as a Service.
IaaS provides raw virtualized compute and storage capabilities, placing all operating system and software stack responsibilities on the client.
5
Pair multi-tenant infrastructure restricted to specific peer organizations with Community Cloud.
The shared dataset limited to member regulatory agencies maps to Community Cloud.
Community clouds cater to closed groups with shared missions, regulatory constraints, and security standards.

Key Concept

Cloud Service and Deployment Model Categorization
Estimated Time:1m 30s
Rate this question