Examkin

Question

Difficulty: MediumCloud Architecture and Deployment Models

An enterprise organization is migrating its internal customer portal to a cloud environment utilizing a Platform as a Service (PaaS) deployment model. Under the cloud Shared Responsibility Model, which of the following security tasks remains the primary responsibility of the enterprise organization?

  1. Configuring application-level access controls and managing user data stored within the platform.Answer
  2. B
    Applying operating system security patches to the servers hosting the execution environment.
  3. C
    Maintaining physical security controls for the servers and storage infrastructure in the cloud data center.
  4. D
    Updating hypervisor software and configuring network-level perimeter firewalls for host isolation.

Answer

Configuring application-level access controls and managing user data stored within the platform.
Under Platform as a Service (PaaS), the cloud service provider abstracts and manages the underlying hardware, network infrastructure, virtualization layer, and operating system. The enterprise customer retains full responsibility for application-layer security, user identity and access management, and data protection.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The model is Platform as a Service (PaaS).
Security responsibilities shift based on whether the service model is IaaS, PaaS, or SaaS.
2
Determine the division of responsibilities under the PaaS Shared Responsibility Model.
The Cloud Service Provider (CSP) manages the hardware, physical data center, virtualization layer, operating system, and runtime execution environment. The customer manages data classification, account access, and application code.
PaaS abstracts the underlying operating system and hardware infrastructure away from the enterprise customer.
3
Select the task aligned with customer duties in PaaS.
Configuring application-level access controls and securing customer data.
Data governance and application security remain customer responsibilities in PaaS.

Key Concept

Cloud Shared Responsibility Model (PaaS)
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic