Examkin

Question

Difficulty: EasyCloud Architecture and Deployment Models

A technology firm has deployed several virtual machines on an Infrastructure as a Service (IaaS) public cloud platform. According to the cloud shared responsibility model, which of the following security tasks is the sole responsibility of the customer?

  1. A
    Securing physical access to the server racks in the cloud provider's data center
  2. Configuring and applying patches to the guest operating systemAnswer
  3. C
    Updating the hypervisor software running on the physical host hardware
  4. D
    Replacing failed physical hard drives in the cloud infrastructure

Answer

Configuring and applying patches to the guest operating system
Under the cloud shared responsibility model for Infrastructure as a Service (IaaS), the cloud service provider maintains the physical facilities, hardware, and hypervisor layer. The customer assumes full responsibility for configuring, managing, and patching the guest operating systems running within their virtual instances, along with securing installed applications and customer data.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario
The scenario specifies an Infrastructure as a Service (IaaS) deployment model.
Different service models (IaaS, PaaS, SaaS) dictate distinct boundaries for shared responsibility between the customer and provider.
2
Apply the shared responsibility model rules for IaaS
The Cloud Service Provider (CSP) manages the physical security, underlying host hardware, facilities, and hypervisor. The customer manages the guest operating system, network configuration, applications, and data.
IaaS provides raw compute resources, placing operating system administration squarely on the customer.
3
Evaluate the options against the customer responsibility domain
Guest operating system configuration and patching is managed by the customer, whereas physical access, hypervisors, and storage hardware are managed by the CSP.
Selecting the task that resides on the customer side of the responsibility boundary satisfies the question.

Key Concept

Shared Responsibility Model in IaaS
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic