Examkin

Question

Difficulty: HardCloud Architecture and Deployment Models

A bio-pharmaceutical consortium deploys a joint machine learning analytics platform hosted within a Community Cloud environment shared exclusively among vetted research institutions. Under the cloud shared responsibility model, which of the following operational tasks is strictly the sole responsibility of each participating research organization?

  1. Encrypting sensitive research datasets prior to ingestion and configuring granular role-based access permissionsAnswer
  2. B
    Applying firmware updates to the underlying physical hypervisors and replacing failed storage array modules
  3. C
    Permitting implicit trust and bypassing mutual authentication for internal inter-node traffic originating within the community network perimeter
  4. D
    Utilizing identity verification protocols to determine specific file read and write authorizations within backend databases

Answer

Encrypting sensitive research datasets prior to ingestion and configuring granular role-based access permissions
In any cloud model—including Community Cloud—the customer organization retains complete responsibility for data security, data classification, client-side encryption, and managing identity permissions for access to their datasets.

Step-by-Step Solution

1
Analyze the cloud deployment model described in the scenario.
The scenario describes a Community Cloud model shared by multiple organizations with common security requirements.
Understanding the deployment model establishes the governance and shared security baseline.
2
Apply the Cloud Shared Responsibility Model to identify customer-side duties.
Regardless of whether IaaS, PaaS, SaaS, or Community Cloud is used, the customer retains 100% ownership and responsibility for their data classification, data encryption, and access control configurations.
Cloud service providers and community platform hosts manage infrastructure components, but data security and user access management always rest with the data owner.
3
Evaluate the options to isolate the correct customer responsibility.
The option specifying dataset encryption and access permission configuration accurately reflects tenant responsibility.
Physical hardware maintenance belongs to the provider, while perimeter-only trust and confusing AAA controls reflect security anti-patterns.

Key Concept

Cloud Shared Responsibility Model in Community Cloud Deployments
Estimated Time:1m 30s
Rate this question

Topics

Cloud Architecture and Deployment Models

More questions from this topic