Soru

Zorluk: OrtaSoftware as a Service (SaaS)

A hotel chain adopts a cloud-based property management system (PMS) to coordinate room reservations and guest billing across all its locations. The system is fully hosted by the vendor, and hotel staff access it via a web browser. Under the cloud shared responsibility model, which of the following tasks is the responsibility of the hotel chain?

  1. A
    Updating the operating system and applying security patches on the servers hosting the database
  2. Managing user accounts and access permissions for the hotel staffCevap
  3. C
    Configuring database auto-scaling rules and middleware settings to handle peak reservation volumes
  4. D
    Allocating capital expenditure (CapEx) to purchase the physical servers and storage hardware

Cevap

Managing user accounts and access permissions for the hotel staff
In a Software as a Service (SaaS) model, the cloud provider manages the physical infrastructure, operating systems, database engines, and applications. However, the customer is always responsible for managing and securing identities and directory infrastructure, which includes configuring user accounts and defining access permissions for staff.

Adım Adım Çözüm

1
Identify the cloud service model described in the scenario.
The scenario describes a property management system (PMS) that is fully hosted by the vendor and accessed via a web browser, which is a Software as a Service (SaaS) model.
Correctly classifying the service model is necessary to apply the appropriate shared responsibility boundaries.
2
Determine the customer's responsibilities within the Software as a Service (SaaS) shared responsibility matrix.
Under SaaS, the customer is responsible for information and data, devices (mobile and PCs), and accounts and identities (people).
This identifies the specific area of responsibility that remains with the customer, leading to the correct option.

Anahtar Kavram

Under the cloud shared responsibility model, the customer is always responsible for managing user accounts, identities, and data access, regardless of whether they use IaaS, PaaS, or SaaS.
Bu soruyu puanla