Soru

Zorluk: OrtaSoftware as a Service (SaaS)

A healthcare clinic adopts a cloud-based practice management platform delivered as a Software as a Service (SaaS) solution. The clinic needs to define the security boundaries for its IT staff under the shared responsibility model. Which of the following security tasks is the sole responsibility of the clinic?

  1. A
    Updating the database engine version used by the scheduling application.
  2. Classifying patient data and configuring user access permissions for the staff.Cevap
  3. C
    Deploying security updates to the virtual machines that host the web service.
  4. D
    Configuring network firewalls at the cloud provider's physical datacenter boundaries.

Cevap

Classifying patient data and configuring user access permissions for the staff.
In a Software as a Service (SaaS) model, the cloud provider is responsible for maintaining all physical infrastructure, operating systems, and applications. The customer, however, always retains responsibility for the security and classification of their own data, as well as managing user identities and access permissions.

Adım Adım Çözüm

1
Identify the cloud deployment model described in the scenario.
The scenario describes a Software as a Service (SaaS) model.
Knowing the model helps determine the distribution of responsibilities under the shared responsibility model.
2
Evaluate each security task against the SaaS shared responsibility model.
Tasks related to physical security, host operating systems, and application middleware are managed by the cloud provider, while data governance and access control remain with the customer.
This distinguishes customer-owned tasks from provider-owned tasks to determine the correct responsibility.

Anahtar Kavram

Under the Software as a Service (SaaS) model, the cloud provider manages the entire application stack, while the customer maintains responsibility for data classification, endpoints, and identity access management.
Tahmini Süre:1m 0s
Bu soruyu puanla