Examkin

Soru

Zorluk: ZorSoftware as a Service (SaaS)

A company is implementing a new cloud-based Human Resources (HR) portal for employee self-service. The company subscribes to a fully functional cloud solution where the cloud provider hosts, maintains, and updates the application software, operating systems, and underlying hardware. The company is evaluating the shared responsibility model for this deployment.

Which of the following responsibilities is retained by the company under this cloud service model?

  1. A
    Configuring and maintaining the database middleware and application runtime environment
  2. B
    Performing operating system maintenance and applying software security patches to the servers
  3. Managing user identities, device access permissions, and the information stored within the applicationCevap
  4. D
    Allocating capital expenditure (CapEx) to acquire the application software licenses and hardware hosting resources

Cevap

Managing user identities, device access permissions, and the information stored within the application
Under the shared responsibility model for Software as a Service (SaaS), the customer always retains sole responsibility for managing and securing their own data, configuring user identities/accounts, and managing device access. The cloud provider handles all other layers, including physical infrastructure, virtual machines, operating systems, and application software.

Adım Adım Çözüm

1
Identify the cloud service model described in the scenario.
The scenario describes a subscription to a fully functional cloud application where the provider manages all underlying layers (hardware, OS, middleware, application code). This corresponds to Software as a Service (SaaS).
Determining the correct service model is essential to applying the correct shared responsibility framework.
2
Apply the shared responsibility model rules for Software as a Service (SaaS).
In SaaS, the cloud provider manages the physical security, host hardware, hypervisor, operating system, network controls, and application software. The customer remains responsible only for information/data, devices (mobile and PC), and accounts/identities.
Mapping responsibilities ensures correct identification of customer obligations.
3
Evaluate the choices to find which responsibility belongs to the customer under SaaS.
Managing user identities, device access permissions, and data is a customer responsibility. Other choices involve managing middleware, OS patching, or CapEx, which are incorrect.
Verifying the correct responsibility leads to the final selection.

Anahtar Kavram

Shared responsibility model in Software as a Service (SaaS)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Software as a Service (SaaS)

Bu konudan daha fazla soru