Examkin

Soru

Zorluk: OrtaSoftware as a Service (SaaS)

A financial services firm adopts a cloud-based tax compliance and reporting system as a Software as a Service (SaaS) solution. Under the shared responsibility model, which two tasks are the responsibility of the financial services firm? (Select two.)

  1. Classifying and protecting the financial data entered into the application.Cevap
  2. Managing and securing the user accounts and identities that access the system.Cevap
  3. C
    Deploying security patches to the operating systems hosting the application.
  4. D
    Updating the tax compliance application software to the latest version.

Cevap

The correct answers are the classification and protection of the financial data, and the management and security of user accounts and identities.
In a Software as a Service (SaaS) model, the cloud provider manages the physical infrastructure, operating systems, and application software. However, the customer always retains responsibility for their own data (information and data) and the accounts that access it (devices, accounts, and identities). Therefore, classifying and protecting the financial data, as well as managing and securing user accounts, are the customer's responsibility.

Adım Adım Çözüm

1
Identify the cloud service model being used in the scenario.
The scenario specifies a Software as a Service (SaaS) deployment.
Different cloud models (IaaS, PaaS, SaaS) partition responsibilities differently between the customer and provider.
2
Recall the customer's responsibilities under the Shared Responsibility Model for SaaS.
In a SaaS model, the customer is responsible for information and data, devices (mobile and PCs), and accounts and identities.
This establishes which parts of the service boundary the customer is accountable for protecting.
3
Evaluate the choices to distinguish customer responsibilities from cloud provider responsibilities.
Data classification and user account management remain with the customer, while application maintenance and operating system updates are managed by the provider.
This isolates the correct options from the distractors based on the SaaS responsibilities identified in Step 2.

Anahtar Kavram

SaaS Shared Responsibility Model
Bu soruyu puanla

Konular

Software as a Service (SaaS)

Bu konudan daha fazla soru