Examkin

Soru

Zorluk: ZorSoftware as a Service (SaaS)

A multinational financial firm plans to subscribe to a cloud-based enterprise resource planning (ERP) system delivered as a Software as a Service (SaaS) solution. During the security architecture review, the compliance team analyzes the Microsoft Azure shared responsibility model to map security controls. Which of the following responsibilities is shared between the SaaS provider and the financial firm?

  1. A
    Operating system and database middleware patching
  2. B
    Procurement and maintenance of physical host servers
  3. Identity and directory infrastructureCevap
  4. D
    Classification and protection of database records and files

Cevap

Identity and directory infrastructure
Identity and directory infrastructure is a shared responsibility in a Software as a Service (SaaS) model. While the cloud provider manages and maintains the identity platform and infrastructure (such as Microsoft Entra ID), the customer is responsible for configuring, managing, and securing their individual user accounts and access credentials.

Adım Adım Çözüm

1
Analyze the cloud service model used in the scenario.
The company is using a Software as a Service (SaaS) deployment for its ERP system.
Understanding the service model is necessary because responsibilities vary between IaaS, PaaS, and SaaS.
2
Examine the boundaries for physical infrastructure, operating systems, and data management under SaaS.
Physical infrastructure, hosting, OS, and applications are managed exclusively by the provider, whereas data and information are managed exclusively by the customer.
This step isolates the boundaries of absolute ownership for both the provider and the customer.
3
Determine which management layer involves overlapping or split duties between both parties.
Identity and directory infrastructure is shared, as the provider hosts the identity platform but the customer manages the users, accounts, and policies within it.
This identifies the shared operational responsibilities to determine the correct option.

Anahtar Kavram

Shared Responsibility Model in Software as a Service (SaaS)
Bu soruyu puanla

Konular

Software as a Service (SaaS)

Bu konudan daha fazla soru