Examkin

Soru

Zorluk: KolayCloud Architecture and Deployment Models

An organization hosts its web application using a Platform as a Service (PaaS) model from a public cloud service provider. Under the cloud shared responsibility model, which TWO of the following tasks remain the responsibility of the customer?

  1. Configuring application-level identity access controls and authorization settingsCevap
  2. Securing custom application source code and managing database data classificationCevap
  3. C
    Applying security updates and patches to the underlying server operating system
  4. D
    Configuring network perimeter firewalls for the provider's hypervisor host infrastructure

Cevap

The customer is responsible for configuring application-level access controls and securing custom application code along with data classification.
Under Platform as a Service (PaaS), the cloud service provider abstracts and manages the underlying hardware, hypervisor, and operating system. The customer remains strictly responsible for securing their custom application source code, data classification, user identities, and application-level access controls.

Adım Adım Çözüm

1
Identify the cloud service model referenced in the scenario
The model is Platform as a Service (PaaS).
Different cloud models (IaaS, PaaS, SaaS) divide responsibilities differently between the provider and customer.
2
Determine the division of responsibilities for PaaS
The Cloud Service Provider (CSP) manages physical infrastructure, hardware, network virtualization, and the operating system/runtime environment. The customer manages application logic, code, user access permissions, and data security.
PaaS abstracts the underlying operating system and hardware layer away from the customer.
3
Evaluate the choices based on customer responsibilities
Application authorization configuration and application code/data classification are customer duties. OS patching and hypervisor perimeter defense are CSP duties.
Customer responsibility stops above the runtime/OS layer in PaaS deployments.

Anahtar Kavram

Cloud Shared Responsibility Model (PaaS)
Bu soruyu puanla

Konular

Cloud Architecture and Deployment Models

Bu konudan daha fazla soru