350-201 Question 41
Select 3A cybersecurity team is tasked with managing and securing a hybrid cloud environment that utilizes both IaaS and PaaS solutions. What are the key security operations considerations for this scenario?
- A
Monitoring and securing the underlying virtual machines and hypervisors in the IaaS environment
- B
Ensuring secure application development practices and dependency management in the PaaS environment
- C
Configuring network security groups and firewalls for PaaS-hosted applications
- D
Managing the physical security of cloud provider data centers
- E
Implementing identity and access management (IAM) policies for both IaaS and PaaS resources
Show answer and explanation
Correct answers: A, B, E
Explanation
In a hybrid cloud environment utilizing IaaS and PaaS solutions, security responsibilities are shared between the cloud provider and the customer. For IaaS, customers are responsible for securing resources such as virtual machines, hypervisors, and network configurations. In PaaS, the focus shifts to securing applications, including secure coding practices and dependency management. Identity and access management is a shared consideration for both IaaS and PaaS to control access to cloud resources effectively.
- A. Correct.
Monitoring and securing the underlying virtual machines and hypervisors is a critical security operation consideration for IaaS environments, as the customer is responsible for the security of these components.
- B. Correct.
Secure application development practices and dependency management are essential in PaaS environments because the cloud provider manages the underlying infrastructure, and the customer is responsible for the security of their applications and code.
- C. Incorrect.
While network security groups and firewalls are relevant to IaaS environments, they are typically not directly configurable by customers in PaaS environments, as the provider handles much of the underlying network configuration.
- D. Incorrect.
Physical security of the cloud provider's data centers is managed by the cloud provider and is not a responsibility of the customer in either IaaS or PaaS environments.
- E. Correct.
Implementing identity and access management (IAM) policies is crucial for securing both IaaS and PaaS resources, as it ensures proper access control and minimizes the risk of unauthorized access.