350-201 Question 43
Select 2A company is migrating its applications to the cloud and is evaluating the security operations considerations for Infrastructure as a Service (IaaS) and Platform as a Service (PaaS). Which of the following statements accurately describe the responsibilities of the customer in these cloud models?
- A
In IaaS, the customer is responsible for securing the operating system, applications, and data.
- B
In PaaS, the customer is responsible for managing and securing the underlying infrastructure, including hardware.
- C
In IaaS, the cloud provider is responsible for securing applications running on virtual machines.
- D
In PaaS, the customer is responsible for securing the data and applications developed on the platform.
- E
In IaaS, the customer is only responsible for securing the physical network devices.
Show answer and explanation
Correct answers: A, D
Explanation
Understanding the division of responsibilities in cloud service models is critical for effective security operations. In IaaS, customers handle the security of operating systems, applications, and data, while the cloud provider manages the underlying infrastructure. In PaaS, customers focus on securing their applications and data, while the provider is responsible for the platform and infrastructure. This shared responsibility model ensures that both parties have clear roles in maintaining a secure cloud environment.
- A. Correct.
Correct: In IaaS, the customer has control over virtual machines, operating systems, applications, and data. Therefore, the customer is responsible for securing these components.
- B. Incorrect.
Incorrect: In PaaS, the cloud provider manages the underlying infrastructure, and the customer focuses on applications and data, not the hardware or infrastructure.
- C. Incorrect.
Incorrect: In IaaS, the cloud provider is responsible for securing the underlying infrastructure, not the applications running on virtual machines. Application security is the customer's responsibility.
- D. Correct.
Correct: In PaaS, the customer is responsible for securing the data and applications they build and deploy, while the provider manages the platform and infrastructure.
- E. Incorrect.
Incorrect: In IaaS, the customer does not manage or secure physical network devices. This is the responsibility of the cloud provider.