312-38 practice question 26 of 35

If an organization has decided to consume PaaS Cloud service model, then identify the organization's responsibility that they need to look after based on shared responsibility model.

Full set: 363 questions
Answer options
A: Data, interfaces, application, etc. Correct answer
B: Data, interfaces, application, middleware, OS, VM, virtual network, etc.
C: Data, interfaces, application, middleware, OS, VM, virtual network, hypervisors, processing and memory, data storage, network interfaces, facilities and data centers, etc.
D: Data, interfaces, etc.
Correct Answer:
A. Data, interfaces, application, etc.
Explanation

In the Platform as a Service (PaaS) cloud model, the cloud provider manages the underlying infrastructure, including the operating system, middleware, and runtime environment. The customer's responsibility is focused on the higher levels of the stack. This includes deploying, managing, and securing their own applications and services that run on the platform. Crucially, the customer is also responsible for the security and management of their own data, user access control, and the configuration of application-level interfaces (APIs).

Why Incorrect

B. This list includes middleware, OS, and virtual networking, which are the responsibility of the cloud provider in a PaaS model. This better describes an IaaS model.
C. This list includes hypervisors, physical hardware, and data centers, which are always managed by the cloud provider in any cloud service model (IaaS, PaaS, or SaaS).
D. This option is incomplete as it omits the "application," which is the primary component the customer develops, deploys, and manages in a PaaS environment.

References

1. Mell, P., & Grance, T. (2011, September). The NIST Definition of Cloud Computing. National Institute of Standards and Technology, Special Publication 800-145. p. 2-3, Section: "Service Models". (This foundational document defines PaaS and states the consumer "deploys onto the cloud infrastructure consumer-created or acquired applications" but does not manage the underlying infrastructure.)

2. Microsoft. (2023, September 20). Shared responsibility in the cloud. Microsoft Azure Documentation. (The diagrams and text in this official vendor documentation clearly show that for PaaS, the customer is responsible for "Data" and "Applications," while the provider manages the "Operating system" and below.)

3. Stanford University. (n.d.). Cloud Computing - Shared Responsibility Model. University IT. Retrieved from uit.stanford.edu/service/cloud-shared-responsibility. (This university courseware material illustrates that in PaaS, the customer is responsible for the Application and Data layers.)

Scroll to Top