312-38 practice question 26 of 35
If an organization has decided to consume PaaS Cloud service model, then identify the organization's responsibility that they need to look after based on shared responsibility model.
Full set: 363 questionsIn the Platform as a Service (PaaS) cloud model, the cloud provider manages the underlying infrastructure, including the operating system, middleware, and runtime environment. The customer's responsibility is focused on the higher levels of the stack. This includes deploying, managing, and securing their own applications and services that run on the platform. Crucially, the customer is also responsible for the security and management of their own data, user access control, and the configuration of application-level interfaces (APIs).
B. This list includes middleware, OS, and virtual networking, which are the responsibility of the cloud provider in a PaaS model. This better describes an IaaS model.
C. This list includes hypervisors, physical hardware, and data centers, which are always managed by the cloud provider in any cloud service model (IaaS, PaaS, or SaaS).
D. This option is incomplete as it omits the "application," which is the primary component the customer develops, deploys, and manages in a PaaS environment.
1. Mell, P., & Grance, T. (2011, September). The NIST Definition of Cloud Computing. National Institute of Standards and Technology, Special Publication 800-145. p. 2-3, Section: "Service Models". (This foundational document defines PaaS and states the consumer "deploys onto the cloud infrastructure consumer-created or acquired applications" but does not manage the underlying infrastructure.)
2. Microsoft. (2023, September 20). Shared responsibility in the cloud. Microsoft Azure Documentation. (The diagrams and text in this official vendor documentation clearly show that for PaaS, the customer is responsible for "Data" and "Applications," while the provider manages the "Operating system" and below.)
3. Stanford University. (n.d.). Cloud Computing - Shared Responsibility Model. University IT. Retrieved from uit.stanford.edu/service/cloud-shared-responsibility. (This university courseware material illustrates that in PaaS, the customer is responsible for the Application and Data layers.)
Keep practicing
Take the free 312-38 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other 312-38 practice questions
- Question 1Jason has set a firewall policy that allows only a specific list of network services and …
- Question 2------------is a group of broadband wireless communications standards for Metropolitan Ar…
- Question 3Which of the following is true regarding any attack surface?
- Question 4Disaster Recovery is a _________.
- Question 5How is application whitelisting different from application blacklisting?
- Question 6Which among the following tools can help in identifying IoEs to evaluate human attack sur…
