1.10 Compare Security Operations Considerations of Cloud Platforms Such as IaaS, PaaS 350-201 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement correctly describes the shared responsibility model in IaaS versus PaaS?

   • AIn IaaS, the customer is responsible for the OS; in PaaS, the provider is responsible for the runtime.
   • BIn both IaaS and PaaS, the customer is responsible for the hypervisor.
   • CIn IaaS, the provider is responsible for the OS; in PaaS, the customer is responsible for the runtime.
   • DIn both IaaS and PaaS, the provider is responsible for the application code.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company runs a multi-tier application on IaaS VMs. The application tier must communicate with the database tier, but the database tier must not be accessible from the internet. Which combination of controls should the security team implement?

   • APlace the application and database tiers in different subnets, use an NSG on the database subnet to allow traffic only from the application subnet, and do not assign a public IP to the database VMs
   • BPlace both tiers in the same subnet and use an NSG to block internet traffic to the database VMs
   • CAssign a public IP to the database VMs and rely on the NSG to block internet traffic
   • DUse Azure Firewall to allow traffic from the application tier to the database tier and block all other traffic
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A security architect is evaluating the shared responsibility model for a new deployment. The application requires the customer to have full control over the network configuration, including custom routing and firewalling. Which cloud service model is most appropriate?

   • AIaaS, because it provides the customer with control over network configuration
   • BAny model, because network configuration is always customer-controlled
   • CSaaS, because it provides the most control over the network
   • DPaaS, because it abstracts network configuration
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which operational security task is typically the provider's responsibility in a PaaS environment?

   • AManaging user access to the application
   • BMonitoring application-level logs
   • CResponding to application security incidents
   • DPatching the runtime environment
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In a PaaS environment, which security responsibility is typically assigned to the customer?

   • AManaging the database server software
   • BPatching the underlying operating system
   • CSecuring the application code and its data
   • DConfiguring the network firewalls at the physical layer
   Reveal Solution Discussion Select an answer first