3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a customer responsibility under the shared responsibility model?

   • APhysical security of the data center
   • BData classification and protection
   • CPatching the hypervisor
   • DSecuring the network infrastructure
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A government agency is planning a community cloud for multiple agencies with similar compliance requirements. The cloud will be hosted on infrastructure owned and operated by a third-party provider. Which security responsibility is the agency's responsibility?

   • ASecuring the physical servers in the community cloud data center
   • BManaging the hypervisor that hosts the agency's virtual machines
   • CConfiguring access controls for the agency's data and applications
   • DMaintaining the network switches in the data center
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is comparing the shared responsibility models of two major cloud providers to decide where to host a new application. The company plans to use a managed Kubernetes service (PaaS) on both providers. The security team wants to know which responsibility is likely to differ between the two providers. Which responsibility should the team compare?

   • AThe specific security features and controls the provider offers for the managed service
   • BThe customer's responsibility for managing the Kubernetes control plane
   • CThe customer's responsibility for securing the application code
   • DThe customer's responsibility for the physical security of the data center
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A company uses an IaaS virtual machine to host a web application. Who is responsible for patching the operating system?

   • AThe customer
   • BBoth the provider and the customer
   • CThe cloud provider
   • DA third-party security vendor
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company is using a public cloud IaaS provider. The provider is responsible for the physical security of the data center and the hypervisor. The company is responsible for the guest OS, applications, and data. A security breach occurs because a misconfigured firewall rule on the VM's network security group allowed unauthorized access. Who is responsible for this misconfiguration?

   • AThe company, because they are responsible for configuring the network security group
   • BBoth the provider and the company, because network security is shared
   • CThe cloud provider, because they manage the network infrastructure
   • DNeither, because the breach was caused by an external attacker
   Reveal Solution Discussion Select an answer first