3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital is moving its patient records system to a public cloud IaaS environment. The cloud provider is responsible for securing the physical data centers and the hypervisor. The hospital's compliance officer asks which security tasks the hospital must still perform to meet HIPAA requirements. Which task is the hospital's responsibility?

   • AManaging the network infrastructure connecting the data centers
   • BEnsuring the hypervisor is patched against known vulnerabilities
   • CEncrypting the patient data stored in the virtual machines
   • DMaintaining the physical security of the data center facility
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which security aspect is typically the responsibility of the cloud customer?

   • AConfiguring identity and access management policies
   • BManaging the physical network infrastructure
   • CPatching the hypervisor
   • DSecuring the data center facility
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does the shared responsibility model apply to a hybrid cloud deployment?

   • AThe provider is responsible for all security in both the public and private portions.
   • BThe customer is responsible for all security in both the public and private portions.
   • CResponsibilities are divided separately for each environment, with the provider securing the public cloud infrastructure and the customer securing the private cloud.
   • DThe customer and provider share equal responsibility for every component in both environments.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is migrating its on-premises web application to a cloud provider using a Platform-as-a-Service (PaaS) offering. The application runs on a managed web server with an automatically patched operating system. The security team is updating its incident response runbook and needs to document which security controls remain the company's responsibility after the migration. Which control must the company continue to manage?

   • AManaging the physical security of the data center hosting the service
   • BReplacing failed server hardware in the provider's rack
   • CConfiguring the application's authentication and access control policies
   • DPatching the underlying operating system of the web server
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In the shared responsibility model, who is responsible for identity and access management (IAM) for cloud resources?

   • AA third-party identity provider
   • BThe cloud provider
   • CBoth the provider and the customer equally
   • DThe customer
   Reveal Solution Discussion Select an answer first