3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Software as a Service (SaaS) model, which security responsibility typically remains with the customer?

   • APatching the underlying operating system
   • BConfiguring the application runtime environment
   • CSecuring the physical servers
   • DManaging user access and data classification
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is using a hybrid cloud model. The company runs a critical application on-premises and uses a public cloud provider for burst capacity. The application's data is stored on-premises. Which security responsibility belongs to the company?

   • AManaging the hypervisor in the public cloud
   • BSecuring the public cloud provider's physical data center
   • CProtecting the data stored on-premises
   • DPatching the public cloud provider's infrastructure
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company uses a SaaS email and collaboration suite. The provider is responsible for the security of the application and the underlying infrastructure. The company's security team is defining its responsibilities for the SaaS environment. Which task must the company's security team perform?

   • ASecuring the physical data center where the email servers are hosted
   • BConfiguring multi-factor authentication for user accounts
   • CPatching the email server operating system
   • DManaging the network firewalls protecting the email service
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In which cloud service model does the customer have the most security responsibility?

   • AInfrastructure as a Service (IaaS)
   • BPlatform as a Service (PaaS)
   • CSoftware as a Service (SaaS)
   • DFunction as a Service (FaaS)
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is using a SaaS HR application. The provider manages the application and the infrastructure. The company's security team discovers that an employee's account was compromised because the employee reused a password. The attacker accessed sensitive employee data. Who is responsible for the data exposure?

   • AThe employee, because they reused the password
   • BThe provider, because they manage the application
   • CBoth the provider and the company, because the provider should enforce MFA
   • DThe company, because they are responsible for managing user access and enforcing strong authentication
   Reveal Solution Discussion Select an answer first