3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company is migrating a legacy application from an on-premises data center to a public cloud IaaS environment. The application runs on a Windows VM. The security team is updating its vulnerability management process. The team is responsible for patching the guest OS and the application. Which component is the cloud provider responsible for patching?

   • AThe firewall rules configured inside the VM
   • BThe hypervisor hosting the VM
   • CThe application running on the VM
   • DThe Windows guest operating system
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which statement best describes the core principle of the shared responsibility model in cloud computing?

   • AThe customer is responsible for all security controls, including physical security of the data center.
   • BSecurity responsibilities are divided between the provider and the customer, with each party managing the controls they are best positioned to implement.
   • CThe cloud provider is responsible for all security controls, including customer data and access management.
   • DSecurity responsibilities are determined solely by the customer's compliance requirements, regardless of the provider's capabilities.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is moving from an IaaS environment to a PaaS environment for its web applications. The security team is reviewing how the change affects their responsibilities. Which responsibility will the company no longer need to manage after the move to PaaS?

   • APatching the guest operating system of the web server
   • BEncrypting the application's data at rest
   • CManaging the application's user authentication logic
   • DConfiguring the web application firewall rules
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   An organization uses a SaaS email service. Which security task is the organization responsible for?

   • AManaging user access and enforcing multi-factor authentication
   • BConfiguring the network firewall for the email service
   • CSecuring the physical servers hosting the email service
   • DPatching the email application
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   When comparing AWS, Azure, and GCP shared responsibility models, what is a common variation?

   • AThe provider is always responsible for customer data encryption.
   • BThe customer has no security responsibilities in any provider's model.
   • CThe specific services and documentation may differ, but the core division of responsibilities is similar.
   • DThe customer is always responsible for physical security in all providers.
   Reveal Solution Discussion Select an answer first