3.1 Describe Security Responsibility Within Common Cloud Shared Responsibility Models 350-701 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A company is deploying a containerized application to a managed Kubernetes service on a major cloud provider. The security team is reviewing the shared responsibility model for this service. The provider manages the control plane, including the API server and etcd. The company manages the worker nodes. Which security task is the company's responsibility?

   • AApplying security patches to the worker node operating systems
   • BPatching the Kubernetes API server
   • CManaging the physical servers that host the control plane
   • DSecuring the etcd database that stores cluster state
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In a private cloud deployment, who is typically responsible for the physical security of the data center?

   • AA third-party auditor
   • BThe cloud service provider, regardless of the deployment model
   • CThe organization that owns or leases the infrastructure
   • DThe cloud customer, but only for logical security
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which statement accurately describes a key difference among major cloud providers' shared responsibility models?

   • AAWS, Azure, and GCP have identical responsibility divisions.
   • BGCP is the only provider that uses a shared responsibility model.
   • CEach provider defines its own model, but the general principle of dividing responsibilities based on control remains consistent.
   • DAWS places more responsibility on the customer than Azure or GCP.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   In the shared responsibility model, what is the primary reason for dividing security responsibilities between the provider and the customer?

   • ATo shift all compliance obligations to the cloud provider.
   • BTo ensure that each party manages the security controls for the components they own or control.
   • CTo reduce the overall cost of security by having the provider handle all controls.
   • DTo eliminate the need for customer security teams.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is comparing IaaS, PaaS, and SaaS offerings for a new application. The security team wants to minimize the company's security responsibilities while retaining control over the application's data and user access. Which service model should the company choose?

   • APaaS, because the provider manages the platform and the company manages the application and data
   • BIaaS, because the company retains full control over the infrastructure
   • CSaaS, because the provider manages everything
   • DAny model, because the customer's responsibilities are the same
   Reveal Solution Discussion Select an answer first