Shared Cloud Security Responsibility CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Under the shared responsibility model, the customer is responsible for which of the following?

   • AConfiguring cloud resources such as virtual machines and databases
   • BPatching the hypervisor that hosts virtual machines
   • CSecuring the physical servers in the cloud provider's data center
   • DManaging the physical network switches and routers
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a key implication of the shared responsibility model for compliance?

   • ACompliance is solely the provider's responsibility because they own the infrastructure.
   • BThe provider's compliance certifications automatically cover all customer workloads.
   • CThe customer must ensure that their use of cloud services complies with applicable regulations.
   • DCompliance is not affected by the shared responsibility model because it is a legal matter.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses a SaaS project management tool. The company's security team wants to enforce a policy that requires users to change their passwords every 90 days. Which action is the company's responsibility?

   • AManaging the physical security of the SaaS provider's data center
   • BEnsuring the SaaS tool's underlying database is encrypted
   • CPatching the SaaS tool's authentication service
   • DConfiguring the password policy in the SaaS tool's settings
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A small business is moving its customer relationship management (CRM) system to a cloud-based SaaS platform. The business owner assumes that because the vendor provides the software, the vendor is responsible for all security. Which aspect of security is still the customer's responsibility?

   • AManaging user access and permissions for employees.
   • BSecuring the physical data center where the CRM is hosted.
   • CEncrypting data at rest in the provider's storage.
   • DPatching the underlying operating system of the CRM servers.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses Microsoft 365 for email and collaboration. The security team wants to ensure that only authorized employees can access sensitive documents stored in SharePoint Online. Which action is the customer's responsibility under the shared responsibility model?

   • AEnsuring the physical security of the data centers hosting SharePoint.
   • BApplying security patches to the SharePoint application code.
   • CConfiguring multi-factor authentication (MFA) for user accounts.
   • DManaging the underlying network infrastructure.
   Reveal Solution Discussion Select an answer first