In which cloud service model does the customer have the most security responsibility?

Infrastructure as a Service (IaaS)

A company is using a cloud provider's Platform as a Service (PaaS) offering to run a custom application. The application stores sensitive data in a managed database. Which security responsibility belongs to the customer?

Patching the operating system of the database server.

Managing the application code and its security vulnerabilities.

Configuring the network firewall for the platform's infrastructure.

Securing the physical servers that host the platform.

A company is migrating its on-premises infrastructure to a public cloud. The compliance officer is concerned about meeting regulatory requirements for data protection. The company is considering using IaaS, PaaS, and SaaS for different workloads. Which approach best ensures compliance?

Use a mix of service models and ensure that the customer's responsibilities are fulfilled for each.

Use only SaaS to shift all security responsibilities to the provider.

Use only PaaS to balance responsibilities between the customer and provider.

Use only IaaS to have full control over all security aspects.

Which of the following is a customer responsibility under the shared responsibility model?

Physical security of the data center

Managing access to cloud resources

Securing the physical network infrastructure

A company is using a PaaS database service. The database experiences a performance issue that is traced to a misconfiguration in the database's query optimizer. Who is responsible for resolving this issue?

Neither, because the database service is fully managed

Both the provider and the company, because it is a shared issue

The cloud provider, because they manage the database service

The company, because they configured the query optimizer

EC-CouncilCloud Security Essentials

Domain 1Objective 2

Shared Cloud Security Responsibility CSE Practice Questions (Page 4)

Part of the Cloud Computing and Security Fundamentals domain, which makes up ~12% of our current practice bank.

38questions here

8free pages

5concepts

Questions 16–20

16foundation · easy
In which cloud service model does the customer have the most security responsibility?
Select an answer first
17application · medium
A company is using a cloud provider's Platform as a Service (PaaS) offering to run a custom application. The application stores sensitive data in a managed database. Which security responsibility belongs to the customer?
Select an answer first
18expert · hard
A company is migrating its on-premises infrastructure to a public cloud. The compliance officer is concerned about meeting regulatory requirements for data protection. The company is considering using IaaS, PaaS, and SaaS for different workloads. Which approach best ensures compliance?
Select an answer first
19foundation · easy
Which of the following is a customer responsibility under the shared responsibility model?
Select an answer first
20application · medium
A company is using a PaaS database service. The database experiences a performance issue that is traced to a misconfiguration in the database's query optimizer. Who is responsible for resolving this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.