Shared Cloud Security Responsibility CSE Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In which cloud service model is the provider responsible for securing the application and the underlying platform?

   • APlatform as a Service (PaaS)
   • BSoftware as a Service (SaaS)
   • CInfrastructure as a Service (IaaS)
   • DAnything as a Service (XaaS)
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A cloud provider is responsible for which of the following security aspects?

   • AManaging customer passwords and multi-factor authentication
   • BSecuring the hypervisor and underlying network infrastructure
   • CSetting up customer data backup and recovery policies
   • DPatching the operating system of a customer's virtual machine
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is using a cloud provider's PaaS offering to deploy a web application. The application is accessible to customers. The security team wants to ensure that the application is protected against common web attacks. Which action is the customer's responsibility?

   • ASecuring the physical servers hosting the platform.
   • BManaging the network infrastructure.
   • CPatching the underlying web server software.
   • DConfiguring the web application firewall (WAF) rules.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is using a cloud provider's SaaS offering for email. The provider handles the infrastructure and application. Which security responsibility remains with the customer?

   • APatching the email application.
   • BEnsuring the physical security of the data center.
   • CManaging user accounts and passwords.
   • DSecuring the email servers.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A healthcare organization is moving its patient records system to a public cloud. They are concerned about compliance with data protection regulations. The organization's security team argues that the shared responsibility model means the cloud provider is fully accountable for compliance. Which statement correctly addresses this concern?

   • AThe provider is responsible for the security of the cloud, but the customer is responsible for compliance with regulations regarding their data.
   • BThe customer is responsible for physical security, and the provider is responsible for data compliance.
   • CCompliance is not affected by the shared responsibility model.
   • DThe provider is fully responsible for all compliance requirements because they own the infrastructure.
   Reveal Solution Discussion Select an answer first