5.3 Explain the Cloud Shared Responsibility Model CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How does Palo Alto Networks Prisma Cloud help customers fulfill their shared responsibility?

   • AIt automatically patches all customer virtual machines.
   • BIt replaces the need for cloud provider security.
   • CIt provides physical security for cloud data centers.
   • DIt offers security visibility and compliance monitoring across cloud environments.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is deploying a multi-tier application in a public cloud IaaS environment. They need to inspect and filter traffic between the web tier and the application tier. Which Palo Alto Networks solution is best suited for this requirement?

   • AVM-Series virtual firewall
   • BGlobalProtect
   • CCortex XDR
   • DPrisma Cloud
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is moving its on-premises virtualized workloads to an IaaS cloud. The cloud provider manages the physical hosts and the hypervisor. The company's security team is responsible for securing the guest operating systems and applications. Which security control is the company responsible for implementing?

   • APatching the hypervisor software
   • BMaintaining the physical server hardware
   • CConfiguring the virtual network firewall for the guest VMs
   • DEnsuring physical data center security
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is migrating a legacy application to the cloud. The application has strict compliance requirements for data encryption and access logging. The company wants to minimize its operational burden while retaining control over the application's configuration. Which service model should they choose, and what responsibility remains with the company?

   • AIaaS; the company is responsible for patching the guest OS and managing the application
   • BOn-premises; the company is responsible for all security aspects
   • CPaaS; the company is responsible for managing the application and data, while the provider handles the runtime and infrastructure
   • DSaaS; the company is responsible for managing the application and data, while the provider handles everything else
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company subscribes to a SaaS email and collaboration suite. The provider is responsible for the application software, runtime, and underlying infrastructure. Which security responsibility remains with the company?

   • AManaging the email server operating system
   • BApplying security patches to the collaboration application
   • CConfiguring user access and data sharing policies
   • DSecuring the physical servers hosting the service
   Reveal Solution Discussion Select an answer first