5.3 Explain the Cloud Shared Responsibility Model CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary role of Palo Alto Networks VM-Series in the shared responsibility model?

   • ATo provide next-generation firewall protection for customer workloads
   • BTo manage the hypervisor security
   • CTo secure the physical infrastructure of the cloud provider
   • DTo replace the cloud provider's identity management
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which security responsibility belongs to the cloud service provider?

   • AConfiguring network security groups
   • BPatching the guest operating system of a virtual machine
   • CManaging user access to cloud resources
   • DSecuring the physical data center
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company uses a public cloud IaaS environment. The cloud provider is responsible for the physical infrastructure and hypervisor. The company's security team is responsible for securing the guest OS and applications. They need to implement a solution that provides network segmentation and threat prevention between VMs. Which Palo Alto Networks solution should they deploy, and what is the primary responsibility they are fulfilling?

   • AGlobalProtect; fulfilling the customer's responsibility for remote access security
   • BPrisma Cloud; fulfilling the provider's responsibility for physical security
   • CVM-Series; fulfilling the customer's responsibility for securing the guest OS and applications
   • DPanorama; fulfilling the provider's responsibility for managing the hypervisor
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which security responsibility belongs to the cloud customer?

   • AManaging user identities and access
   • BMaintaining the underlying hardware
   • CPhysical security of the data center
   • DSecurity of the hypervisor
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is evaluating cloud service models for a new application. They have a small security team and want to minimize the number of security controls they must manage. However, they need to ensure compliance with data protection regulations, which requires them to control data access and encryption. Which service model should they choose, and what is the primary security responsibility they retain?

   • ASaaS; they retain responsibility for managing the application and data access
   • BOn-premises; they retain responsibility for all security controls
   • CPaaS; they retain responsibility for managing the application and data access
   • DIaaS; they retain responsibility for patching the OS and managing the application
   Reveal Solution Discussion Select an answer first