Microsoft Azure Fundamentals (AZ-900)Describe cloud conceptsHard
A company is evaluating cloud providers and is concerned about the shared responsibility model. They want to understand which specific security aspects they would still be responsible for when using a Platform as a Service (PaaS) offering. Which of the following is a security responsibility of the customer in a PaaS model?
- APhysical security of the data centers
- BApplication code and data
- COperating system patching
- DNetwork infrastructure (e.g., routers, switches)
Show answer & explanationAnswer & explanation
Correct answer: B. Application code and data
In a PaaS model, the cloud provider manages the underlying infrastructure, operating systems, and network. The customer remains responsible for the security of their own application code, configuration, and the data they store and process.
Why the other options are wrong
- A. Physical security of data centers is always the cloud provider's responsibility.
- C. Operating system patching is managed by the cloud provider in a PaaS model.
- D. Network infrastructure is managed by the cloud provider in a PaaS model.
Shared Responsibility Model (PaaS)
A framework outlining the security responsibilities between a cloud provider and a customer in a PaaS environment.
- Provider: OS, network, physical security
- Customer: Applications, data, access management
- Shared: Network controls, identity management
Memory trick: PaaS: Provider handles Platform, You handle Your Apps and Data.