Drag and Drop Question Drag and drop the security responsibilities from the left onto the corresponding cloud service models on the right. Answer:

The correct answer is customer responsible for operating system patching; customer responsible for application patching; provider responsible for operating system patching; provider responsible for application patching. In Infrastructure as a Service (IaaS), the customer retains control of the operating system and applications, making them responsible for patching both. In Platform as a Service (PaaS) and Software as a Service (SaaS), the provider manages the underlying OS and application…

Submitted by parkjh· Mar 30, 2026Cloud Security Concepts and Shared Responsibility - typically aligned with certifications such as CompTIA Security+, AWS Cloud Practitioner, or CCSP Domain 1 (Cloud Concepts, Architecture, and Design)

Question

Exhibit

Answer Area

Drag items

provider responsible for operating system patchingcustomer responsible for operating system patchingcustomer responsible for application patchingprovider responsible for application patching

Correct arrangement

customer responsible for operating system patching
customer responsible for application patching
provider responsible for operating system patching
provider responsible for application patching

Explanation

In Infrastructure as a Service (IaaS), the customer retains control of the operating system and applications, making them responsible for patching both. In Platform as a Service (PaaS) and Software as a Service (SaaS), the provider manages the underlying OS and application layers, shifting patching responsibility to the provider. This shared responsibility model is fundamental to cloud security - the higher up the stack the service model goes, the more responsibility shifts from the customer to the provider.

Topics

#Shared Responsibility Model#Cloud Service Models#IaaS vs PaaS vs SaaS#Patch Management

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice