CCAK · Question #48
In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:
The correct answer is C. only application infrastructure contained within the CSP's instances. In an IaaS model, the cloud service provider is responsible for managing the underlying physical infrastructure, networking, and hypervisor, as well as the platform instances they operate to run the IaaS service itself. A vulnerability assessment scoped to the CSP's…
Question
In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:
Options
- Aboth operating system and application infrastructure contained within the CSP's instances.
- Bboth operating system and application infrastructure contained within the customer's instances
- Conly application infrastructure contained within the CSP's instances.
- Donly application infrastructure contained within the customer's instances.
How the community answered
(20 responses)- A10% (2)
- B5% (1)
- C70% (14)
- D15% (3)
Explanation
In an IaaS model, the cloud service provider is responsible for managing the underlying physical infrastructure, networking, and hypervisor, as well as the platform instances they operate to run the IaaS service itself. A vulnerability assessment scoped to the CSP's infrastructure will scan only the application infrastructure within the CSP's own managed instances (e.g., management plane applications, control plane services) - not the customer's VM instances. Customers are responsible for the OS and applications within their own virtual machines; those are outside the CSP's scanning scope in a standard IaaS engagement.
Topics
Community Discussion
No community discussion yet for this question.