CCSP · Question #230
Your organization is developing software for wide use by the public. You have decided to test it in a cloud environment, in a PaaS model. Which of the following should be of particular concern to…
The correct answer is B. Backdoors. When developing software for public use in a PaaS environment, ensuring the absence of backdoors in the developed application or platform components is a paramount security concern.
Question
Your organization is developing software for wide use by the public. You have decided to test it in a cloud environment, in a PaaS model. Which of the following should be of particular concern to your organization for this situation?
Options
- AVendor lock-in
- BBackdoors
- CRegulatory compliance
- DHigh-speed network connectivity
How the community answered
(55 responses)- A4% (2)
- B76% (42)
- C7% (4)
- D13% (7)
Why each option
When developing software for public use in a PaaS environment, ensuring the absence of backdoors in the developed application or platform components is a paramount security concern.
Vendor lock-in is a business concern related to the difficulty and cost of switching cloud providers, not a direct security vulnerability for the software or its public users.
When an organization develops software for wide public use in a PaaS environment, ensuring the application is free from backdoors is a critical security concern. Backdoors, whether intentionally or unintentionally embedded in the application code or third-party libraries, represent a severe vulnerability that could compromise user data, system integrity, and public trust.
Regulatory compliance is always important for public-facing software, but 'backdoors' is a specific and critical security vulnerability that poses an immediate threat to the software's integrity and user security, making it a more particular concern in this context than the broader category of compliance.
High-speed network connectivity is a performance requirement for a public-facing application, not a security concern that threatens the integrity or confidentiality of the software or its users.
Concept tested: PaaS security considerations (application vulnerabilities)
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Topics
Community Discussion
No community discussion yet for this question.