nerdexam
(ISC)2

CCSP · Question #230

Your organization is developing software for wide use by the public. You have decided to test it in a cloud environment, in a PaaS model. Which of the following should be of particular concern to…

The correct answer is B. Backdoors. When developing software for public use in a PaaS environment, ensuring the absence of backdoors in the developed application or platform components is a paramount security concern.

Submitted by wei.xz· Apr 18, 2026Cloud Platform and Infrastructure Security

Question

Your organization is developing software for wide use by the public. You have decided to test it in a cloud environment, in a PaaS model. Which of the following should be of particular concern to your organization for this situation?

Options

  • AVendor lock-in
  • BBackdoors
  • CRegulatory compliance
  • DHigh-speed network connectivity

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    76% (42)
  • C
    7% (4)
  • D
    13% (7)

Why each option

When developing software for public use in a PaaS environment, ensuring the absence of backdoors in the developed application or platform components is a paramount security concern.

AVendor lock-in

Vendor lock-in is a business concern related to the difficulty and cost of switching cloud providers, not a direct security vulnerability for the software or its public users.

BBackdoorsCorrect

When an organization develops software for wide public use in a PaaS environment, ensuring the application is free from backdoors is a critical security concern. Backdoors, whether intentionally or unintentionally embedded in the application code or third-party libraries, represent a severe vulnerability that could compromise user data, system integrity, and public trust.

CRegulatory compliance

Regulatory compliance is always important for public-facing software, but 'backdoors' is a specific and critical security vulnerability that poses an immediate threat to the software's integrity and user security, making it a more particular concern in this context than the broader category of compliance.

DHigh-speed network connectivity

High-speed network connectivity is a performance requirement for a public-facing application, not a security concern that threatens the integrity or confidentiality of the software or its users.

Concept tested: PaaS security considerations (application vulnerabilities)

Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility

Topics

#PaaS security#Shared responsibility model#Supply chain security#Platform integrity

Community Discussion

No community discussion yet for this question.

Full CCSP Practice