Which of the following aspects of security is solely the responsibility of the cloud provider?

The correct answer is B. Physical security. Under the shared responsibility model, physical security of the data center infrastructure - including buildings, hardware, cabling, and cooling systems - is always and exclusively the responsibility of the cloud provider. Customers never have physical access to provider…

Submitted by rachelw· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

Options

ARegulatory compliance
BPhysical security
COperating system auditing
DPersonal security of developers

How the community answered

(37 responses)

A
3% (1)
B
95% (35)
C
3% (1)

Explanation

Under the shared responsibility model, physical security of the data center infrastructure - including buildings, hardware, cabling, and cooling systems - is always and exclusively the responsibility of the cloud provider. Customers never have physical access to provider facilities. Regulatory compliance is a shared responsibility, as customers must ensure their applications and data meet applicable regulations. Operating system auditing depends on the service model (in IaaS, customers manage the OS). Personal security of developers is the customer's responsibility, as the provider has no control over the customer's personnel.

Topics

#Shared Responsibility Model#Cloud Provider Responsibilities#Physical Security#Security of the Cloud

Community Discussion

No community discussion yet for this question.

Full CCSP Practice