CV0-002 · Question #3
A company wants to take advantage of cloud benefits while retaining control of and maintaining compliance with all its security policy obligations. Based on the non-functional requirements, which of…
The correct answer is B. IaaS, as the cloud provider has a minimal level of security responsibility. A company seeking cloud benefits while maintaining extensive control over security and compliance should choose a service model that grants them the highest level of responsibility for these aspects. Infrastructure-as-a-Service (IaaS) provides this necessary control.
Question
A company wants to take advantage of cloud benefits while retaining control of and maintaining compliance with all its security policy obligations. Based on the non-functional requirements, which of the following should the company use?
Options
- AHybrid cloud, as use is restricted to trusted customers
- BIaaS, as the cloud provider has a minimal level of security responsibility
- CPaaS, as the cloud customer has the most security responsibility
- DSaaS, as the cloud provider has less security responsibility
How the community answered
(30 responses)- B93% (28)
- C3% (1)
- D3% (1)
Why each option
A company seeking cloud benefits while maintaining extensive control over security and compliance should choose a service model that grants them the highest level of responsibility for these aspects. Infrastructure-as-a-Service (IaaS) provides this necessary control.
Hybrid cloud describes a deployment model, not a service model that defines security responsibility; its use is not inherently restricted to trusted customers.
Infrastructure-as-a-Service (IaaS) offers customers the most control over virtual machines, operating systems, and application stacks compared to other cloud models. This extensive control allows the company to fully implement and enforce its specific security policies and compliance obligations, as the provider is primarily responsible only for the underlying physical infrastructure.
Platform-as-a-Service (PaaS) shifts more security responsibility to the provider, reducing customer control over the underlying OS and middleware, which limits the ability to meet extensive security policies.
Software-as-a-Service (SaaS) shifts the most security responsibility to the provider, leaving the customer with minimal control over application security or infrastructure.
Concept tested: Cloud shared responsibility model and IaaS control
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility
Topics
Community Discussion
No community discussion yet for this question.