In which two cloud computing service models are the vendors responsible for vulnerability and patch management of the underlying operating system? (Choose two.)

The correct answer is A. SaaS B. PaaS. In the shared responsibility model: In SaaS (Software as a Service), the vendor manages everything - infrastructure, OS, middleware, and the application itself. In PaaS (Platform as a Service), the vendor manages the infrastructure and the underlying OS; customers are only…

Submitted by asante_acc· Apr 18, 2026Cloud Security

Question

Options

ASaaS
BPaaS
COn-premises
DIaaS

How the community answered

(22 responses)

A
91% (20)
C
5% (1)
D
5% (1)

Explanation

In the shared responsibility model: In SaaS (Software as a Service), the vendor manages everything - infrastructure, OS, middleware, and the application itself. In PaaS (Platform as a Service), the vendor manages the infrastructure and the underlying OS; customers are only responsible for their application code and data. In IaaS (Infrastructure as a Service), the vendor manages physical hardware and virtualization, but the customer is responsible for the OS, patching, and everything above it. On-premises means the organization owns and manages all layers, including OS patching.

Topics

#Cloud Service Models#Shared Responsibility Model#Vulnerability Management#Patch Management

Community Discussion

No community discussion yet for this question.

Full PCCET Practice