Assume that it is your responsibility to secure the software functioning at top five layers in the exhibit.

Question

Options

• Asoftware as a service
• Bplatform as a service
• Cinfrastructure as a service
• Don-premises

• A
  14% (5)
• B
  6% (2)
• C
  72% (26)
• D
  8% (3)

Explanation

Infrastructure as a Service (IaaS) places responsibility for the top five layers - typically the OS, middleware, runtime, applications, and data - on the customer, while the provider manages the bottom layers (physical hardware, networking, storage, and virtualization). This split is the defining characteristic of the IaaS shared responsibility model.

Why the distractors are wrong:

• A. SaaS - The provider manages nearly everything; the customer is only responsible for data and user access, far fewer than five layers.
• B. PaaS - The provider handles everything up through the runtime, leaving the customer accountable for only the top two layers (applications and data).
• D. On-premises - You own all layers, not just the top five; there is no provider to offload the bottom layers to.

Memory tip: Use the acronym ladder - "I AM Securing the top" for IaaS: the provider gives you the Infrastructure, and All Management above it is yours. The more the provider handles (IaaS → PaaS → SaaS), the fewer layers you secure.

No community discussion yet for this question.