Exam 350-701 topic 1 question 579 discussion

Patch Management in the Cloud Patch management in the cloud is also a shared responsibility in IaaS and PaaS environments, but not in a SaaS environment. For example, in a SaaS environment, the CSP is the one responsible for patching all software and hardware vulnerabilities. However, in an IaaS environment, the CSP is responsible only for patching the hypervisors, physical compute and storage servers, and the physical network. You are responsible for patching the applications, operating systems (VMs), and any virtual networks you deploy. Chapter 9. Securing the Cloud CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide, 2nd Edition

Its B as the official guide says: "To ensure that application vulnerabilities are appropriately scanned and mitigated, the IaaS (Infrastructure as a Service) model requires the customer to take active responsibility for these tasks. This aligns with the detailed responsibilities outlined in the CCNP and CCIE Security Core SCOR 350-701 Official Cert Guide."

Answer c

Hello fear not and dont be confused and over think it utilize what you know about the different cloud models. Answer is B because the customer has the most responsibilities. Just think of it like that.

logically.. if the answer were C.. it would have to be B also.. yes? Software as a Service - vendor does most Platform as a Service - vendor does less Infrastructure as a Service - vendor does even less yes?

Answer B IaaS: You purchase virtual power to execute your software as needed. Platform as a Service (PaaS): PaaS provides everything except applications. Reference: Official 350-701 Cert guide pag 1336

Iaas never is comprosised with application security , only with infra devices... PasS is the only obvious choice

The definitely correct answer is B. Answer C is not wrong in principle, but the PaaS model allows for variations in this question.

PaaS : Platform as a Service

C Platform-as-a-service (PaaS) is another step further from full, on-premise infrastructure management. It is where a provider hosts the hardware and software on its own infrastructure and delivers this platform to the user as an integrated solution, solution stack, or service through an internet connection. Primarily useful for developers and programmers, PaaS allows the user to develop, run, and manage their own apps without having to build and maintain the infrastructure or platform usually associated with the process. You write the code, build, and manage your apps, but you do it without the headaches of software updates or hardware maintenance. The environment to build and deploy is provided for you. PaaS is a way that developers can create a framework to build and customize their web-based applications on. Developers can use built-in software components to create their applications, which cuts down on the amount of code they have to write themselves.

Should be C PaaS Since App and Data is customer managed