Exam 350-701 topic 1 question 175 discussion

Why A for IaaS? Shouldn't it be C?

https://www.bmc.com/blogs/saas-vs-paas-vs-iaas-whats-the-difference-and-how-to-choose/ According to IaaS, the provider is responsible for: Virtualization Servers Storage Networking Hypervisor being the "Virtualisation", therefore C is the correct answer!

I noticed various individuals are a bit confused and overthinking it. This question is about IaaS (Infrastructure as a service) and the confusion relays with virtualization. The customer is responsible for the Virtual network, but the provider is only responsible for the Hypervisor. customer responsibility: - People - data - apps - runtime - middleware - OS - virtual network Provider responsible for: - Hypervisor - servers - storage - physical network

I think , option A and C is valid , but regarding Security , I think firewalling is more specific and should be done before O.S hardening ..

C. hypervisor OS hardening Most Voted

Answer C

You have to take on account that there are multiple OSes here, Vendor is responsible for the hypervisor's OS version (currently Hyper-V Server 2022 is the latest as of today) while the VM's software version (Windows 11 for example) is not. https://comparacloud.com/wp-content/uploads/2019/09/saas-vs-paas-vs-iaas.jpg

At the first look, I would choose "C". But after a while, "A" maybe more suitable. It is because for the "services" model, Hypervisor would not do "serve" to Cloud users but virtual machine does. For me, even I am running hypervisor, I seldom to take care of it since the management network is isolated to the public access.

It's C

With an IaaS model, the vendor is responsible for security of the physical data centers and other hardware that power the infrastructure -- including VMs, disks and networks. Users must secure their own data, operating systems and software stacks that run their applications. (my answer: C)

Infrastructure as a Service (IaaS) in cloud computing is one of the most significant and fastest growing field. In this service model, cloud providers offer resources to users/machines that include computers as virtual machines, raw (block) storage, firewalls, load balancers, and network devices.

Clearly C in an IaaS environment.

Surely C? https://www.leanix.net/en/wiki/saas/iaas-vs-paas-vs-saas?utm_term=&utm_source=adwords&utm_medium=ppc&utm_campaign=UK+%7C+SMP+%7C+SaaS+Management+%7C+DSA+%7C+ENG&hsa_ver=3&hsa_cam=15150382310&hsa_grp=133953171750&hsa_acc=9751618594&hsa_kw=&hsa_mt=&hsa_net=adwords&hsa_src=g&hsa_tgt=dsa-1465784135448&hsa_ad=563932871660&gclid=Cj0KCQjw54iXBhCXARIsADWpsG-gPk26BNMvGPkFB34KtX0PVry-x1Wq5mNlSFBDBLJlkmIhvjrUF2caAn2AEALw_wcB

A. firewalling virtual machines - isn't correct because the virtual machine setup in IAAS belongs to the client and the client is responsible for deploying a firewall and other software as they want B. Internet proxy - isn't related C. hypervisor OS hardening - correct answer since the provider is responsible for all security on the baremetal server which runs the hypervisor OS D. CASB - isn't related as thats only a Cloud Access Security Broker

Answer is C Customer Responsibilities: Applications Data Middleware OS People Runtime Environment Virtual network and hosts Security and patching of an VMs Provider Responsibilities Hypervisors Servers Storage devices Physical Networ

D. is correct you guys are all wrong. It is asking which security function responsible for managing in IaaS... C is security related task provider is responsible in IaaS environment. but not security fuction....

in IAAS the service provider is responsible up to the hypervisor. https://www.cisco.com/c/dam/en/us/solutions/collateral/design-zone/cisco-validated-profiles/safe-secure-cloud-architecture-guide.pdf page 7