Exam CAS-004 topic 1 question 279 discussion

Operating system security is the answer

https://learn.microsoft.com/en-us/azure/security/fundamentals/shared-responsibility The operating system for Paas model is the CSP responsibility

o In a PaaS model, the cloud provider manages the underlying infrastructure, including the physical hardware, network, and the operating system (OS) itself. However, the customer is responsible for securing their applications, data, and access controls running on that OS. This includes tasks like patching the operating system with security updates, configuring firewall rules within the application, and implementing access controls. o A. Network security: The cloud provider is responsible for securing the physical network infrastructure and its underlying components. However, customers are responsible for configuring firewall rules and other network security settings within their applications and environments.

OS security is the right answer.

The PaaS customer is responsible for securing its applications, data, and user access. The PaaS provider secures the operating system and physical infrastructure.

C. OS security Explanation: In a PaaS model, the cloud provider manages the underlying infrastructure, including the hardware and operating system. However, the customer is responsible for securing the applications, data, identities, and configurations within the operating system. This includes tasks such as configuring user access controls, implementing security patches and updates for applications, and securing data stored and processed within the PaaS environment.

In the shared responsibility model for Platform as a Service (PaaS), the responsibility for OS (Operating System) security typically falls on the customer. This includes tasks such as patch management, configuration hardening, and ensuring the security of applications deployed on the PaaS environment. Microsoft Azure, AWS, and Google Cloud all define OS security as part of the customer's responsibilities under their respective shared responsibility models for PaaS.

Typically in a PaaS you are in charge of the Network Security

In a PaaS model, the customer is responsible for securing the application, data, and user access, while the PaaS provider secures the operating system and physical infrastructure. The customer is also responsible for developing, maintaining, and managing data and user access within their applications. The customer is also responsible fo protecting their software codes and other assets developed on the platform.

It can only be C. For example - AWS Elastic Beanstalk and Azure App Service are PaaS - it's not your responsibility to take care of their hosts, network or physical security.

In a shared responsibility model for Platform as a Service (PaaS), the customer’s responsibility is typically A. Network Security. In a PaaS model, the cloud service provider (CSP) is generally responsible for the infrastructure, including physical hardware, network, and operating system. The customer, on the other hand, is responsible for the security of their own applications and data, which includes network security within their applications. Therefore, the correct answer according to CompTIA best practices is A. Network Security. Please note that the exact responsibilities can vary depending on the specific terms of service of the PaaS provider. It’s always a good idea to review these terms carefully.

I initially thought A, but upon researching it, everything is pointing to the CSP as responsible for the OS maintenance and security

It's important to note that the PaaS provider retains responsibility for the underlying infrastructure, runtime, and platform components. This includes aspects such as the operating system, runtime environment, middleware, and physical security of the infrastructure. Network Security: Customer Responsibility: Configuring and managing network security settings for applications deployed on the PaaS platform. This includes firewall configurations, network segmentation, and secure communication practices.

A: network security, OS security is the responsibility of the cloud provider in Pass we have three share responsibility identity and directory infrastructure application control network control

C. OS security