Exam CCSK topic 1 question 202 discussion

Answer is correct.

It depends on the service model. In case of an IaaS the mentioned references can be valid, so the cloud consumer is responsible to manage the virtual or abstracted infrastructure if those are consumer managed, but still in case of IaaS the Managed Services or the Serverless services run on virutal or abstracted infrastructure and those are managed by the Cloud provider. In case of PaaS and SaaS that is clear the provider manage the virtual infrastructure. This is why the answer B is the correct as it depends on the specific resource.

C. Only the cloud consumer Security-Guidance-v4.0 >> p.77-78 >> The virtual/abstracted infrastructure managed by a cloud user. That’s the compute, network, and storage assets that they use from the resource pools. For example, the security of the virtual network, as defined and managed by the cloud user.

I would say C as well

C The virtual/abstracted infrastructure managed by a cloud consumer. That's the compute, network, and storage assets that they use from the resource pools. For example, the security of the virtual network, as defined and managed by the cloud consumer.

Refer – section 8.1.2.2 Management Infrastructure The cloud user is, again, responsible for proper rights management and configuration of exposed controls in the management plane.