Exam CCAK topic 1 question 41 discussion

According to the Shared Responsibility Model (Page 280 CCAK Study Guide) application, CSP is full responsable. So I think that the right answer is A.

When using a SaaS solution, application security is a shared responsibility between the cloud service provider (CSP) and the cloud service consumer. The CSP is responsible for securing the underlying infrastructure and the application itself. This includes tasks such as patching, vulnerability management, and ensuring secure development practices. The cloud service consumer is responsible for aspects of application security that are within their control, such as proper configuration, user access management, and data protection measures like encryption. The consumer should also ensure that they are following best practices for secure usage of the SaaS solution.

App security is responsibility of csp

SaaS providers handle much of the security for a cloud application. The SaaS provider is responsible for securing the platform, network, applications, operating system, and physical infrastructure. However, providers are not responsible for securing customer data or user access to it.

In SaaS environment client is responsible only for data and access, CSP is responsible for Application maintenance. Answer should be A.

I agree. The customer is also responsable. https://www.paloaltonetworks.com/cyberpedia/cloud-security-is-a-shared-responsibility#:~:text=SaaS%3A%20SaaS%20vendors%20are%20primarily,how%20customers%20use%20the%20applications

Should be D