Exam CCAK topic 1 question 41 discussion

According to the Shared Responsibility Model (Page 280 CCAK Study Guide) application, CSP is full responsable. So I think that the right answer is A.

When using a SaaS solution, application security is a shared responsibility between the cloud service provider (CSP) and the cloud service consumer. The CSP is responsible for securing the underlying infrastructure and the application itself. This includes tasks such as patching, vulnerability management, and ensuring secure development practices. The cloud service consumer is responsible for aspects of application security that are within their control, such as proper configuration, user access management, and data protection measures like encryption. The consumer should also ensure that they are following best practices for secure usage of the SaaS solution.

D. Both cloud provider and the consumer In a Software as a Service (SaaS) model, both the cloud service provider and the consumer share responsibilities for application security. The cloud provider is typically responsible for securing the underlying infrastructure, the platform, and the application itself, including aspects such as patching and general application-level security features. The cloud consumer, on the other hand, is responsible for managing user access, configuring security settings, and protecting data within the application. This shared responsibility model ensures comprehensive security coverage.

App security is responsibility of csp

SaaS providers handle much of the security for a cloud application. The SaaS provider is responsible for securing the platform, network, applications, operating system, and physical infrastructure. However, providers are not responsible for securing customer data or user access to it.

In SaaS environment client is responsible only for data and access, CSP is responsible for Application maintenance. Answer should be A.

I agree. The customer is also responsable. https://www.paloaltonetworks.com/cyberpedia/cloud-security-is-a-shared-responsibility#:~:text=SaaS%3A%20SaaS%20vendors%20are%20primarily,how%20customers%20use%20the%20applications

Should be D