Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Computer Hardware and Software

A Bengaluru start-up wants to run its own customer database on virtual machines rented from a cloud vendor, installing and patching the operating system and database software itself, while the vendor maintains only the physical servers, storage and virtualisation. Under the shared responsibility model, which statement is correct?

In an IaaS arrangement the start-up stays responsible for patching and securing the guest operating system, database and its data. The vendor secures only the physical infrastructure and virtualisation layer. Moving data to the cloud does not transfer the data owner's security responsibility to the vendor.

  1. AThe vendor is responsible for patching the guest operating system and database
  2. BThe start-up remains responsible for securing the guest operating system, database and its dataCorrect
  3. CResponsibility for data security shifts wholly to the vendor once data is in the cloud
  4. DNeither party is responsible, since virtual machines are isolated

Explanation

This is an IaaS arrangement, where the customer controls everything above the hypervisor, including the guest OS, applications and data. The vendor secures the physical and virtualisation layers. Option 3 is wrong because moving data to the cloud does not transfer the data owner's accountability.

Did you get it right without looking?

One question tells you little. A timed set on Computer Hardware and Software shows your real accuracy, how long you take and where you lose marks.

Practise Computer Hardware and SoftwareFree diagnostic mock

More Computer Hardware and Software questions