CompTIA Security+ (SY0-601) — Question 666

While considering the organization's cloud-adoption strategy, the Chief Information Security Officer sets a goal to outsource patching of firmware, operating systems, and applications to the chosen cloud vendor. Which of the following best meets this goal?

Answer options

• A. Community cloud
• B. PaaS
• C. Containerization
• D. Private cloud
• E. SaaS
• F. IaaS

Correct answer: E

Explanation

SaaS (Software as a Service) is the correct choice because it provides software applications over the internet, relieving the organization from directly managing updates and maintenance. Other options like IaaS and PaaS require the organization to handle more management aspects, making them less suitable for the CISO's goal of outsourcing patching responsibilities.