CompTIA Security+ (SY0-701) — Question 23

Which of the following roles, according to the shared responsibility model, is responsible for securing the company’s database in an IaaS model for a cloud environment?

Answer options

• A. Client
• B. Third-party vendor
• C. Cloud provider
• D. DBA

Correct answer: A

Explanation

The correct answer is A, as the client holds the responsibility for securing their own data and databases in an IaaS model. The cloud provider ensures the infrastructure is secure, while the DBA manages the database but does not assume overall security responsibility. A third-party vendor may assist, but it is ultimately the client's obligation to secure their own resources.