Certificate of Cloud Auditing Knowledge (CCAK) — Question 5

In all three cloud deployment models, (IaaS, PaaS, and SaaS), who is responsible for the patching of the hypervisor layer?

Answer options

• A. Cloud service customer
• B. Shared responsibility
• C. Cloud service provider
• D. Patching on hypervisor layer is not required

Correct answer: C

Explanation

The cloud service provider is responsible for managing and patching the hypervisor layer to ensure security and performance. The cloud service customer does not have access to the underlying infrastructure, while shared responsibility pertains to aspects of security that involve both parties. The option stating that patching is not required is incorrect, as regular updates are essential for maintaining system integrity.