Certified Cloud Security Professional (CCSP) — Question 16

When using a PaaS solution, what is the capability provided to the customer?

Answer options

• A. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The provider does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
• B. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
• C. To deploy onto the cloud infrastructure consumer-created or acquired applications created using programming languages, libraries, services, and tools that the consumer supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.
• D. To deploy onto the cloud infrastructure provider-created or acquired applications created using programming languages, libraries, services, and tools that the provider supports. The consumer does not manage or control the underlying cloud infrastructure, including network, servers, operating systems, or storage, but has control over the deployed applications and possibly configuration settings for the application-hosting environment.

Correct answer: B

Explanation

The correct answer is B because it accurately states that the consumer has the ability to deploy their applications while not managing the underlying infrastructure. Option A incorrectly attributes the control of the infrastructure to the provider, while option C misrepresents that the consumer creates or supports the applications, which is not a PaaS characteristic. Option D incorrectly states that the applications are provider-created, which contradicts the PaaS model that allows consumer-created applications.