Certified Cloud Security Professional (CCSP) — Question 203

Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

Answer options

• A. Data
• B. Governance
• C. Application
• D. Physical

Correct answer: C

Explanation

The correct answer is C, as both the cloud customer and provider share responsibility for the application, including its management and updates. In contrast, data management is primarily the customer's responsibility, governance policies are more about compliance and oversight, and physical infrastructure is solely the provider's domain.