Certified Cloud Security Professional (CCSP) — Question 409

The different cloud service models have varying levels of responsibilities for functions and operations depending with the model's level of service.
In which of the following models would the responsibility for patching lie predominantly with the cloud customer?

Answer options

• A. DaaS
• B. SaaS
• C. PaaS
• D. IaaS

Correct answer: D

Explanation

In the IaaS model, the cloud customer is primarily responsible for managing and patching their own operating systems and applications, as they have control over the infrastructure. In contrast, SaaS providers manage everything, including patches, while PaaS offers some management but with less focus on the underlying OS. DaaS typically involves more management by the provider, leaving less responsibility to the customer.