Certified Information Systems Security Professional (CISSP) — Question 432

An organization is considering partnering with a third-party supplier of cloud services. The organization will only be providing the data and the third-party supplier will be providing the security controls. Which of the following BEST describes this service offering?

Answer options

• A. Platform as a Service (PaaS)
• B. Anything as a Service (XaaS)
• C. Infrastructure as a Service (IaaS)
• D. Software as a Service (SaaS)

Correct answer: D

Explanation

The correct answer is D, Software as a Service (SaaS), as it involves the provider managing the software and security while the client focuses on data. A, B, and C describe different service models where the user typically has more control over the infrastructure or platform, which does not align with the scenario presented.