PECB Lead Implementer (ISO/IEC 27001) — Question 53

An organization uses Platform as a Services (PaaS) to host its cloud-based services. As such, the cloud provider manages most of the services to the organization. However, the organization still manages_____________.

Answer options

• A. Operating system and virtualization
• B. Servers and storage
• C. Application and data

Correct answer: C

Explanation

The correct answer is C because in a PaaS model, the organization retains control over the applications it develops and the data it manages, while the cloud provider handles the underlying infrastructure. Options A and B are incorrect as those aspects are typically managed by the cloud provider in a PaaS environment.