Exam CCSK All QuestionsBrowse all questions from this exam
Question 191

In the cloud provider and consumer relationship, which entity manages the virtual or abstracted infrastructure?

    Correct Answer: B

    In the relationship between a cloud provider and a cloud consumer, the management of the virtual or abstracted infrastructure is typically determined by the service model being used (IaaS, PaaS, SaaS). In some cases, like IaaS, the consumer might manage certain aspects, while in others, like PaaS or SaaS, the provider might handle most of the management. Therefore, it is essential to refer to the specific agreement between the entities to determine the responsibilities for managing the virtual or abstracted infrastructure.

Discussion
MialOption: C

C The virtual/abstracted infrastructure managed by a cloud consumer. That's the compute, network, and storage assets that they use from the resource pools. For example, the security of the virtual network, as defined and managed by the cloud consumer.

BigG83Option: B

It depends on the service model. In case of an IaaS the mentioned references can be valid, so the cloud consumer is responsible to manage the virtual or abstracted infrastructure if those are consumer managed, but still in case of IaaS the Managed Services or the Serverless services run on virutal or abstracted infrastructure and those are managed by the Cloud provider. In case of PaaS and SaaS that is clear the provider manage the virtual infrastructure. This is why the answer B is the correct as it depends on the specific resource.

SHERLOCKAWSOption: C

C. Only the cloud consumer Security-Guidance-v4.0 >> p.77-78 >> The virtual/abstracted infrastructure managed by a cloud user. That’s the compute, network, and storage assets that they use from the resource pools. For example, the security of the virtual network, as defined and managed by the cloud user.

iaciniOption: C

I would say C as well

dotcom21

Refer – section 8.1.2.2 Management Infrastructure The cloud user is, again, responsible for proper rights management and configuration of exposed controls in the management plane.