Exam CCSK All QuestionsBrowse all questions from this exam
Question 28

Which data security control is the LEAST likely to be assigned to an IaaS provider?

    Correct Answer: A

    IaaS providers concentrate on supplying infrastructure components such as virtual machines, storage, and networking. Application logic, which involves the design, development, and implementation of specific functionalities, typically falls under the responsibility of the customer or application owner deploying their applications on the IaaS infrastructure. Therefore, application logic is the least likely data security control to be assigned to an IaaS provider.

Discussion
BrainiacOption: A

The data security control that is the LEAST likely to be assigned to an IaaS (Infrastructure as a Service) provider is: A. Application logic IaaS providers primarily focus on providing the foundational infrastructure components, such as virtual machines, storage, and networking. They offer a platform for customers to build and deploy their own applications. The responsibility for application logic, including the design, development, and implementation of specific functionalities, typically lies with the customer or the software/application owner. While IaaS providers may offer some basic security measures at the infrastructure level, they are not responsible for the application logic itself. That aspect is typically the responsibility of the customer or the application owner utilizing the IaaS infrastructure.