CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 314


Which of the following areas of responsibility would be shared between the cloud customer and cloud provider within the Software as a Service (SaaS) category?

Show Answer
Correct Answer: A

In the context of Software as a Service (SaaS), the management of data is typically considered a shared responsibility. The cloud provider is responsible for securing the infrastructure and ensuring that the data is stored properly and backed up, while the cloud customer is responsible for the data they input into the system, as well as the proper classification and management of that data. Governance, applications, and physical infrastructure typically fall more distinctly within the responsibilities of either the cloud provider or the customer rather than being shared.

Discussion

3 comments
Sign in to comment
AWSPro24
Dec 30, 2023

This is an odd question. You are responsible for data you add to a SaaS solution and you're responsible for the governance around who gets what permissions.

styro
Aug 28, 2024

the question didnt ask what the customer is responsible for. it asked what is a SHARED responsibility between the customer and provider. in a saas the provider is not responsible for the data you put in, or how you govern the SaaS application

akg001Option: C
May 22, 2024

C. Application

MaciekMTOption: B
Feb 23, 2025

In a Software as a Service (SaaS) model, governance is a shared responsibility between the cloud provider and the cloud customer. Governance includes compliance, security policies, and risk management to ensure that the service meets business and regulatory requirements. Why Not the Others? A. Data → The cloud customer is primarily responsible for securing and managing their own data (e.g., access control, encryption, compliance). C. Application → The cloud provider fully manages the application, including maintenance, security, and updates. The customer only uses it. D. Physical → The cloud provider is solely responsible for the physical infrastructure, including data centers, hardware, and networking.