Multiple choice technology security

This application is for deployment on cloud, so security will entirely be service provider's responsibility and not ours. This is a

  1. Absolutely Correct Assumption

  2. Absolutely Incorrect assumption

  3. Partially Correct Assumption

  4. Possibly correct Assumption
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

The answer to this question is C. Partially Correct Assumption.

Explanation:

The cloud provider will take care of the physical security of the infrastructure, such as the data centers and the network. However, the responsibility for application security still lies with the organization that owns the application. This includes things like ensuring that the application is coded securely, that it is properly configured, and that it is regularly updated with security patches.

Therefore, the assumption that security will entirely be the service provider's responsibility is partially correct. The service provider will take care of some aspects of security, but the organization still has a responsibility to ensure the security of their application.

Here is a table that summarizes the different aspects of security that are the responsibility of the cloud provider and the organization:

Aspect of Security Responsibility
Physical security of the infrastructure Cloud provider
Network security Cloud provider
Application security Organization
Data security Organization
Compliance with regulations Organization
AI explanation

Cloud security follows a shared-responsibility model: the cloud provider secures the underlying infrastructure (physical hosts, hypervisor, network), but the customer remains responsible for securing what they put on top of it — application code, configuration, identity/access management, and data. So assuming security is 'entirely' the provider's job is only partially true at best.

Keep practicing — related questions