Practice · Cloud Security Essentials (C|SE)

~/eccouncil-cse · eccouncil-cse_d1_31ba2ee342c0 ▊

← Cloud Security Essentials (C|SE) · practice sheet

eccouncil-cse_d1_31ba2ee342c0 domain/d1 · medium single

A new cloud analyst is confused about who is accountable for securing different layers of a cloud deployment. According to the foundational cloud security concepts, which statement best describes how security responsibility is divided between a customer and a third-party provider such as AWS, Azure, or GCP?

A The provider secures all data and application code, leaving only physical access to the customer
B The provider manages the physical infrastructure, while the customer retains responsibility for data assets and, depending on the service model, elements like application code
C The customer is fully responsible for the physical data centers, and the provider only secures the network
D Responsibility is identical across all service models, with the customer owning nothing beyond user accounts

Unlock this exam to join the per-question discussion and vote on questions.

next question →