Cloud and Container Basics
A managed database service in the cloud (one in which the provider operates the database software) is used. Under the shared responsibility model, which of the following generally remains the user's responsibility?
- AApplying security fixes to the OS of the servers running the database and to the database software
- BProtecting the data center buildings and physical equipment such as servers from failures and intrusion
- CManaging the database user accounts and privileges, the network ranges allowed to connect, and the data stored
Show answer and explanation
Answer: C. Managing the database user accounts and privileges, the network ranges allowed to connect, and the data stored
Under the shared responsibility model, the cloud provider and the user share the responsibility for security and operations, and where the boundary lies depends on the type of service. With a managed database service, the provider takes care not only of the physical facilities but also of updating the OS and the database software. On the other hand, who may access which data, which networks may connect and what data is stored remain the user's responsibility in every type of service. An accident in which a misconfiguration exposes a database to the internet is a problem on the user's side.
- A. In a managed service, updates to the OS and the database software are generally handled by the provider.
- B. Managing physical facilities is the provider's responsibility in every type of service.
- C. Correct. Access privileges, connection permissions and data management remain with the user.