Shared responsibility model in Cybersecurity - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the Shared Responsibility Model in cybersecurity?

It is a framework that defines which security tasks are handled by the cloud provider and which are handled by the customer.

beginner

Who is responsible for securing the physical data centers in the Shared Responsibility Model?

The cloud provider is responsible for securing the physical data centers, including hardware and facilities.

beginner

In the Shared Responsibility Model, who manages the security of the operating system and applications?

The customer is responsible for managing the security of the operating system, applications, and data they run on the cloud.

beginner

Why is understanding the Shared Responsibility Model important for cloud users?

Because it helps users know what security tasks they must handle to protect their data and systems in the cloud.

beginner

Give an example of a security task typically handled by the cloud provider.

Examples include securing the physical servers, network infrastructure, and hypervisor that runs virtual machines.

In the Shared Responsibility Model, who is responsible for data encryption within cloud applications?

A The customer

B The cloud provider

C Both equally

D No one

Customers are responsible for encrypting their data within cloud applications to protect it.

Which of the following is a responsibility of the cloud provider?

A Configuring application firewalls

B Managing user access controls

C Securing physical data centers

D Monitoring application logs

Cloud providers secure the physical data centers, while customers manage access and application security.

What does the Shared Responsibility Model help clarify?

A Which cloud provider is best

B Who pays the cloud bills

C How to build cloud apps

D Who is responsible for different security tasks

It clarifies which security tasks belong to the provider and which belong to the customer.

If a customer fails to patch their cloud-based software, who is responsible for the resulting security risk?

A The cloud provider

B The customer

C Both equally

D The software vendor

Customers are responsible for patching and maintaining their software in the cloud.

Which layer is typically NOT the customer's responsibility in the Shared Responsibility Model?

A Physical hardware security

B Data encryption

C Application security

D User access management

Physical hardware security is managed by the cloud provider, not the customer.

Explain the Shared Responsibility Model and why it matters for cloud security.

Think about who protects what in the cloud.

List examples of security tasks handled by the cloud provider and by the customer.

Consider physical vs. software security.