In the cloud shared responsibility model, which delineation describes SaaS correctly?

In the cloud shared responsibility model, which delineation describes SaaS correctly?

• A. Customer manages the underlying hardware
• B. Customer handles the operating system and patching
• C. Customer is responsible for physical data center security
• D. Nearly everything, including application security and data handling

Answer: (D)

In SaaS, you’re using a ready-made application hosted by a provider, so the provider takes care of running and securing the platform and the software itself. You, as the customer, govern the data you put into that app and how it’s processed: who can access it, how it’s stored and encrypted, what policies you apply, and how you monitor and respond to data security concerns. That means you’re responsible for most of the security decisions tied to your data and its use within the application, while the provider handles the rest of the environment. This is why this option is considered the best fit: it highlights that the customer bears the significant share of security responsibilities around data handling and how the app is used.

In SaaS, you’re using a ready-made application hosted by a provider, so the provider takes care of running and securing the platform and the software itself. You, as the customer, govern the data you put into that app and how it’s processed: who can access it, how it’s stored and encrypted, what policies you apply, and how you monitor and respond to data security concerns. That means you’re responsible for most of the security decisions tied to your data and its use within the application, while the provider handles the rest of the environment. This is why this option is considered the best fit: it highlights that the customer bears the significant share of security responsibilities around data handling and how the app is used.