CCAK Question 42

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  In a Software as a Service (SaaS) model, the cloud provider is typically responsible for most of the infrastructure and application maintenance tasks, including vulnerability management, source code reviews, and patching. However, the customer still retains responsibility for managing access controls. Therefore, the aspect of SaaS functionality and operations that the cloud customer would be responsible for and should be audited is: A. Access controls Customers must ensure that their users have appropriate access to the SaaS application and that this access is managed securely, often involving user authentication, role-based access, and permissions management.