Google Cloud Professional Cloud Security Engineer Practice Exam

In a shared security responsibility model for IaaS, which two layers does the customer share responsibility for?

1. Application Security and Network Security

2. Operating System and Hypervisor

3. Network Security and Access Policies

4. Data and Application Security

The correct answer is: Network Security and Access Policies

In a shared security responsibility model for Infrastructure as a Service (IaaS), the customer typically shares responsibility for both Network Security and Access Policies. This model helps delineate security responsibilities between the cloud provider and the customer, ensuring that both parties understand their obligations in maintaining the security of the environment. Network Security is crucial as it involves safeguarding the customer’s applications and data against unauthorized access and threats. The customer is responsible for configuring firewalls, managing security groups, and establishing rules to protect network traffic. Access Policies refer to the rules that govern who can access specific resources within the IaaS environment. The customer must implement their own policies for user management, authentication, and authorization to ensure that only authorized users can access sensitive data and services. Together, these responsibilities highlight how the customer plays an essential role in the security landscape of their IaaS deployment, managing specific layers while the cloud provider secures the underlying infrastructure.