From a TA perspective, which statement best describes the Cloud Shared Responsibility Model?

• A. Cloud provider secures the cloud infrastructure.
• B. TA ensures proper attestation and monitoring across shared components.
• C. End users handle all security tasks.
• D. The model requires collaboration: the provider secures infrastructure; the TA secures data, identities, applications, configurations, and performs attestation and monitoring across shared components.

Answer: (D)

In the Cloud Shared Responsibility Model, security duties are shared between the cloud provider and the customer. The provider is responsible for the security of the cloud infrastructure itself—physical data centers, hardware, virtualization, and core services. The trusted agent (customer) is responsible for security in the cloud—the data you store, who can access it, the identities and credentials, the security of applications and configurations, and the monitoring and attestation of the components you use that span both your side and the provider’s side. Attestation and monitoring across shared components means continuously verifying that those cross-boundary parts are in a trusted, correctly configured state.

So the best description is that collaboration: the provider secures infrastructure; the TA secures data, identities, applications, configurations, and performs attestation and monitoring across shared components.