IaaS Model Features and Customer Responsibilities
Short answer
A Software-defined network segmentation is a feature provided by the IaaS model, allowing customers to logically segment their virtual infrastructure.
Question
Key Takeaways
The exam tests the shared responsibility model; the common trap is confusing IaaS (customer manages OS/apps) with PaaS/SaaS (provider manages updates/patching).
This question evaluates the distinction between infrastructure provider responsibilities and customer capabilities in IaaS, specifically focusing on network segmentation versus managed services.
Common mistake: Candidates often select C because they associate 'cloud' with automated management, failing to recognize that IaaS customers are responsible for OS-level patching.
Expert Analysis
Why the Answer Is Correct
Option A is correct because Software-Defined Networking (SDN) allows IaaS customers to create logical network segments (VLANs, subnets, security groups) independent of the underlying physical hardware. This granular control over virtual networks is a core capability provided by the IaaS interface (e.g., AWS VPC, Azure Virtual Network), enabling the customer to define their own network topology.Why the Other Options Are Wrong
Option B is incorrect because while customers manage data, 'granular control' is not a unique defining feature of the IaaS model itself but rather a general outcome of having compute resources. Option C is incorrect because automatic updates and patching of the operating system and applications are responsibilities of the customer in IaaS; this is a key differentiator from PaaS or SaaS where the provider handles it. Option D is incorrect because IaaS provides virtualized, scalable resources, not dedicated, restricted physical workstations.Community Comment Notes
Comments show significant debate between A and B. As ton99 noted, "In the IaaS... model, customers have significant control over their data..." However, Nian correctly points out that "Not C - that is the IaaS customers responsibility," reinforcing that patching is not an IaaS feature. luismg argues that networking is handled by the provider, but this overlooks the SDN abstraction layer available to users. The consensus among experts aligns with A as the technical capability enabled by the model.Exam Strategy
When analyzing cloud models, always identify who is responsible for the 'OS + Stack'. If the customer manages the OS, it's IaaS; if the provider does, it's PaaS. Look for options that describe customer-controlled virtualization features like networking or storage volumes.
Frequently Asked Questions
Why is automatic patching not an IaaS feature?
Does IaaS provide granular control of data?
Community Votes
67% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 6 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 6
-
ton99 👍 4I think he right answer is B: In the IaaS (Infrastructure as a Service) model, customers have significant control over their data and the deployed infrastructure. This includes responsibilities like managing and patching operating systems, virtual networks, and applications. As noted in the official Guide: "In an IaaS environment, the CSP (Cloud Service Provider) is responsible only for patching the hypervisors, physical compute and storage servers, and the physical network. You are responsible for patching the applications, operating systems (VMs), and any virtual networks you deploy"
-
Nian 👍 1 Answered ANot C - that is the IaaS customers responsibility. Not d: VMs can be resized by IaaS customer B ? IaaS customer has granular control of data, but cannot decide of exact physical location of data. I go with A - SD network segmentation can be made by IaaS customer
-
luismg 👍 1 Answered AIt is difficult in IASS virtualization servers storage networking are handled by the provider so I guess the good answer is A, the OS is not part of IASS
-
Premium_Pils 👍 1 Answered BI agree with ton99. Most plausible answer.
-
d357f61 👍 2I think D is most suitable
Show 1 more comment
-
billyray 👍 1I think it would be C
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.