WGU Updated Managing-Cloud-Security Exam Questions and Answers by zaynah

In a Software as a Service (SaaS) environment, the cloud service provider (CSP) is responsible for securing the platform. Managing Cloud principles explain that SaaS places the majority of security responsibilities on the provider, including infrastructure, operating systems, middleware, and application security.

Customers primarily manage user access, data usage, and configuration settings, while the provider ensures availability, patching, vulnerability management, and platform protection. This division of responsibility simplifies security management for consumers.

The other options misrepresent shared responsibility boundaries. In IaaS, customers secure the platform, and in PaaS, providers manage infrastructure. Therefore, option D accurately characterizes application movement to the cloud.

Access control is the SIEM-related concept that focuses on preventing and detecting account and service hijacking. Managing Cloud guidance explains that access control mechanisms define who can access systems, services, and data, and under what conditions.

SIEM solutions monitor access control events such as failed logins, privilege escalation, and abnormal authentication patterns. By analyzing these events, organizations can detect compromised accounts, stolen credentials, or unauthorized service access.

Digital forensics occurs after an incident, trust is a conceptual principle, and LDAP is a directory protocol rather than a SIEM focus area. Therefore, access control is the correct answer.