Study. uk . com
  1. Home
  2. All questions
  3. Question 218

CISSP study material · question 218 of 500

A customer of a hosted email service asks to patch the operating system underneath it. Under the NIST definition, what may a software as a service consumer actually control?

  1. The application and the hosting environment's configuration settings.
  2. Limited user-specific application configuration settings, and nothing below the application.
  3. Operating systems, storage and deployed applications.
  4. Select networking components such as host firewalls.
Show the answer

Answer: B. Limited user-specific application configuration settings, and nothing below the application.

In software as a service the consumer does not manage the underlying infrastructure or individual application capabilities, with the possible exception of limited user-specific configuration settings.

Source: NIST SP 800-145 (NIST) — SP 800-145 > Service Models

Challenge yourself on this topic → Study as cards