CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography
In the shared responsibility model for cloud computing, which of the following is typically the responsibility of the customer?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data classification and encryption of customer data
The customer is responsible for data classification and account management, while the provider secures the physical infrastructure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Physical security of data centers
Why it's wrong here
In the shared responsibility model, the cloud provider is solely accountable for the physical security of the data centers housing the cloud infrastructure. This encompasses controlling access to facilities, implementing surveillance systems, and ensuring environmental controls like power and cooling. Customers do not have direct access or control over these physical aspects, making it a core "security of the cloud" responsibility.
- ✗
Patch management of the virtualization platform
Why it's wrong here
The cloud provider is responsible for the patch management of the underlying virtualization platform, including hypervisors and host operating systems that support customer workloads. This falls under the "security of the cloud" domain, as these components are part of the foundational infrastructure that the customer consumes. Ensuring these critical layers are up-to-date with security patches prevents vulnerabilities that could impact multiple tenants.
- ✓
Data classification and encryption of customer data
Why this is correct
Customers retain full responsibility for classifying their data based on sensitivity and implementing appropriate encryption mechanisms for their data, both at rest and in transit. This is a crucial "security in the cloud" responsibility because only the customer understands the regulatory, compliance, and business impact of their specific data. While the cloud provider offers encryption tools, the customer must configure and manage these data protection controls.
- ✗
Network infrastructure security (e.g., hypervisor, network cables)
Why it's wrong here
The security of the underlying network infrastructure, encompassing elements like physical network cables, switches, routers, and the hypervisor network stack, is unequivocally the cloud provider's responsibility. This forms part of the "security of the cloud," ensuring the foundational network fabric is robust, resilient, and protected against unauthorized access or manipulation. Customers manage network configurations within their virtual environments, but not the physical or virtualized infrastructure itself.
Go deeper
Related to this question
About these practice questions
Courseiva writes every CEH question from scratch — 870 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.