mediumMultiple Select
CCSP Practice Question: A cloud architect is evaluating cloud service…
A cloud architect is evaluating cloud service models for a new application. Which two characteristics are advantages of PaaS over IaaS? (Choose two.)
⚠ Common exam trap
ISC2 often tests the misconception that PaaS is always cheaper than IaaS due to shared infrastructure, but the real advantage is reduced management of middleware and runtime, not guaranteed cost savings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Reduced management of middleware and runtime
Option C is correct because PaaS abstracts the middleware, runtime, and often the OS layer, so the provider handles patching, configuration, and upgrades of components such as application servers, language runtimes, and databases, leaving the customer to focus on code and data. Option E is correct because PaaS platforms typically include built-in autoscaling, load balancing, and high-availability features (e.g., managed instance groups, health checks, and multi-zone deployment) that the customer would otherwise have to architect and operate manually on IaaS. Option A is not an advantage of PaaS over IaaS, since IaaS gives greater control over the guest OS (root/admin access, custom kernels, and OS-level tuning) while PaaS restricts that control. Option B is not inherently true, as PaaS pricing is usually higher per compute unit than raw IaaS VMs because it bundles managed services, and cost depends on workload and usage patterns rather than being automatically lower. Option D is also not an advantage of PaaS, because IaaS offers more flexibility to customize networking (VPCs, subnets, route tables, security groups, and virtual appliances) than the more opinionated networking model of most PaaS offerings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Greater control over the underlying OS
Why it's wrong here
PaaS abstracts the operating system, so customers lose OS-level control rather than gaining it; that control is an IaaS advantage. It is tempting because control sounds beneficial, and IaaS would be the right choice when the workload demands custom OS configuration, patching or kernel-level tuning.
- ✗
Lower cost due to shared infrastructure
Why it's wrong here
Shared infrastructure lowers cost for both IaaS and PaaS, so it does not distinguish them as a PaaS advantage. It is tempting because multi-tenancy genuinely reduces spend, and cost savings would be a valid selection criterion when comparing cloud against on-premises ownership rather than PaaS against IaaS.
- ✓
Reduced management of middleware and runtime
Why this is correct
PaaS abstracts the middleware and runtime layers, so the provider patches, scales and maintains application servers, message brokers and language runtimes. IaaS leaves these to the customer, who must install and update them on provisioned virtual machines, adding operational overhead that PaaS removes.
- ✗
Higher flexibility to customize networking
Why it's wrong here
PaaS constrains networking customisation because the provider manages the platform layer, whereas IaaS exposes virtual networks, subnets and security controls for full configuration. It is tempting because flexibility sounds desirable, and IaaS is correct when the design requires bespoke routing, firewalls or network segmentation.
- ✓
Built-in scalability and high availability
Why this is correct
PaaS platforms embed autoscaling and redundant infrastructure, so applications inherit elasticity and availability without the architect designing load balancers, health checks or multi-zone placement. On IaaS, those resilience patterns must be engineered and operated by the customer, which is the axis of difference.
Visual reference
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
One of 934 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.