CCSP Cloud Concepts, Architecture, and Design Practice Question
A media production company wants to use a public cloud for rendering video but must retain full control over the guest OS, patching, and runtime configuration. The company does not want to manage physical hardware or hypervisors. Which cloud service model BEST meets these requirements?
⚠ Common exam trap
The trap here is assuming that any cloud model removing hardware management also permits guest OS control, when only IaaS preserves that layer for the customer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Infrastructure as a Service (IaaS)
IaaS is the only model that gives the customer control over the guest operating system and runtime while the provider manages the physical infrastructure and hypervisor. PaaS, SaaS, and FaaS abstract away the OS layer, removing the control the media company needs. The scenario explicitly requires retaining patching and runtime configuration, which maps directly to IaaS responsibilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Function as a Service (FaaS)
Why it's wrong here
FaaS runs event-driven code snippets without exposing servers or operating systems to the customer. Patching and runtime configuration are handled entirely by the provider. The media company cannot control the guest OS or runtime, so FaaS does not meet the stated control requirements even though it eliminates hardware management.
- ✗
Platform as a Service (PaaS)
Why it's wrong here
PaaS abstracts the operating system and runtime, so the customer cannot control guest OS patching or low-level runtime configuration. While it removes hardware management, it also removes the control the media company explicitly requires. Therefore PaaS does not satisfy the need to retain full control over the guest OS and runtime.
- ✓
Infrastructure as a Service (IaaS)
Why this is correct
IaaS provides virtualized compute, storage, and networking while the provider manages the physical hosts and hypervisor. The customer retains control of the guest operating system, middleware, and applications, which aligns with the need to control patching and runtime configuration. It also avoids hardware and hypervisor management, exactly matching the stated requirements.
- ✗
Software as a Service (SaaS)
Why it's wrong here
SaaS delivers a complete application managed by the provider, leaving the customer with only configuration and data responsibilities. The customer has no access to the guest operating system, patching, or runtime environment. This fails the requirement to retain full control over those layers, making SaaS unsuitable for this scenario.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
One of 934 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.