CCSP Cloud Concepts, Architecture, and Design Practice Question
A small business wants to move its email and productivity suite to a cloud service where the provider manages the application, runtime, and underlying infrastructure, and users access the software through a browser. Which cloud service model is being described?
⚠ Common exam trap
The trap here is equating any cloud-hosted application with PaaS, when the distinguishing factor is who manages the application layer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Software as a Service (SaaS)
In SaaS, the provider manages the application, runtime, middleware, operating system, and infrastructure, while the customer consumes the software, often through a browser. Email and productivity suites delivered this way fit the SaaS model precisely, with the customer retaining only limited configuration and user management responsibilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Function as a Service (FaaS)
Why it's wrong here
FaaS runs individual event-driven functions and is a category within serverless computing, typically used by developers building applications rather than by end users consuming email. The scenario describes browser-based access to a finished productivity suite, not the execution of discrete functions, so FaaS is not the correct model.
- ✓
Software as a Service (SaaS)
Why this is correct
SaaS delivers a complete application managed by the provider, including the runtime and infrastructure, and users access it through a browser or thin client. This matches the scenario where the business consumes email and productivity software without managing any underlying layers, leaving only limited user-specific configuration to the customer.
- ✗
Platform as a Service (PaaS)
Why it's wrong here
PaaS provides a managed platform for deploying customer-created or acquired applications, but the customer still controls the deployed application and some configuration. Here the provider owns and operates the email and productivity application itself, and the business is only a consumer, which is beyond the PaaS responsibility boundary.
- ✗
Infrastructure as a Service (IaaS)
Why it's wrong here
IaaS delivers fundamental compute, network, and storage resources that the customer manages, including operating systems, middleware, and applications. In this scenario the provider manages the application, runtime, and infrastructure, and users simply access software through a browser, so IaaS does not match the division of responsibility described.
Go deeper
Related to this question
About these practice questions
One of 934 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.