CCSP Cloud Concepts, Architecture, and Design Practice Question
Which cloud service model provides the customer with the ability to deploy and run custom applications using the provider's infrastructure, where the customer manages the applications and data, but does not manage the underlying operating system or hardware?
⚠ Common exam trap
CCSP often tests the differences between IaaS, PaaS, and SaaS, and candidates may confuse PaaS with IaaS or FaaS, especially when the question emphasizes managing applications but not the OS.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Platform as a Service (PaaS)
Platform as a Service (PaaS) provides the customer with the ability to deploy and run custom applications using the provider's infrastructure, where the customer manages the applications and data, but does not manage the underlying operating system or hardware. This matches the description exactly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Platform as a Service (PaaS)
Why this is correct
PaaS supplies the managed runtime, middleware and operating system, so the customer deploys code and manages only applications and data. This satisfies the stem's constraint that the underlying OS and hardware remain the provider's responsibility, unlike IaaS where the guest OS is customer-managed.
- ✗
Software as a Service (SaaS)
Why it's wrong here
SaaS delivers a complete, provider-managed application, so the customer cannot deploy custom code or manage application logic at all. It is tempting because SaaS removes all infrastructure and platform management, which suits standardised workloads such as email or CRM where no custom application development is required.
- ✗
Function as a Service (FaaS)
Why it's wrong here
FaaS runs individual event-triggered functions, not a continuously deployed custom application with its own runtime and dependencies. It is tempting because FaaS also abstracts the operating system and hardware, and would be correct for discrete, short-lived, event-driven code rather than a full application stack.
- ✗
Infrastructure as a Service (IaaS)
Why it's wrong here
IaaS leaves the guest operating system, patching and runtime entirely with the customer, contradicting the requirement that the OS is not managed. It is tempting because IaaS does let customers deploy arbitrary custom applications on provider infrastructure, and would be correct when full control of the OS is required.
Go deeper
Related to this question
About these practice questions
One of 934 original CCSP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CCSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CCSP exam.