Certified Ethical Hacker (CEH) Practice Question

In a PaaS environment the cloud provider operates and secures the underlying facilities, physical network, virtualization layer, and the operating system that supports the runtime. The customer's obligations begin above the platform layer; they are responsible for securing their own application logic, configuration, and any data they store or process in the service. Hypervisor hardening, physical security, and guest OS patching are handled by the provider and fall outside the customer's direct control and testing scope.