How does cloud security differ across IaaS, PaaS, and SaaS models, and what is the shared responsibility model?

• A. In IaaS, customers manage apps and data; in PaaS, they manage apps and data with provider managed runtime; in SaaS, most controls are provider-managed; shared responsibility defines who secures what.
• B. In IaaS, provider manages apps; in PaaS, customer manages runtime; in SaaS, customer manages security.
• C. In IaaS, customers manage everything; in PaaS, provider manages everything; in SaaS, provider manages nothing.
• D. In IaaS, only network security matters.

Answer: (B)