Which of the following aspects of security is solely the responsibility of the cloud provider? 

Answer options:

A. Regulatory compliance
B. Physical security
C. Operating system auditing
D. Personal security of developers

B

Regardless of the particular cloud service used, physical security of hardware and facilities is always the sole responsibility of the cloud provider. The cloud provider may release information about their physical security policies and procedures to ensure any particular requirements of potential customers will meet their regulatory obligations. Personal security of developers and regulatory compliance are always the responsibility of the cloud customer. Responsibility for operating systems, and the auditing of them, will differ based on the cloud service category used.