Which of the following statements is not true regarding the IaaS service model? (Select the best answer.)

A.
The consumer has control over the configuration of the OS running on the physical infrastructure in the
cloud.

B.
The consumer has control over the physical infrastructure in the cloud.

C.
The consumer has control over the allocation of processing, memory, storage, and network resources
within the cloud.

D.
The consumer has control over development tools or APIs in the cloud running on the physical
infrastructure in the cloud.

Explanation:
In the Infrastructure as a Service (IaaS) service model, the consumer does not have control over the physical
infrastructure in the cloud. The National Institute of Standards and Technology (NIST) defines three service
models in its definition of cloud computing: Software as a Service (SaaS), IaaS, and Platform as a Service
(PaaS).
The SaaS service model enables its consumer to access applications running in the cloud infrastructure but
does not enable the consumer to manage the cloud infrastructure or the configuration of the provided
applications. A company that licenses a service provider’s office suite and email service that is delivered to end
users through a web browser is using SaaS. SaaS providers use an Internetenabled licensing function, a
streaming service, or a web application to provide end users with software that they might otherwise install and
activate locally. Webbased email clients, such as Gmail and Outlook.com, are examples of SaaS.
The PaaS service model provides its consumer with a bit more freedom than the SaaS model by enabling the
consumer to install and possibly configure providersupported applications in the cloud infrastructure. A
company that uses a service provider’s infrastructure, programming tools, and programming languages to
develop and serve cloudbased applications is using PaaS. PaaS enables a consumer to use the service
provider’s development tools or Application Programmer Interface (API) to develop and deploy specific
cloudbased applications or services. Another example of PaaS might be using a third party’s MySQL database
and Apache services to build a cloudbased customer relationship management (CRM) platform.
The IaaS service model provides the greatest degree of freedom by enabling its consumer to provision
processing, memory, storage, and network resources within the cloud infrastructure. The IaaS service model
also enables its consumer to install applications, including operating systems (OSs) and custom applications.
However, with IaaS, the cloud infrastructure remains in control of the service provider. A company that hires a
service provider to deliver cloudbased processing and storage that will house multiple physical or virtual hosts
configured in a variety of ways is using IaaS. For example, a company that wanted to establish a web server
farm by configuring multiple Linux Apache MySQL PHP (LAMP) servers could save hardware costs by
virtualizing the farm and using a provider’s cloud service to deliver the physical infrastructure and bandwidth for
the virtual farm. Control over the OS, software, and server configuration would remain the responsibility of the
organization, whereas the physical infrastructure and bandwidth would be the responsibility of the service
provider.

NIST: Special Publication 800145: The NIST Definition of Cloud Computing (PDF)