Which service category provides penetration testing, authentication, intrusion detection, anti-malware, security incident and event management services?

• A. Platform as a Service (PaaS)
• B. Security as a Service (SECaaS)
• C. Public Cloud
• D. Private Cloud

Answer: (B)

Security as a Service delivers security capabilities through the cloud as on-demand services. It includes functions like penetration testing to find weaknesses, authentication to manage user identities and access, intrusion detection to spot unauthorized activity, anti-malware to block malicious software, and security incident and event management (SIEM) to collect, correlate, and analyze logs for real-time threat detection and response. These are all security-related services provided as a service rather than a development platform or a deployment model, which is why this category fits best.

PaaS is about providing a platform for building and deploying applications, not a bundle of security services. Public cloud and private cloud describe where resources are hosted and managed, not the specific service category for security offerings.