In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:

In the context of Infrastructure as a Service (IaaS), a vulnerability assessment will scan virtual machines to identify vulnerabilities in:
A . both operating system and application infrastructure contained within the CSP’s instances.
B . both operating system and application infrastructure contained within the customer’s instances
C . only application infrastructure contained within the CSP’s instances.
D . only application infrastructure contained within the customer’s instances.

Answer: C