The correct option is Infrastructure as a Service.

Infrastructure as a Service gives customers control over virtual machines and the guest operating systems and runtimes. That control means the tenant must install operating system updates and apply runtime patches while the cloud provider manages the underlying physical hosts networking and storage.

Under the shared responsibility model the provider secures the infrastructure and the customer secures the guest environment and applications. That is why patching the OS and runtimes falls to the tenant with Infrastructure as a Service.

Software as a Service is incorrect because the provider delivers and manages the application and the entire underlying stack so the customer does not handle OS or runtime patching.

Desktop as a Service is incorrect because it provides managed virtual desktops and the provider typically maintains the desktop OS and runtime patches for the tenant.

Platform as a Service is incorrect because the platform vendor manages the operating system and runtime environment so the customer focuses on application code and configuration rather than OS patching.

Full AWS Practitioner Certification Question