The correct option is Shared responsibility model.

Shared responsibility model describes the division of security duties between the cloud provider and the tenant where the vendor secures the platform and infrastructure and the tenant secures the applications and data they deploy. The provider is responsible for elements like physical datacenter security, host and network infrastructure, and managed services. The tenant is responsible for things such as identity and access management, application configuration, and data protection including encryption and backups.

Software defined storage is a storage architecture that abstracts storage management from hardware and it does not define which party secures the cloud platform versus customer data.

Zero trust model is a security posture that requires continuous verification of users and devices and strict access controls. It is about how access is granted and enforced and not about the split of responsibilities between provider and tenant.

Security by design is a development principle that promotes building security into systems from the start. It is a design approach and not a model that assigns operational security responsibilities between a cloud vendor and a tenant.

Full AWS Practitioner Certification Question