Cloud stack components’ security

Which of the following cloud stack components’ security is handled by the vendor while using platform as a service?

A. User Data

B. Application stack

C.Infrastructure

Options

1. Only A and B
2. Only A and C
3. Only B and C
4. All of the options