A web application runs in a public cloud. Under the shared-responsibility model for its virtual machines, which task normally remains the customer's responsibility?

1. Controlling physical access to the cloud data center
2. Replacing failed physical storage drives
3. Patching the guest operating systems
4. Repairing the hypervisor's host motherboard