An organization is migrating several workloads to Microsoft Azure. To ensure proper operational governance, the IT team must define responsibility boundaries. Match each operational task to its correct responsibility assignment under the Azure Shared Responsibility Model.
- Classifying and protecting intellectual property and data stored in Microsoft 365Customer's sole responsibility
- Configuring network firewall rules and access controls for an Azure App Service web appShared responsibility between the customer and Microsoft
- Maintaining and securing physical hypervisor hosts and datacenters in an Azure regionMicrosoft's sole responsibility
Answer
Data classification in Microsoft 365 matches Customer's sole responsibility; Network firewall configuration in Azure App Service matches Shared responsibility; Physical host maintenance matches Microsoft's sole responsibility.
The correct pairings map the tasks as follows: Data classification and governance for Microsoft 365 is a customer-only responsibility because the customer always owns their data. Configuring network controls for Azure App Service is a shared responsibility because both parties play a role in network security configuration. Maintaining the physical hypervisors and datacenters is a Microsoft-only responsibility as the customer has no physical access to Azure's hardware.
Step-by-Step Solution
Key Concept
Shared Responsibility Model
Estimated Time:1m 30s