Examkin

Question

Difficulty: Very hardSoftware as a Service (SaaS)

A multinational enterprise is transitioning its legacy customer relationship management (CRM) system and corporate email to a cloud-based Software as a Service (SaaS) model. As part of this migration, the Chief Information Security Officer (CISO) is updating the company's compliance registry to map operational responsibilities. Under the Microsoft shared responsibility model for SaaS, which of the following sets of tasks remains the sole responsibility of the enterprise's IT department?

  1. Configuring user access controls, managing device enrollment policies for corporate endpoints, and classifying data stored within the cloud applications.Answer
  2. B
    Applying software patches to the application code, configuring custom firewall rules for application web servers, and managing the physical network infrastructure.
  3. C
    Managing database engine configuration upgrades, adjusting middleware settings, and provisioning virtual network subnets for isolated application environments.
  4. D
    Procuring hardware servers, maintaining physical security of the hosting datacenters, and deploying operating system updates.

Answer

Configuring user access controls, managing device enrollment policies for corporate endpoints, and classifying data stored within the cloud applications.
Under the Microsoft shared responsibility model for SaaS, the cloud customer always retains responsibility for three areas: information and data, devices (mobile and PCs), and accounts and identities. Configuring user access controls, managing device enrollment policies, and classifying data directly map to these three customer-owned areas.

Step-by-Step Solution

1
Analyze the cloud service model presented in the scenario.
The scenario specifies a migration to a Software as a Service (SaaS) model.
Responsibilities vary significantly depending on whether the service model is IaaS, PaaS, or SaaS.
2
Apply the shared responsibility model rules for SaaS.
Identify that in a SaaS model, the cloud provider manages the physical hosts, network, datacenter, operating system, middleware, and application runtime.
This narrows down the customer's responsibility to data, endpoints, accounts, and identities.
3
Evaluate the options against the customer's SaaS responsibilities.
The option containing user access controls, device enrollment, and data classification falls entirely within the customer's scope of responsibility.
Information/data, devices, and accounts/identities are always managed by the customer regardless of the cloud model.

Key Concept

Under the Microsoft shared responsibility model for Software as a Service (SaaS), the customer always retains responsibility for data classification, endpoints (devices), and accounts and access management, while the cloud provider manages the physical infrastructure, operating system, middleware, and application layer.
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic