Question

Difficulty: MediumPlatform as a Service (PaaS)

A retail organization is deploying a new e-commerce inventory API to Azure App Service, which is a Platform as a Service (PaaS) offering. Under the cloud shared responsibility model, the organization wants to clarify the division of operational tasks. Which two of the following tasks are the responsibility of the customer in this PaaS deployment?

  1. Configuring application-level settings and managing user access within the applicationAnswer
  2. Managing and storing the application's data, including database schemasAnswer
  3. C
    Installing security patches and operating system updates on the hosting servers
  4. D
    Configuring guest operating systems, virtual machine sizes, and network interfaces

Answer

Configuring application-level settings and managing user access within the application, and managing and storing the application's data, including database schemas.
In a Platform as a Service (PaaS) model, the cloud provider manages the physical infrastructure, virtualization, host hypervisors, and the operating system. The customer is responsible for the application layer and data, which includes configuring application-level settings, user access controls, database schemas, and data management.

Step-by-Step Solution

1
Identify the cloud service model described in the scenario.
The scenario specifies Azure App Service, which is a Platform as a Service (PaaS) model.
Determining the correct service model is necessary to apply the appropriate shared responsibility model rules.
2
Differentiate between provider and customer responsibilities in a PaaS model.
The provider manages the physical infrastructure, virtualization, guest operating systems, database engines, and runtime. The customer manages their own applications, data, and access controls.
This establishes the boundary between what the platform manages automatically and what the customer must configure.
3
Evaluate the options against customer responsibilities.
Configuring application-level settings/access and managing data/schemas are customer duties. Operating system patching and virtual machine configuration are managed by the cloud provider.
This isolates the correct options that represent the customer's domain of control in the PaaS model.

Key Concept

Shared Responsibility Model in Platform as a Service (PaaS)
Estimated Time:1m 30s
Rate this question