Examkin

Question

Difficulty: EasyShared Responsibility Model

An organization is migrating its document collaboration system from a custom web application hosted on Azure App Service (PaaS) to Microsoft SharePoint Online (SaaS).

Which responsibility is transferred entirely to Microsoft as a result of this migration?

  1. Configuring network controls and security rules for the applicationAnswer
  2. B
    Installing operating system updates on the hosting servers
  3. C
    Managing user access rights and identity permissions
  4. D
    Securing and classifying the data stored within the system

Answer

Configuring network controls and security rules for the application
In the PaaS model (Azure App Service), the customer has some control over network configurations (such as configuring firewall rules or private endpoints), making network controls a shared responsibility. When transitioning to a SaaS model (SharePoint Online), the customer has no access to or control over the network infrastructure, and Microsoft becomes entirely responsible for securing and configuring the network controls.

Step-by-Step Solution

1
Identify the source and destination cloud service models in the scenario.
The source service is Azure App Service, which is Platform as a Service (PaaS). The target service is Microsoft SharePoint Online, which is Software as a Service (SaaS).
Establishing the specific transition boundary is key to determining how responsibilities shift.
2
Analyze which management area changes ownership between these two models.
In PaaS, configuring network controls is a shared responsibility between Microsoft and the customer. In SaaS, the configuration of the service's network controls is fully managed by Microsoft. Other responsibilities like operating system patching (Microsoft in both), user access management (customer in both), and data security (customer in both) do not shift ownership.
Comparing each option against the PaaS and SaaS responsibility matrix reveals the correct shifting responsibility.

Key Concept

The Shared Responsibility Model defines how security and management tasks are split between the cloud provider and the customer, shifting more responsibility to the provider as you move from IaaS to PaaS, and finally to SaaS.
Rate this question

Topics

Shared Responsibility Model

More questions from this topic