Examkin

Question

Difficulty: EasyShared Responsibility Model

A company is migrating its web application from Azure Virtual Machines (IaaS) to Azure App Service (PaaS). Which two responsibilities shift from the customer to Microsoft after this migration?

  1. Installing security patches and updates on the underlying operating systemAnswer
  2. Configuring and maintaining the web server middleware and application runtimeAnswer
  3. C
    Maintaining the custom application code and configuring user authentication
  4. D
    Securing the physical host servers and the virtualization hypervisor layer

Answer

The responsibilities that shift from the customer to Microsoft are installing operating system security patches and configuring the web server middleware/runtime environment.
In the Shared Responsibility Model, migrating from Infrastructure as a Service (IaaS) to Platform as a Service (PaaS) shifts management of the operating system and the runtime middleware from the customer to Microsoft. Under Azure Virtual Machines (IaaS), the customer must patch the operating system and configure the middleware (like IIS or Apache). Under Azure App Service (PaaS), Microsoft automatically handles these tasks.

Step-by-Step Solution

1
Analyze the initial responsibility model (IaaS - Azure Virtual Machines)
In IaaS, the customer is responsible for everything from the operating system up, including OS updates, middleware, runtimes, applications, and data. Microsoft is only responsible for physical security, physical networking, and virtualization hosts.
To identify what shifts, we must first establish what the customer is responsible for before the migration.
2
Analyze the target responsibility model (PaaS - Azure App Service)
In PaaS, Microsoft takes over the management of the operating system, middleware, and database/runtime environments. The customer only manages the application code, settings, identities, and data.
Comparing the two models allows us to identify the specific responsibilities that move from the customer's domain to Microsoft's domain.
3
Identify the responsibilities that transfer from customer to Microsoft
Operating system patching and middleware/runtime management shift to Microsoft. Application code maintenance remains with the customer, and physical security was already Microsoft's responsibility.
This determines the correct choices by excluding responsibilities that do not change owners.

Key Concept

Shared Responsibility Model
Rate this question

Topics

Shared Responsibility Model

More questions from this topic