Question

Difficulty: MediumPlatform as a Service (PaaS)

A healthcare provider is planning to deploy a patient portal backend. They decide to use Azure Platform as a Service (PaaS) offerings to host their custom API and database. Which two tasks are the responsibility of the cloud customer? (Select two.)

  1. Configuring access permissions and user identity controls for the database and custom APIAnswer
  2. Writing, deploying, and maintaining the custom application codeAnswer
  3. C
    Applying software updates and security patches to the server's operating system
  4. D
    Managing and maintaining the physical virtualization hypervisors and storage hardware
  5. E
    Configuring end-user settings for turnkey SaaS tools such as Microsoft 365

Answer

In a PaaS deployment, the customer is responsible for configuring access permissions and user identity controls for the database and custom API, as well as writing, deploying, and maintaining the custom application code.
Under the Platform as a Service (PaaS) shared responsibility model, the customer is responsible for the application layer and data access. This includes managing user permissions and security configurations for the database and custom API, as well as writing, deploying, and maintaining the custom application code. The underlying operating system, virtualization hypervisor, and physical server hardware are managed and updated entirely by the cloud provider.

Step-by-Step Solution

1
Analyze the cloud service model being used in the scenario.
The scenario specifies a Platform as a Service (PaaS) model for hosting a custom API and database.
Understanding the cloud service model is necessary to determine the division of responsibility under the shared responsibility model.
2
Differentiate customer responsibilities from cloud provider responsibilities in a PaaS environment.
The customer is responsible for the application development, configuration, data access, and user identity management, while Microsoft manages the physical infrastructure, hypervisor layer, and operating system patching.
This allows for identifying which tasks belong to the customer.
3
Select the two correct options that represent customer responsibilities.
Configuring access permissions and writing the custom application code are selected, while physical hardware maintenance, operating system patching, and configuring unrelated SaaS tools are discarded.
This yields the final answers corresponding to customer responsibilities under PaaS.

Key Concept

Under Platform as a Service (PaaS), the cloud provider manages the physical infrastructure, virtualization, and operating systems, leaving the customer responsible for application code, data, and access configurations.
Rate this question