Examkin

Question

Difficulty: HardShared Responsibility Model

A media broadcasting company operates a custom media archive portal hosted on Azure App Service. To reduce development overhead, the company decides to migrate the entire system to Microsoft Dynamics 365 Content Services, which is a Software as a Service (SaaS) solution. During a pre-migration security assessment, the compliance officer evaluates how this transition alters their operational duties. Which of the following responsibilities will shift from a shared responsibility under the Platform as a Service (PaaS) model to the sole responsibility of Microsoft under the SaaS model?

  1. A
    Configuring the database engine middleware and backend system settings.
  2. B
    Patching and maintaining the underlying host operating system.
  3. Maintaining, updating, and securing the core application software and framework.Answer
  4. D
    Classifying metadata and enforcing security governance on the stored files.

Answer

Maintaining, updating, and securing the core application software and framework.
In the PaaS model (Azure App Service), application security and maintenance is a shared responsibility because the customer is responsible for the custom application code they deploy, while Microsoft manages the hosting environment. When migrating to a SaaS model (Dynamics 365), Microsoft assumes complete management of the application software, updates, and codebase security, shifting this responsibility entirely to the cloud provider.

Step-by-Step Solution

1
Identify the initial and target cloud deployment models in the scenario.
The initial model is Platform as a Service (PaaS) via Azure App Service, and the target model is Software as a Service (SaaS) via Microsoft Dynamics 365.
Understanding the boundary transition is essential to map the responsibilities.
2
Analyze the customer's application-level responsibilities in PaaS.
In PaaS, the customer is responsible for developing, maintaining, and securing their own application code and configuration.
This establishes what application duties the customer initially held.
3
Analyze how application-level responsibilities change in SaaS.
In SaaS, the vendor (Microsoft) provides the fully functional application, including its code, updates, and built-in security.
This determines which duties shift to the cloud provider.
4
Verify other areas (OS patching, database config, and data governance) to rule out incorrect options.
OS patching is already Microsoft's job in PaaS. Data classification is always the customer's job in all models. Database middleware configuration does not apply as a customer task shifting from PaaS to SaaS.
This ensures the selected answer is the unique and correct responsibility shift.

Key Concept

Shared Responsibility Model (PaaS to SaaS transition)
Estimated Time:2m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic