Examkin

Question

Difficulty: MediumShared Responsibility Model

A logistics enterprise hosts its package routing database on a Microsoft SQL Server instance running on an Azure Virtual Machine. To minimize operational overhead, the enterprise plans to migrate this database to an Azure SQL Database deployment. Which administrative task remains the responsibility of the logistics enterprise after this migration?

  1. Configuring database user permissions and managing resource access controlsAnswer
  2. B
    Applying operating system updates and security patches to the database server
  3. C
    Installing database engine updates and software hotfixes
  4. D
    Replacing faulty physical hard drives in the storage hosting the database

Answer

Configuring database user permissions and managing resource access controls
In the Azure Shared Responsibility Model, the customer is always responsible for classifying and securing their data, as well as managing database users, credentials, and access permissions, regardless of whether the service is deployed using IaaS, PaaS, or SaaS. Therefore, when migrating to Azure SQL Database (PaaS), the customer retains full responsibility for managing database user access permissions.

Step-by-Step Solution

1
Analyze the transition described in the scenario.
The migration shifts the database workload from an Azure Virtual Machine (Infrastructure as a Service - IaaS) to Azure SQL Database (Platform as a Service - PaaS).
Understanding the starting and ending service models is necessary to determine the shift in responsibilities.
2
Compare responsibilities between IaaS and PaaS for database hosting.
In IaaS (SQL on Virtual Machine), the customer manages the OS, database engine installation, patching, backups, configuration, and data access. In PaaS (Azure SQL Database), Microsoft takes over the OS management, database engine updates, and basic backups, while the customer retains control over database schemas, query optimization, user accounts, and data access controls.
This comparison identifies which tasks transfer to Microsoft and which tasks are retained by the customer.
3
Identify the task that is retained by the customer.
Managing database user accounts and resource access permissions remains the customer's responsibility in both IaaS and PaaS environments.
Identity and access management, along with the classification and protection of data, are always the customer's responsibility regardless of the cloud deployment model.

Key Concept

Shared Responsibility Model
Rate this question

Topics

Shared Responsibility Model

More questions from this topic