Examkin

Question

Difficulty: HardInfrastructure as a Service (IaaS)

A logistics corporation is migrating its central fleet routing system to Azure. Due to strict compatibility constraints, the system must run on a specific version of a third-party application server and requires custom network routing rules configured inside the operating system. The corporation deploys the workloads using Azure Virtual Machines (IaaS).

Under the Azure shared responsibility model, which two of the following tasks are the responsibility of the logistics corporation?

  1. Configuring network firewall settings within the guest operating systemAnswer
  2. Managing and patching the third-party application server and middlewareAnswer
  3. C
    Maintaining and updating the virtualization hypervisor on the hosting hardware
  4. D
    Securing physical access to the server racks and datacenters hosting the virtual machines

Answer

The logistics corporation is responsible for configuring network firewall settings within the guest operating system, and managing and patching the third-party application server and middleware.
In an Infrastructure as a Service (IaaS) deployment such as Azure Virtual Machines, the cloud provider (Microsoft) is responsible for the physical security of the datacenters, the hardware, and the virtualization layer (hypervisor). The customer is responsible for the administration of the guest operating system (including local firewalls), the installation and configuration of middleware or application servers, and the application code and data.

Step-by-Step Solution

1
Analyze the service category of the deployment.
The deployment uses Azure Virtual Machines, which falls under the Infrastructure as a Service (IaaS) cloud service model.
Identifying the cloud service model is essential to determine the correct division of responsibilities.
2
Apply the Shared Responsibility Model to IaaS.
In IaaS, the cloud provider (Microsoft) manages physical security, hardware, and the virtualization layer. The customer (logistics corporation) is responsible for everything from the guest operating system upward, including middleware, applications, network configurations within the VM, and data.
This determines who is responsible for each resource layer in the deployment.
3
Evaluate each task against the customer's IaaS responsibilities.
Configuring network firewalls in the guest OS and managing third-party application servers/middleware are customer responsibilities. Managing the hypervisor and securing physical access to datacenters are Microsoft responsibilities.
To select the correct options based on the identified model boundaries.

Key Concept

Under the Infrastructure as a Service (IaaS) model, Microsoft manages the physical infrastructure, network, and virtualization layer, while the customer maintains full control and responsibility over the guest operating systems, middleware, database engines, application runtimes, and network configurations inside the virtual machines.
Estimated Time:1m 30s
Rate this question

Topics

Infrastructure as a Service (IaaS)

More questions from this topic