Examkin

Question

Difficulty: MediumShared Responsibility Model

An online retailer is migrating its customer loyalty application from self-managed servers on Azure Virtual Machines to a fully managed Software as a Service (SaaS) platform. Under the Microsoft Shared Responsibility Model, which responsibility shifts entirely from the customer to Microsoft as a result of this migration?

  1. A
    Classifying and labeling customer personal data
  2. Configuring and maintaining network controlsAnswer
  3. C
    Securing and managing user accounts and credentials
  4. D
    Enforcing compliance policies on employee endpoint devices

Answer

Configuring and maintaining network controls
In an Infrastructure as a Service (IaaS) deployment, such as Azure Virtual Machines, the customer is responsible for defining and configuring network controls, including Virtual Networks and Network Security Groups. When migrating to a Software as a Service (SaaS) model, the cloud provider (Microsoft) takes full responsibility for managing the application's underlying network infrastructure and network security controls, meaning the customer no longer manages network controls for that application.

Step-by-Step Solution

1
Analyze the starting model (Azure Virtual Machines) and the target model (SaaS).
Azure Virtual Machines is an IaaS model where the customer manages network controls. SaaS is a fully managed model where the provider manages all underlying infrastructure including network controls.
To identify which responsibilities shift, we must compare the customer's duties in IaaS versus SaaS.
2
Evaluate the shared responsibility boundaries for data, identity, endpoints, and networking.
Data, endpoints, and identity accounts always remain the customer's responsibility. Network controls shift from customer-managed in IaaS to cloud provider-managed in SaaS.
This determines which of the given options represents a shifted responsibility rather than a constant customer responsibility.

Key Concept

Shared Responsibility Model
Estimated Time:1m 0s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic