Examkin

Question

Difficulty: MediumSoftware as a Service (SaaS)

A company plans to migrate its on-premises email and collaboration suite to Microsoft 365, which is a Software as a Service (SaaS) offering. Under the Microsoft shared responsibility model, which of the following duties remains the responsibility of the customer?

  1. A
    Paying upfront Capital Expenditure (CapEx) to purchase the hardware capacity for the application
  2. B
    Applying security patches and updates to the server operating system
  3. Configuring user access permissions and protecting organization dataAnswer
  4. D
    Upgrading the application's underlying database middleware and framework code

Answer

Configuring user access permissions and protecting organization data
The correct answer is configuring user access permissions and protecting organization data. Under the shared responsibility model, regardless of the cloud deployment type (IaaS, PaaS, or SaaS), the customer always retains ownership and responsibility for their data, endpoints, accounts, and access management.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The scenario specifies Microsoft 365, which is a Software as a Service (SaaS) offering.
Determining the cloud model allows the application of the correct shared responsibility boundaries.
2
Analyze the customer responsibility boundaries for the identified SaaS model.
In SaaS, the cloud provider manages the physical infrastructure, operating systems, network controls, and application software. The customer remains responsible for data, endpoints (devices), and identity access management.
This isolates the tasks that the customer must perform from those managed by Microsoft.
3
Evaluate the choices to find the duty that belongs to the customer.
Configuring access permissions and securing organizational data is a customer duty, whereas patching operating systems, managing middleware, and upfront hardware CapEx are managed by the provider or apply to different cloud models.
This confirms that managing user access and protecting data is the correct customer responsibility.

Key Concept

Shared Responsibility Model in Software as a Service (SaaS)
Estimated Time:1m 0s
Rate this question

Topics

Software as a Service (SaaS)

More questions from this topic