Question

Difficulty: MediumShared Responsibility Model

A media company is migrating its video catalog metadata management system from a Software as a Service (SaaS) application to a custom web app hosted on Azure App Service (PaaS). How does the responsibility for operating system maintenance and patching change after this migration?

  1. Microsoft remains responsible for operating system maintenance and patching.Answer
  2. B
    The responsibility shifts from Microsoft to the customer, who must now patch the host operating system.
  3. C
    The responsibility shifts from the customer to Microsoft, who now takes over operating system patching.
  4. D
    The responsibility becomes shared, where Microsoft provides the patches and the customer is responsible for applying them to the virtual instances.

Answer

Microsoft remains responsible for operating system maintenance and patching.
In the Microsoft Shared Responsibility Model, the cloud provider (Microsoft) is responsible for the physical host, physical network, physical datacenter, and the operating system in both Platform as a Service (PaaS) and Software as a Service (SaaS) models. Therefore, migrating from SaaS to PaaS does not change the ownership of operating system patching, which remains Microsoft's responsibility.

Step-by-Step Solution

1
Identify the service models involved in the migration.
The migration is from a Software as a Service (SaaS) application to a Platform as a Service (PaaS) offering (Azure App Service).
Understanding the source and target service models is the first step to analyzing the shift in responsibilities.
2
Determine who is responsible for operating system maintenance and patching in both models.
In a SaaS model, Microsoft manages the entire stack including the operating system. In a PaaS model, Microsoft also manages the underlying operating system so the customer can focus on application deployment.
Comparing the responsibility matrix for the operating system layer across SaaS and PaaS shows that the responsible party does not change.

Key Concept

Shared Responsibility Model
Estimated Time:1m 0s
Rate this question