Question

Difficulty: MediumShared Responsibility Model

A municipal government currently hosts a public transit tracking application on Azure Virtual Machines. To reduce administrative overhead, the IT department plans to migrate the application to Azure App Service. How will the responsibility for operating system patching change after this migration?

  1. A
    It remains the sole responsibility of the municipal government.
  2. B
    It shifts from Microsoft to the municipal government.
  3. It shifts from the municipal government to Microsoft.Answer
  4. D
    It becomes a shared responsibility where Microsoft provides the patches and the municipal government must schedule and install them.

Answer

The responsibility for operating system patching shifts from the municipal government to Microsoft.
Migrating from Azure Virtual Machines (an Infrastructure as a Service, or IaaS, offering) to Azure App Service (a Platform as a Service, or PaaS, offering) shifts several management responsibilities. Under IaaS, the customer is fully responsible for configuring, updating, and patching the operating system of the virtual machines. Under PaaS, Microsoft manages the physical infrastructure, virtualization layer, and the operating system, which includes applying all OS patches. Therefore, the responsibility for operating system patching shifts from the municipal government to Microsoft.

Step-by-Step Solution

1
Identify the service models before and after the migration.
The initial state (Azure Virtual Machines) is Infrastructure as a Service (IaaS). The target state (Azure App Service) is Platform as a Service (PaaS).
Understanding the service models is necessary to apply the rules of the Shared Responsibility Model.
2
Analyze how responsibility for operating system management differs between IaaS and PaaS.
In IaaS, the customer (municipal government) is responsible for managing the operating system, including updates and patching. In PaaS, the cloud provider (Microsoft) manages the operating system, middleware, and runtime.
Comparing the responsibility boundaries determines the direction of the shift.
3
Formulate the change in responsibility.
Since the responsibility transitions from the customer (IaaS) to the cloud provider (PaaS), the responsibility for operating system patching shifts from the municipal government to Microsoft.
This matches the correct option description.

Key Concept

Shared Responsibility Model transition from IaaS to PaaS
Rate this question