Examkin

Question

Difficulty: MediumShared Responsibility Model

A logistics company currently hosts its shipping tracking system on several Azure Virtual Machines (IaaS). To minimize the time spent on administrative tasks, the company plans to migrate the application to Azure App Service (PaaS).

Which of the following responsibilities shifts from the customer to Microsoft as a result of this migration?

  1. Updating and patching the host operating system and runtime environmentAnswer
  2. B
    Maintaining the physical security of the hosting datacenter infrastructure
  3. C
    Classifying data assets and configuring user access permissions
  4. D
    Writing, debugging, and securing the custom application code

Answer

Updating and patching the host operating system and runtime environment
In an Infrastructure as a Service (IaaS) model, such as Azure Virtual Machines, the customer is responsible for maintaining, updating, and patching the operating system and any installed application runtimes. When transitioning to a Platform as a Service (PaaS) model, such as Azure App Service, Microsoft manages and patches the underlying operating system and runtime environment, shifting this administrative overhead away from the customer.

Step-by-Step Solution

1
Analyze the initial state (IaaS)
In IaaS (Azure Virtual Machines), the customer is responsible for the operating system, middleware, and runtime, while Microsoft manages physical security, virtualization, and physical networking.
To identify what shifts, we must first establish the baseline responsibilities in the source model.
2
Analyze the target state (PaaS)
In PaaS (Azure App Service), Microsoft manages the operating system, database engine (if applicable), and runtime, leaving the customer responsible for the application code and data.
We must establish the responsibilities in the destination model to determine the delta.
3
Identify the shifting responsibility
Operating system updates and runtime patching shift from the customer (IaaS) to Microsoft (PaaS). Physical security was already Microsoft's responsibility, and data/code remains the customer's responsibility.
By comparing the two sets of responsibilities, we isolate the specific task that changes owner during the migration.

Key Concept

Under the Shared Responsibility Model, migrating from IaaS to PaaS shifts the responsibility for maintaining the operating system and runtime environment from the customer to Microsoft. Physical security and host virtualization are always Microsoft's responsibility, while data and identities always remain the customer's responsibility.
Rate this question

Topics

Shared Responsibility Model

More questions from this topic