Examkin

Question

Difficulty: HardShared Responsibility Model

A healthcare organization hosts a custom patient-scheduling portal. The application front-end and its backend database are currently deployed on several Azure Virtual Machines (IaaS). To minimize administration overhead, the organization plans to migrate the front-end to Azure App Service (PaaS) and the database to Azure SQL Database (PaaS). Which of the following responsibilities shifts from the customer to Microsoft as a result of this migration?

  1. A
    Securing the physical data centers hosting the virtual machines and databases
  2. Patching and maintaining the database engine and the hosting operating systemAnswer
  3. C
    Configuring identity providers and user access permissions for the application
  4. D
    Deploying and updating the application source code for the scheduling portal

Answer

Patching and maintaining the database engine and the hosting operating system
In the Shared Responsibility Model, the boundary of responsibility shifts depending on the service type. When using Infrastructure as a Service (IaaS) virtual machines, the customer must manage and patch the operating system and database software. When migrating to Platform as a Service (PaaS) services like Azure App Service and Azure SQL Database, Microsoft takes over the management of the operating system, runtime environments, and database engines. Consequently, patching and maintaining the database engine and operating system shifts from the customer to Microsoft.

Step-by-Step Solution

1
Analyze the starting deployment model and its responsibilities.
The application is currently hosted on Azure Virtual Machines, which represents an Infrastructure as a Service (IaaS) model. In IaaS, the customer is responsible for operating system patching, middleware, database application configuration, and application code.
Understanding the baseline division of responsibilities is necessary to identify what shifts.
2
Analyze the target deployment model and its responsibilities.
The target model uses Azure App Service and Azure SQL Database, which are Platform as a Service (PaaS) offerings. In PaaS, Microsoft manages the underlying operating systems, runtimes, virtualization layers, and database engine maintenance.
Comparing baseline (IaaS) to target (PaaS) reveals which tasks change ownership.
3
Compare the change in ownership for each responsibility listed in the options.
Physical security is always Microsoft's responsibility in both models (no shift). Identity management and application code remain the customer's responsibility in both models (no shift). Operating system and database engine patching move from customer management in IaaS to Microsoft management in PaaS (shifts).
This isolates the single correct option that represents a shifting responsibility.

Key Concept

Shared Responsibility Model
Estimated Time:1m 30s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic