An enterprise is migrating its legacy retail system from Azure Virtual Machines (IaaS) to Azure App Service (PaaS) for the front-end web application and Azure SQL Database (PaaS) for the relational database. Under the Microsoft Azure Shared Responsibility Model, which responsibility transitions from being the sole responsibility of the customer to being managed entirely by Microsoft?
- AMaintaining the physical security of the server racks, power supplies, and physical hardware hosting the database.
- Patching and maintaining the operating systems hosting the application runtime and the database engine.Answer
- CConfiguring network security rules, database firewalls, and service endpoints to restrict network access.
- DManaging user database accounts, application-level permissions, and resource identity directories.
Answer
Patching and maintaining the operating systems hosting the application runtime and the database engine transitions from the customer to Microsoft.
The correct option stating that patching and maintaining the operating systems transitions to Microsoft is correct. In IaaS (Virtual Machines), the customer has full control and administrative responsibility over the guest operating system, including applying patches. When migrating to PaaS (Azure App Service and Azure SQL Database), Microsoft abstracts the operating system layer, meaning they take over all maintenance, patching, and OS-level security updates.
Step-by-Step Solution
Key Concept
The shift of operational responsibilities from the customer to Microsoft when transitioning from Infrastructure as a Service (IaaS) to Platform as a Service (PaaS).