Examkin

Question

Difficulty: MediumSecurity, Governance, and Manageability

A retail company is migrating its e-commerce platform to Microsoft Azure. The migration plan includes deploying database workloads to Azure SQL Database (a Platform as a Service / PaaS offering) and web servers to Azure Virtual Machines (an Infrastructure as a Service / IaaS offering). The company's security team is defining their cloud governance and compliance strategy.

When comparing the management and security responsibilities of these two deployments, which of the following is correct?

  1. A
    Microsoft is responsible for database login management, database query optimization, and application user permissions for the Azure SQL Database, as it is a SaaS database solution.
  2. B
    Microsoft is responsible for operating system patching and database engine configuration on the web servers, while the retail company only manages the database firewall.
  3. The retail company is responsible for operating system patching on the web servers, while Microsoft automatically handles operating system patching and physical security for the database solution.Answer
  4. D
    Microsoft is responsible for physical security and web server operating system patching, but the retail company is responsible for patching the database operating system.

Answer

The retail company is responsible for operating system patching on the web servers, while Microsoft automatically handles operating system patching and physical security for the database solution.
Under the shared responsibility model, the division of management tasks depends on the cloud service model. For Infrastructure as a Service (IaaS) resources like Azure Virtual Machines, the customer maintains full control and responsibility over the guest operating system, which includes applying patches and software updates. For Platform as a Service (PaaS) resources like Azure SQL Database, the cloud provider (Microsoft) handles physical security, infrastructure maintenance, and operating system updates, letting the customer focus on data governance and application-level settings.

Step-by-Step Solution

1
Identify the service types for each workload in the scenario.
Azure Virtual Machines is an Infrastructure as a Service (IaaS) offering, and Azure SQL Database is a Platform as a Service (PaaS) offering.
Management and security responsibilities differ based on the cloud service model.
2
Apply the shared responsibility model to both service types.
For IaaS, the customer patches the guest OS and manages applications. For PaaS, Microsoft patches the OS and manages the physical infrastructure, while the customer manages data and database access.
Determining the correct division of tasks identifies the true statement.

Key Concept

Shared responsibility model across IaaS and PaaS service types
Estimated Time:1m 0s
Rate this question

Topics

Security, Governance, and Manageability

More questions from this topic