Examkin

Question

Difficulty: MediumInfrastructure as a Service (IaaS)

A research laboratory deploys a cluster of Azure Virtual Machines to run complex environmental simulations. The laboratory needs to control the network traffic allowed into these virtual machines. Is it true that under the Infrastructure as a Service (IaaS) model, Microsoft is responsible for configuring network security rules to block unauthorized traffic at the virtual network level?

Answer: Answer

Answer

False
In the Infrastructure as a Service (IaaS) model, the cloud provider (Microsoft) secures and maintains the physical infrastructure, physical networks, and host hypervisors. However, the customer is responsible for configuring the virtual networks, subnets, routing tables, and firewall/network security group rules to protect their virtual machines from unauthorized traffic.

Step-by-Step Solution

1
Identify the cloud service model referenced in the scenario.
The scenario describes deploying Azure Virtual Machines, which falls under the Infrastructure as a Service (IaaS) category.
Determining the correct service model is necessary to apply the appropriate shared responsibility boundaries.
2
Determine the division of responsibilities for networking security in an IaaS setup.
Under IaaS, Microsoft is responsible for the physical network and physical security of the datacenters. The customer is responsible for logical network configuration, including virtual networks, subnets, routing, and network security rules.
This establishes who controls traffic filters like Network Security Groups (NSGs) at the cloud resource level.
3
Evaluate the statement in the question against the established division of responsibilities.
Since configuring network security rules at the virtual network level is a customer responsibility, the claim that Microsoft is responsible is incorrect.
Because the statement incorrectly attributes a customer responsibility to Microsoft, the correct answer to the question must be False.

Key Concept

Infrastructure as a Service (IaaS) Shared Responsibility Model
Rate this question

Topics

Infrastructure as a Service (IaaS)

More questions from this topic