Examkin

Question

Difficulty: Very hardSecurity, Governance, and Manageability

An organization is planning to deploy workloads to Azure while ensuring compliance with its security and governance policies. The administration creates a resource group in the East US region. A developer then deploys an Azure Virtual Machine (Infrastructure as a Service) and an Azure SQL Database (Platform as a Service) into this resource group, but specifies the location of both resources as West US. Which of the following statements correctly describes the outcome of this deployment and the allocation of operating system (OS) patching responsibilities?

  1. The deployment succeeds because resources can reside in a different region than their parent resource group; the customer is responsible for patching the Virtual Machine OS, while Microsoft is responsible for patching the SQL Database OS.Answer
  2. B
    The deployment fails because all resources must inherit and match the geographical region of the resource group they reside in, meaning the Virtual Machine and SQL Database must be deployed in East US.
  3. C
    The deployment succeeds because resources can reside in a different region than their parent resource group; however, Microsoft is responsible for patching the OS for both the Virtual Machine and the SQL Database.
  4. D
    The deployment succeeds because resources can reside in a different region than their parent resource group; however, the customer is responsible for patching the OS for both the Virtual Machine and the SQL Database.

Answer

The deployment succeeds because resources can reside in a different region than their parent resource group; the customer is responsible for patching the Virtual Machine OS, while Microsoft is responsible for patching the SQL Database OS.
The correct option correctly states that Azure resource groups only specify where resource metadata is stored, allowing resources to be deployed in different regions. Additionally, it properly identifies that OS patching for Virtual Machines (IaaS) is the customer's responsibility, while OS patching for Azure SQL Database (PaaS) is managed by Microsoft.

Step-by-Step Solution

1
Determine if the resource group location restricts the location of resources inside it.
Resources do not inherit their resource group's location and can be deployed to different regions.
The resource group location specifies where the metadata of the resource group is stored, not where the actual resources must run.
2
Analyze OS patching responsibility for Azure Virtual Machines (IaaS).
The customer is responsible for managing and patching the OS.
Under the shared responsibility model, IaaS leaves control and management of the OS, middleware, and applications to the customer.
3
Analyze OS patching responsibility for Azure SQL Database (PaaS).
Microsoft is responsible for managing and patching the OS.
Under PaaS, the physical hardware, virtualization, OS, and database engine are fully managed by the cloud provider, shielding the customer from patching tasks.

Key Concept

Azure Resource Group Location vs Resource Location and Shared Responsibility Model across IaaS and PaaS
Estimated Time:2m 0s
Rate this question

Topics

Security, Governance, and Manageability

More questions from this topic