Question

Difficulty: HardSecurity, Governance, and Manageability

A retail company is migrating its e-commerce platform to Azure and is designing its security, governance, and resource management strategy. The plan includes deploying a cloud database and organizing the associated resources. The IT team wants to minimize administrative overhead for operating system maintenance while ensuring deployment flexibility. Which of the following statements correctly describes the security, governance, or manageability characteristics of the proposed Azure deployment?

  1. A
    Choosing an Infrastructure as a Service (IaaS) database delegates operating system patching to Microsoft, while all resources must be deployed in the same region as their containing resource group.
  2. B
    Choosing a Platform as a Service (PaaS) database requires the customer to manage operating system updates, and administrative boundaries are established by nesting the database resource group inside the application resource group.
  3. Choosing a Platform as a Service (PaaS) database delegates operating system patching to Microsoft, and resources within a resource group can be deployed in regions different from the resource group's location.Answer
  4. D
    Choosing an IaaS database delegates database engine configuration and updates to Microsoft, and resources automatically inherit all metadata tags applied to their containing resource group.

Answer

Choosing a Platform as a Service (PaaS) database delegates operating system patching to Microsoft, and resources within a resource group can be deployed in regions different from the resource group's location.
The correct option accurately states that deploying a database in a PaaS model delegates operating system maintenance and patching tasks to Microsoft, reducing administrative overhead. It also correctly highlights that resources can be placed in a resource group regardless of regional differences, as a resource group's location only defines where its management metadata resides.

Step-by-Step Solution

1
Evaluate the database service models (IaaS vs PaaS) regarding operating system management and patching.
In a Platform as a Service (PaaS) model, Microsoft manages the operating system, runtime, and physical infrastructure, whereas in Infrastructure as a Service (IaaS), the customer is responsible for maintaining and patching the operating system.
This determines which model successfully minimizes the administrative overhead for operating system maintenance.
2
Analyze Azure resource group location and nesting constraints for governance.
Azure resources can be deployed in different geographic regions than their parent resource group, and resource groups cannot be nested inside other resource groups.
This evaluates the organizational flexibility and compliance restrictions of resource groups in Azure governance.

Key Concept

Shared responsibility model for database services and Azure resource group regional boundaries.
Estimated Time:2m 0s
Rate this question