Examkin

Question

Difficulty: Very hardPlatform as a Service (PaaS)

A financial institution migrates its on-premises transactional database to an Azure SQL Database elastic pool. A security auditor asserts that under the Platform as a Service (PaaS) model, Microsoft assumes full liability and operational responsibility for implementing network isolation, configuring database-level firewall rules, and managing database users, thereby completely eliminating the customer's security administration tasks for these resources. Is this statement true or false?

Answer: Answer

Answer

False
The statement is false because the shared responsibility model for Platform as a Service (PaaS) dictates that the customer is still responsible for configuring database firewalls and managing database-level users and access permissions, even though Microsoft manages the underlying operating system and hardware.

Step-by-Step Solution

1
Analyze the service model described in the scenario.
The service is Azure SQL Database, which is a Platform as a Service (PaaS) offering.
PaaS services offload infrastructure management but retain shared responsibilities for security and configuration.
2
Evaluate the division of responsibilities for network controls and user management in PaaS.
Under the Azure shared responsibility model, network controls (firewalls, endpoints) are shared, and identity/directory infrastructure is shared, while accounts/identities (database users) and data remain the customer's sole responsibility.
This determines whether the auditor's assertion that Microsoft handles all network firewall configuration and user management is correct.
3
Determine the truth value of the auditor's statement.
The statement claims Microsoft is fully responsible for database firewalls and user management, which is false.
Since the customer must still configure firewall rules and manage database users, the statement is incorrect.

Key Concept

PaaS Shared Responsibility Model
Estimated Time:1m 30s
Rate this question

Topics

Platform as a Service (PaaS)

More questions from this topic