Question

Difficulty: EasyShared Responsibility Model

A retail company is planning its cloud migration strategy to Microsoft Azure. The IT director wants to clarify the boundaries of the Shared Responsibility Model to ensure the team knows what tasks they must perform versus what Microsoft manages.

Match each administrative task on the left to the correct responsibility boundary on the right.

  • Patching the guest operating system of a web serverCustomer responsibility only in Infrastructure as a Service (IaaS)
  • Securing and managing customer data stored in the cloudCustomer responsibility in all cloud models (IaaS, PaaS, and SaaS)
  • Maintaining physical datacenter security and hardware hostsMicrosoft's responsibility in all cloud models (IaaS, PaaS, and SaaS)

Answer

Patching the guest operating system of a web server matches with Customer responsibility only in Infrastructure as a Service (IaaS). Securing and managing customer data stored in the cloud matches with Customer responsibility in all cloud models (IaaS, PaaS, and SaaS). Maintaining physical datacenter security and hardware hosts matches with Microsoft's responsibility in all cloud models (IaaS, PaaS, and SaaS).
The correct pairings map the administrative duties to their respective boundaries under the Shared Responsibility Model. Guest operating system patching is managed by the customer only in IaaS, data security is always a customer responsibility across all models, and physical security is always Microsoft's responsibility.

Step-by-Step Solution

1
Analyze the responsibility for guest operating system patching.
In IaaS, the customer manages the operating system. In PaaS and SaaS, the cloud provider manages it. This matches the definition of customer responsibility only in IaaS.
This helps isolate tasks that transition ownership between IaaS and PaaS.
2
Analyze the responsibility for securing and managing customer data.
Information and data security is always retained by the customer across all cloud deployment models.
This establishes the absolute boundary of customer data ownership.
3
Analyze the responsibility for physical security and hardware hosts.
Microsoft, as the cloud provider, is solely responsible for physical security and infrastructure maintenance.
This defines the foundational physical layer responsibility of the cloud provider.

Key Concept

Shared Responsibility Model
Rate this question