Examkin

Question

Difficulty: HardPlatform as a Service (PaaS)

An enterprise is migrating its web APIs to Azure App Service and its relational data to Azure SQL Database. To prepare for an upcoming security audit, the compliance officer is creating a matrix mapping the operational duties of the enterprise against those of Microsoft under the shared responsibility model. Which of the following correctly identifies the distribution of responsibilities for these Platform as a Service (PaaS) deployments?

  1. The enterprise is responsible for configuring application settings, managing data, and controlling user access, while Microsoft is responsible for patching the operating system and updating the database engine.Answer
  2. B
    The enterprise is responsible for patching the operating system and configuring application settings, while Microsoft is responsible for maintaining the physical hardware and managing user access.
  3. C
    Microsoft is responsible for managing application data, configuring API endpoints, and patching the database engine, while the enterprise is responsible only for physical security.
  4. D
    The enterprise is responsible for managing the underlying database engine, middleware, and network firewalls, while Microsoft is responsible for data encryption and user identity management.

Answer

The enterprise is responsible for configuring application settings, managing data, and controlling user access, while Microsoft is responsible for patching the operating system and updating the database engine.
In Platform as a Service (PaaS), the cloud provider (Microsoft) manages the underlying infrastructure, operating systems, and database engine software. This includes patching and updating. The customer (enterprise) is only responsible for the data stored, user access policies, and application configurations.

Step-by-Step Solution

1
Analyze the cloud deployment models being used in the scenario.
Azure App Service and Azure SQL Database are both classified as Platform as a Service (PaaS) offerings.
Identifying the cloud service model is necessary to apply the correct shared responsibility rules.
2
Determine customer responsibilities in the PaaS model.
The customer (enterprise) manages application settings, data, and user access permissions.
PaaS shifts infrastructure management to the provider, but the customer retains control over application-level components and data security.
3
Determine cloud provider (Microsoft) responsibilities in the PaaS model.
Microsoft manages physical security, hardware, operating system patching, and database engine maintenance.
The provider handles the platform runtime, middleware, OS, and underlying virtualization layers.

Key Concept

Under the Azure shared responsibility model for Platform as a Service (PaaS), Microsoft manages physical infrastructure, operating system patching, and middleware/database runtime maintenance, whereas the customer remains responsible for application configuration, data governance, and user access management.
Rate this question

Topics

Platform as a Service (PaaS)

More questions from this topic