Examkin

Question

Difficulty: EasyShared Responsibility Model

A company currently hosts its custom collaboration portal and email system on several Azure Virtual Machines (IaaS). To minimize IT management effort, the company decides to migrate these services to Microsoft 365 (SaaS).

Which two of the following responsibilities will shift from being the responsibility of the customer to the responsibility of Microsoft as a result of this migration? (Select two.)

  1. Patching and updating the operating systemAnswer
  2. Maintaining and updating the collaboration software applicationAnswer
  3. C
    Securing and governing the customer's data and files stored in the portal
  4. D
    Ensuring the physical security of the datacenters housing the infrastructure

Answer

The responsibilities that shift from the customer to Microsoft are patching and updating the operating system, and maintaining and updating the collaboration software application.
In an Infrastructure as a Service (IaaS) model, the customer is responsible for maintaining and patching the operating system and managing the installed applications. In a Software as a Service (SaaS) model like Microsoft 365, Microsoft takes full responsibility for the operating system and application management. Therefore, both patching and updating the operating system and maintaining and updating the collaboration software application shift from the customer to Microsoft.

Step-by-Step Solution

1
Identify the starting model (IaaS) and target model (SaaS) in the migration scenario.
The company starts with Infrastructure as a Service (Virtual Machines) and moves to Software as a Service (Microsoft 365).
Understanding the transition boundaries allows us to compare customer vs. Microsoft responsibilities under each model.
2
Analyze each responsibility area under IaaS and SaaS.
Operating system and application maintenance are customer responsibilities in IaaS, but become Microsoft's responsibility in SaaS. Physical security is always Microsoft's responsibility, and data security is always the customer's responsibility.
This determines which specific tasks shift ownership during the transition.

Key Concept

The Shared Responsibility Model defines which security tasks are handled by the cloud provider (Microsoft) and which tasks are handled by the customer, varying based on the service type (IaaS, PaaS, or SaaS).
Estimated Time:45s
Rate this question

Topics

Shared Responsibility Model

More questions from this topic