Examkin

Question

Difficulty: MediumInfrastructure as a Service (IaaS)

A university IT department is setting up a new lab environment on Azure to support a course on advanced network security. The environment requires students to install custom firewall applications, configure operating system settings, and run legacy diagnostic tools. The department deploys Azure Virtual Machines for this setup.

Under the Microsoft Azure shared responsibility model for this Infrastructure as a Service (IaaS) deployment, which of the following tasks are the responsibility of the university? (Select TWO.)

  1. Applying security patches to the guest operating systemAnswer
  2. Installing and configuring the custom firewall applicationsAnswer
  3. C
    Maintaining the physical servers and hypervisors hosting the virtual machines
  4. D
    Managing the physical security of the Azure datacenters

Answer

The customer is responsible for applying security patches to the guest operating system and installing and configuring the custom firewall applications.
Under the shared responsibility model for Infrastructure as a Service (IaaS), the customer assumes responsibility for the guest operating system and all software layer configurations. Therefore, patching the guest operating system and installing the custom firewall applications are tasks managed by the customer. Microsoft retains responsibility for the underlying physical infrastructure, virtualization hypervisor, and physical datacenter facilities.

Step-by-Step Solution

1
Identify the cloud service category for the deployed resource (Azure Virtual Machines).
Azure Virtual Machines represent an Infrastructure as a Service (IaaS) offering.
Understanding the service model is required to apply the corresponding shared responsibility boundaries.
2
Recall the customer's and cloud provider's boundaries of responsibility in an IaaS model.
In IaaS, the customer manages the guest operating system, applications, data, and configurations, whereas the cloud provider manages host virtualization, physical servers, networking, and datacenters.
This division determines which tasks in the options belong to the customer.
3
Evaluate the choices to select the two tasks that fall under customer responsibility.
Patching the guest operating system and configuring the custom firewall applications are customer tasks. Server maintenance and physical datacenter security are cloud provider tasks.
To choose the two correct options matching the customer's duties.

Key Concept

Shared responsibility model in Infrastructure as a Service (IaaS)
Rate this question

Topics

Infrastructure as a Service (IaaS)

More questions from this topic